last executing test programs: 16m53.623138489s ago: executing program 0 (id=1): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x1, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) 16m52.124418269s ago: executing program 0 (id=16): memfd_create(0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x7, 0xab, &(0x7f0000000140)=""/171, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) vmsplice(r1, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001480)="ef0ce9db008c807664427d35ddd2f35b610eec7e1bac5a2d1baba40c2c307549714d2c6cab320770b81b739fd66a1d670ccb3d4da7b5a01eeac250b4d03806fb31c28a45cbd40c53461c5a3d97c844e421045e29b8b4", 0x56}, {&(0x7f0000001500)}, {&(0x7f0000001580)}, {&(0x7f0000001640)="f74c01dd9ab775aede0fed53e1620962fbabe198d309961a6370d2c60efe93e4fa3d773f62b1c380c4dc2b5590461b4f076e15232e8e770c50eb031382eb94d6e5542bb17039518a1f4cccc9b70330307c24bf893f60db6dfbaef5398c93482f9ce5d1c6249d4adc95d7581de1ae41bdd60ccd4b69b04fe2f4550f0a5084135b88c93b71ded6234cb8d46810d5dbfefd13ad938f19f42099548dbb17decf15a47ab91e0c0a72336ff15e31f8f78fb44ad628bede0641b99ada4c64716bd7fc15aa3a6da4421a99f83d406ee11899f72889d49af2b2f255885c8e27afcfb33f9b9cbb934196c167138e7dfdb88971b495", 0xf0}, {&(0x7f0000001740)="5c65b590a7608b5e9dd002a66312b3b1d7d032ff9edd04593c0dc776b8022e557330d11640db55560def8451244274908c7d6b1b2bc45a44aec46bcf5cf688349446c9301c856c6e7be1607c362dac6fd6c56436bccddce186ee3bb50425967393e923f59bf9756146c4e869199026385c902291ce5597df82742150fb6138ce34b4fa6077b2c3521c9f", 0x8a}], 0x6, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x1b, 0x0}, 0x3600c055) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16m47.467406706s ago: executing program 0 (id=20): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) 16m45.980734301s ago: executing program 0 (id=24): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x1}, {0x1b, 0x1}, {0x4}, {0x16, 0x1}, {0x24, 0x1}, {0x1}, {0x30, 0x1}, {0xf}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 16m40.284873202s ago: executing program 0 (id=31): unshare(0x6a040000) 16m24.8725516s ago: executing program 32 (id=31): unshare(0x6a040000) 16m16.756436833s ago: executing program 4 (id=60): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 16m12.191876767s ago: executing program 4 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000110) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES64], 0x0, 0x2002003, 0x0, 0x0, 0x40f00}, 0x94) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x0, 0xffffffffffff52e9, r1, r1, 0x7}) socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0x3}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xd66) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000df2508000000d94e420000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c5}, 0x40000) dup3(r6, r5, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10c, 0x0, &(0x7f0000001840)=[@free_buffer, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x1801, 0x2}, @fda={0x66646185, 0x0, 0x2, 0x30}, @fda={0x66646185, 0xa, 0x2, 0x2}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x40}, @request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x1, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x400}, @acquire={0x40046305, 0x2}, @decrefs, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001780)={@fda={0x66646185, 0x1, 0x1, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/4096, 0x1000, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f00000016c0)=""/147, 0x93, 0x0, 0x23}}, &(0x7f0000001800)={0x0, 0x20, 0x48}}}, @register_looper], 0x0, 0x1000000, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3a}, 0x94) 16m8.175104392s ago: executing program 4 (id=67): stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="c820010018000000000000005700000057000000050000000a0000000000000802000000100000000300000f030000000500000000800000570e000002000000010000000400000002000000030000000f000000670bde010000000000000204000000070000000000001205000000000061302e00"], &(0x7f00000005c0)=""/60, 0x75, 0x3c, 0x1, 0x4}, 0x28) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 16m6.637951315s ago: executing program 4 (id=70): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) fcntl$getownex(r4, 0x10, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000080)={0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501242, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) 16m2.105416132s ago: executing program 4 (id=75): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1401fcdb8c25000000000000000000377402007b517f0d2ff6acca5bde6fd80ed7cde05de140cbfdc3d6127fdfe35d3c57c2540d"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8010) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x400, 0x2, 0x180, 0x0, 0x1, 0xf1, 0xfd2c, 0x8000000000000, 0x2, 0x6, 0x57c673b4, 0x8000000000000001, 0x200000f46, 0x100000000, 0xbdb], 0xffff1001, 0x24000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x1000000, 0x1}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4040004, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 15m58.243190751s ago: executing program 4 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xeadf, 0x800, 0x0, 0x161, 0x0, 0x0}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010025bd700000dcdf250900000030000380140002"], 0x44}}, 0x48040) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) io_uring_enter(r3, 0xeed, 0xeed, 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendfile(r2, r5, 0x0, 0x6) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r7, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 15m42.071783984s ago: executing program 33 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xeadf, 0x800, 0x0, 0x161, 0x0, 0x0}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010025bd700000dcdf250900000030000380140002"], 0x44}}, 0x48040) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) io_uring_enter(r3, 0xeed, 0xeed, 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendfile(r2, r5, 0x0, 0x6) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r7, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 2m34.099480884s ago: executing program 5 (id=1074): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = timerfd_create(0x9, 0x80800) timerfd_settime(r3, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='encrypted\x00', 0x0) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x1e, 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB], 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000200)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 2m28.872058357s ago: executing program 5 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(0x0, 0x21) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000140)='./file1\x00') 2m25.844541679s ago: executing program 5 (id=1084): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 2m14.107723799s ago: executing program 5 (id=1100): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x62201) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0xd) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000780)={0x5, 0x1000000, [{0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x6, 0xffffffff}, {0x6, 0x4, 0x0, 0x8001, 0x29, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0x4, 0xe5f, 0x2, 0x30e, 0x8001, 0x6, 0x80000001}, {0xa, 0x2bb, 0x2, 0xd, 0x3, 0x7ff, 0x400}]}) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) 2m7.914732653s ago: executing program 5 (id=1104): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x8001, 0x20}, 0x18) renameat2(r6, &(0x7f0000000480)='./file1/file2\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) keyctl$set_reqkey_keyring(0xe, 0x4) 2m6.173023002s ago: executing program 5 (id=1109): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = timerfd_create(0x9, 0x80800) timerfd_settime(r3, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='encrypted\x00', 0x0) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x1e, 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB], 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000200)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1m50.058866929s ago: executing program 34 (id=1109): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = timerfd_create(0x9, 0x80800) timerfd_settime(r3, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='encrypted\x00', 0x0) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x1e, 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB], 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000200)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 39.813119551s ago: executing program 3 (id=1202): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) semget(0x1, 0x4, 0x69c) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r7, 0x0, &(0x7f0000000180)) 37.674390472s ago: executing program 6 (id=1204): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 37.66977433s ago: executing program 2 (id=1205): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x8001, 0x20}, 0x18) renameat2(r6, &(0x7f0000000480)='./file1/file2\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) keyctl$set_reqkey_keyring(0xe, 0x4) 37.46633251s ago: executing program 3 (id=1207): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x321203, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x5b7e8000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xd8e, 0xac, 0x5}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8, 0x7, 0x3a4, 0x3ff}, {0x7, 0x7, 0xa, 0x5}}}, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[], 0x266440) sched_setscheduler(0x0, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) 34.955111135s ago: executing program 2 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x4, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc080) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x1dc, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {}, {0xf, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x1b0, 0x2, [@TCA_FW_ACT={0x1a4, 0x4, [@m_sample={0x88, 0xe, 0x0, 0x0, {{0xb}, {0xfffffffffffffeaa, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x80}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xa5}]}, {0x33, 0x6, "2788a8acdb1b9e6c546875cf09164e4d4739207a4fd783bb4dbbccfb5e154f5af8eb07914692ca8c8672a29db144f3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x118, 0x15, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4, 0x1, 0x7, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x21, 0xc, 0x0, 0x1, 0x18000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xea2d}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x588, 0x7f, 0x6, 0x8, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x74, 0x6, "a09aabc741d7623b0c10ae2a16f9d8fc8983fd89e1c509eb2668b30cb70490abfb5fca3f08ca4fa163809e1897bb3b4acde1f5db9a8326309e4afdf6d9e0d793cc306221b59f3aff5d39eb258484318ac29358dd69381c1fce8c71243f550d73a63a0a0307bbd5a0053f723bcb6d6c75"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0x6}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x62004038}, 0x800) socket$nl_sock_diag(0x10, 0x3, 0x4) process_vm_readv(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1, &(0x7f00000026c0)=[{&(0x7f0000000480)=""/85, 0x55}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/161, 0xa1}, {&(0x7f0000002480)=""/191, 0xbf}, {&(0x7f0000002540)=""/24, 0x18}, {&(0x7f0000002580)=""/160, 0xa0}, {&(0x7f0000002640)=""/90, 0x5a}], 0x7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000002060101000000000073fd000000000905000400000000000900020073797a32000000000c00078008001240000000000500050002000000050001000600000010000300686173683a69702c6d616300"], 0x54}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="6b26d18434d9e9642a82a6015d1c4611644ff0ba2c2444986d96d38916ec19bd9fd998246c6e9ea9d680a90612e50f00"/61], 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) socket(0x10, 0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000cab000)=0x6f) 34.864909399s ago: executing program 6 (id=1209): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x9, r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x8001, 0x20}, 0x18) renameat2(r7, &(0x7f0000000480)='./file1/file2\x00', r7, &(0x7f00000004c0)='./file1\x00', 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000002a82, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) 32.642262676s ago: executing program 6 (id=1211): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x8000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x800) clock_getres(0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c240000b7299696fe1008", @ANYRESOCT=r3, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) clock_nanosleep(0x4, 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x4c, 0x200, 0x258, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000240)=0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0x400, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000006740)=ANY=[@ANYBLOB="12010002312424409911230016580102030109023d0001070090000904df0724ffffff8e09050f01000408810509050c0040000626020905050040000201ee07055248aeedd2090505000002090904"], 0x0) 30.993343556s ago: executing program 1 (id=1212): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x8001, 0x20}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) 29.064911525s ago: executing program 1 (id=1213): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 27.384198215s ago: executing program 3 (id=1214): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) 26.756671s ago: executing program 2 (id=1215): r0 = semget$private(0x0, 0x4, 0x10) semctl$GETVAL(r0, 0x2, 0xc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$null(0xffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990009000000440000000800020001000000894d8caea7af86ffb47e144d4d607047a06322f817673a69e635874c3c666b0a5a9a7dc776dcc9608efbb56b1e32e744c0c34335b20f713b1019c940bc1f4cd5986ab0946d527457718f30f63b72fd1ce4641d2bec2ea0cba02a12671658f1473b67cb330c7990e5a0200cf7d316df8376fcf25a2eac98e6b7a0297102f36742c0d4400d0b731e0eecf850cad70f1bc1e5ad8ea442759b9bfebe482350fb9d1fdf97cef01d88aca74bb01ba7e216fee36a39165fbf13e1d6effe956836f9f210233e5cdc39fbd1a77ea650c7cff34109493f4e200b5f9c181b03f0"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) semop(r0, &(0x7f0000000080)=[{0x0, 0x6, 0x800}, {0x4, 0x401, 0x1000}], 0x2) 25.667840961s ago: executing program 3 (id=1216): r0 = socket(0x10, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 25.452274064s ago: executing program 6 (id=1217): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000480)}) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0xfc}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000280)={0x2, 0x2}, 0x2) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000e9ae43e778589a080045"], 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x9, 0xff, 0x4000008, 0xffffffe7, 0x6}}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000008c0), 0x448800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000007c0)="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", 0xfd, r4}, 0x68) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f00000006c0)={&(0x7f0000000640)=[{&(0x7f0000000240)="14af020fb38aa4de8c7d9c671e552692dcc17f5ce9180a20484fb85ded037115c42830bfa42ec995a39fe883171f3bc3c2d3c74f85b3f3d57dca084c3ceec24193c64456642c3208938b7798723194fe8e2f8c41a60411944400ca191b6fee03bc7a969b4fdd2aa5237a56aae01d6be836ba74e8b400191e04bc9b6559ec63e155aa0e5f0c0f903ba39e7a3722430b5e1a91212dbfe00751ac8ef8b1047ec4e9038d5b584b", 0xa5}, {&(0x7f0000000300)="69c53831ad3c9dd2af49df71c3c2961cd6351376a13fa3273e7de019462e0b762c88017e03a5d57e468d87", 0x2b}, {&(0x7f0000000580)="1a3df273297cd4318ac6674efc58dd", 0xf}, {&(0x7f00000005c0)="2f3363537592fc60a6b75dd4b6e4bff87a9bcdaada9da9683847c24127989b057792d10b7078ed7e8867aa23148df43df92358efa14697c6aa883abcfb29bf4acf981726", 0x44}], 0x4, 0x8e1, 0x0, 0x3ff, 0x1, 0x100, 0x1, 0x81}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x3fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4c080) accept4$inet(r6, &(0x7f0000000740)={0x2, 0x0, @multicast2}, &(0x7f0000000780)=0x10, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) 24.796963384s ago: executing program 2 (id=1218): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0702, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r2}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 24.046287113s ago: executing program 3 (id=1219): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x9, r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x8001, 0x20}, 0x18) renameat2(r7, &(0x7f0000000480)='./file1/file2\x00', r7, &(0x7f00000004c0)='./file1\x00', 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000002a82, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) 22.17436824s ago: executing program 1 (id=1220): r0 = semget$private(0x0, 0x4, 0x10) semctl$GETVAL(r0, 0x2, 0xc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$null(0xffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990009000000440000000800020001000000894d8caea7af86ffb47e144d4d607047a06322f817673a69e635874c3c666b0a5a9a7dc776dcc9608efbb56b1e32e744c0c34335b20f713b1019c940bc1f4cd5986ab0946d527457718f30f63b72fd1ce4641d2bec2ea0cba02a12671658f1473b67cb330c7990e5a0200cf7d316df8376fcf25a2eac98e6b7a0297102f36742c0d4400d0b731e0eecf850cad70f1bc1e5ad8ea442759b9bfebe482350fb9d1fdf97cef01d88aca74bb01ba7e216fee36a39165fbf13e1d6effe956836f9f210233e5cdc39fbd1a77ea650c7cff34109493f4e200b5f9c181b03f0"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) semop(r0, &(0x7f0000000080)=[{0x0, 0x6, 0x800}, {0x4, 0x401, 0x1000}], 0x2) 21.04122433s ago: executing program 3 (id=1221): creat(&(0x7f0000000100)='./file0\x00', 0x1ca) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000800), 0x5, 0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 21.026843346s ago: executing program 6 (id=1222): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x94983, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(r2, 0x563) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) close_range(r2, r2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x129001, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x0, 0x6, 0x1, 0x3, 0xd, 0xe8, 0x5, 0x0, 0x6d, 0x3, 0x9, 0x6, 0x8, 0x1, 0x51}}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCGSID(r0, 0x5429, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000180), 0x1003) 20.912437381s ago: executing program 2 (id=1223): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) 20.757876713s ago: executing program 1 (id=1224): stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x75, 0x0, 0x1, 0x4}, 0x28) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x10, &(0x7f0000000080)=ANY=[], 0x0, 0xad, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a80), 0x0, 0x10, 0x81}, 0x94) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa6) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3f}) 18.980395878s ago: executing program 1 (id=1225): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/111) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000025c0), &(0x7f0000000600), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) 16.442298838s ago: executing program 2 (id=1226): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201504"], 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 15.470944735s ago: executing program 1 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x3a, 0x400, 0x70bd25, 0x25dfdbfd, {0xd}, [@nested={0x8, 0x3e, 0x0, 0x1, [@nested={0x4, 0x154}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4010) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r8 = gettid() r9 = getpid() rt_tgsigqueueinfo(r9, r8, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xfffffaa0}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 15.391937559s ago: executing program 6 (id=1228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000800)=0x2, 0x80, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)=@newsa={0x150, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@remote, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@private1, 0x4d6, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x1ff, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x7, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(des3_ede)\x00'}, 0xc0, "6e000b000000002000000000190000000000feffff7f001e"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x20044050) 5.649172608s ago: executing program 35 (id=1221): creat(&(0x7f0000000100)='./file0\x00', 0x1ca) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000800), 0x5, 0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.122747267s ago: executing program 36 (id=1226): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201504"], 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 71.224689ms ago: executing program 37 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x3a, 0x400, 0x70bd25, 0x25dfdbfd, {0xd}, [@nested={0x8, 0x3e, 0x0, 0x1, [@nested={0x4, 0x154}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4010) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r8 = gettid() r9 = getpid() rt_tgsigqueueinfo(r9, r8, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xfffffaa0}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 38 (id=1228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000800)=0x2, 0x80, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)=@newsa={0x150, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@remote, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@private1, 0x4d6, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x1ff, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x7, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(des3_ede)\x00'}, 0xc0, "6e000b000000002000000000190000000000feffff7f001e"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x20044050) kernel console output (not intermixed with test programs): 422837][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.422862][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.458521][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.458547][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.657018][ T5824] veth1_macvtap: left promiscuous mode [ 586.657117][ T5824] veth0_macvtap: left promiscuous mode [ 586.657361][ T5824] veth1_vlan: left promiscuous mode [ 586.657523][ T5824] veth0_vlan: left promiscuous mode [ 587.362979][ T9197] binder: 9196:9197 ioctl c00c6211 0 returned -14 [ 587.786635][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 587.835834][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 588.605202][ T821] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 589.742289][ T5727] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 589.955154][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 589.957247][ T821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.957295][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.957322][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 589.957341][ T821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 589.957363][ T821] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.958847][ T821] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 589.958871][ T821] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 589.958889][ T821] usb 3-1: Manufacturer: syz [ 589.977746][ T821] usb 3-1: config 0 descriptor?? [ 590.005178][ T5727] usb 4-1: device descriptor read/64, error -71 [ 590.255222][ T5727] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 590.349186][ T9011] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 590.387280][ T5727] usb 4-1: device descriptor read/64, error -71 [ 590.402920][ T821] rc_core: IR keymap rc-hauppauge not found [ 590.402938][ T821] Registered IR keymap rc-empty [ 590.403093][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.404261][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.425165][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.479263][ T9011] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 590.480137][ T821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 590.504101][ T5727] usb usb4-port1: attempt power cycle [ 590.530688][ T821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 590.561941][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.585671][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.605480][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.645555][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.648575][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.665318][ T9011] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 590.676506][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.695238][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.726179][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.745447][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.760176][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.775346][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.794421][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 590.811607][ T821] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 590.811679][ T821] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 590.873413][ T821] usb 3-1: USB disconnect, device number 25 [ 590.875476][ T5727] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 590.897390][ T5727] usb 4-1: device descriptor read/8, error -71 [ 591.137066][ T5727] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 591.158399][ T5727] usb 4-1: device descriptor read/8, error -71 [ 591.268185][ T5727] usb usb4-port1: unable to enumerate USB device [ 591.327284][ T9011] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 591.381381][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 591.575928][ T8912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 591.619886][ T8912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 591.621599][ T8912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 591.674784][ T8912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 591.716192][ T8912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 591.761050][ T8912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 591.776945][ T8912] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 591.834519][ T8912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.576089][ T5824] bridge_slave_1: left allmulticast mode [ 593.576123][ T5824] bridge_slave_1: left promiscuous mode [ 593.576383][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.718691][ T5824] bridge_slave_0: left allmulticast mode [ 593.718725][ T5824] bridge_slave_0: left promiscuous mode [ 593.718998][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.925219][ T5727] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 594.077821][ T5727] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.077847][ T5727] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.079946][ T5727] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 594.079972][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.079984][ T5727] usb 4-1: Product: syz [ 594.079991][ T5727] usb 4-1: Manufacturer: syz [ 594.079998][ T5727] usb 4-1: SerialNumber: syz [ 594.083628][ T5727] usb 4-1: config 0 descriptor?? [ 595.605738][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.726033][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.810782][ T5824] bond0 (unregistering): Released all slaves [ 596.130196][ T9] usb 4-1: USB disconnect, device number 34 [ 596.164789][ T9268] binder: 9267:9268 ioctl c00c6211 0 returned -14 [ 597.775290][ T5824] hsr_slave_0: left promiscuous mode [ 597.816107][ T5824] hsr_slave_1: left promiscuous mode [ 597.816777][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.845945][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.645294][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 599.675626][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 599.706787][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 600.009952][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 600.015461][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 600.015488][ T43] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 600.015513][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.018576][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.049703][ T43] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 600.049731][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.049751][ T43] usb 4-1: Product: syz [ 600.049764][ T43] usb 4-1: Manufacturer: syz [ 600.049778][ T43] usb 4-1: SerialNumber: syz [ 600.068798][ T43] usb 4-1: config 0 descriptor?? [ 600.510740][ T43] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 600.510842][ T43] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 600.543548][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.587074][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.593175][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.689948][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.690182][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.731040][ T8912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.928382][ T8912] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.971944][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.972088][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.994710][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.994934][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.530676][ T8870] usb 4-1: USB disconnect, device number 35 [ 602.905960][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 602.915673][ T9295] binder: 9290:9295 ioctl c0285840 200000000000 returned -22 [ 604.785500][ T5615] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 605.561217][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 605.813380][ T9309] loop7: detected capacity change from 0 to 7 [ 605.819412][ T9305] ALSA: seq fatal error: cannot create timer (-19) [ 605.841877][ C0] blk_print_req_error: 5 callbacks suppressed [ 605.841894][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.841921][ C0] buffer_io_error: 5 callbacks suppressed [ 605.841931][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 605.844188][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.844219][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 605.844592][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.844617][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 606.516525][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.516555][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 606.542183][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.542217][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 606.543921][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.543942][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 606.547165][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.547194][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 606.575214][ T9309] ldm_validate_partition_table(): Disk read failed. [ 606.575876][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.575906][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 606.601252][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.601287][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 606.601791][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.601817][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 606.607635][ T9309] Dev loop7: unable to read RDB block 0 [ 606.613052][ T9309] loop7: unable to read partition table [ 606.613269][ T9309] loop7: partition table beyond EOD, truncated [ 606.613298][ T9309] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 606.701506][ T9308] netlink: 'syz.3.579': attribute type 49 has an invalid length. [ 607.610854][ T9293] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 608.039196][ T9326] binder: 9324:9326 ioctl c00c6211 0 returned -14 [ 608.141613][ T9011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.275258][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 609.425224][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 609.427887][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.427911][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 609.430423][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 609.430451][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 609.430471][ T31] usb 4-1: Manufacturer: syz [ 609.436228][ T31] usb 4-1: config 0 descriptor?? [ 610.721737][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 610.777691][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 610.779180][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 610.808790][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 610.838261][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.764121][ T8870] usb 4-1: USB disconnect, device number 36 [ 612.040450][ T9011] veth0_vlan: entered promiscuous mode [ 612.876276][ T59] Bluetooth: hci3: command tx timeout [ 613.334799][ T9011] veth1_vlan: entered promiscuous mode [ 613.964435][ T9011] veth0_macvtap: entered promiscuous mode [ 613.990929][ T9011] veth1_macvtap: entered promiscuous mode [ 614.128969][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.175223][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.203126][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.203327][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.203358][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.203384][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.421917][ T59] Bluetooth: hci3: command tx timeout [ 616.046401][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.046428][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.165510][ T13] bridge_slave_1: left allmulticast mode [ 616.165533][ T13] bridge_slave_1: left promiscuous mode [ 616.165698][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.309705][ T13] bridge_slave_0: left allmulticast mode [ 616.309730][ T13] bridge_slave_0: left promiscuous mode [ 616.309877][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.946217][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.986059][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.066654][ T13] bond0 (unregistering): Released all slaves [ 617.292418][ T5811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.292437][ T5811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.405175][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 617.425134][ T5615] Bluetooth: hci3: command tx timeout [ 617.595175][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 617.615643][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.615668][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 617.616846][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 617.616872][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 617.616891][ T9] usb 3-1: Manufacturer: syz [ 617.675744][ T9] usb 3-1: config 0 descriptor?? [ 617.855936][ T13] hsr_slave_0: left promiscuous mode [ 617.885340][ T13] hsr_slave_1: left promiscuous mode [ 617.886012][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.923882][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.895849][ T13] team0 (unregistering): Port device team_slave_1 removed [ 618.938372][ T13] team0 (unregistering): Port device team_slave_0 removed [ 619.553257][ T9348] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.554997][ T5615] Bluetooth: hci3: command tx timeout [ 619.558807][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.558982][ T9348] bridge_slave_0: entered allmulticast mode [ 619.561352][ T9348] bridge_slave_0: entered promiscuous mode [ 619.592337][ T9348] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.593319][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.593457][ T9348] bridge_slave_1: entered allmulticast mode [ 619.598995][ T9348] bridge_slave_1: entered promiscuous mode [ 619.698164][ T9348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.702141][ T9348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.761315][ T9348] team0: Port device team_slave_0 added [ 619.771005][ T9348] team0: Port device team_slave_1 added [ 619.859165][ T9348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.859181][ T9348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.859204][ T9348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.861203][ T9348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.861216][ T9348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.861239][ T9348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.033978][ T9348] hsr_slave_0: entered promiscuous mode [ 620.041651][ T9348] hsr_slave_1: entered promiscuous mode [ 620.042542][ T9348] debugfs: 'hsr0' already exists in 'hsr' [ 620.042565][ T9348] Cannot create hsr debugfs directory [ 620.187034][ T820] usb 3-1: USB disconnect, device number 26 [ 621.394718][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.429782][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.433000][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.441287][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.442068][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 623.431562][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 623.512580][ T5615] Bluetooth: hci5: command tx timeout [ 624.044209][ T9449] netlink: 'syz.2.606': attribute type 49 has an invalid length. [ 624.238573][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.238639][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.587477][ T5615] Bluetooth: hci5: command tx timeout [ 625.741353][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.088190][ T5332] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 626.384357][ T5332] usb 2-1: Using ep0 maxpacket: 32 [ 626.921096][ T5332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.921114][ T5332] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 626.921127][ T5332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 626.923226][ T5332] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 626.923254][ T5332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.923273][ T5332] usb 2-1: Product: syz [ 626.923280][ T5332] usb 2-1: Manufacturer: syz [ 626.923288][ T5332] usb 2-1: SerialNumber: syz [ 626.973590][ T5332] usb 2-1: config 0 descriptor?? [ 628.128560][ T5615] Bluetooth: hci5: command tx timeout [ 628.135385][ T5332] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 628.135426][ T5332] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 628.637275][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 628.924479][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.447346][ T821] usb 2-1: USB disconnect, device number 23 [ 629.533432][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.594851][ T9501] 9pnet_fd: Insufficient options for proto=fd [ 630.151817][ T5615] Bluetooth: hci5: command tx timeout [ 632.600179][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.221519][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.221880][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.222066][ T9425] bridge_slave_0: entered allmulticast mode [ 633.266324][ T9425] bridge_slave_0: entered promiscuous mode [ 633.801445][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.868236][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.868476][ T9425] bridge_slave_1: entered allmulticast mode [ 633.889182][ T9425] bridge_slave_1: entered promiscuous mode [ 633.980826][ T9425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.001689][ T9425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.127773][ T9425] team0: Port device team_slave_0 added [ 634.152321][ T9425] team0: Port device team_slave_1 added [ 634.247323][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.247337][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.247356][ T9425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.290239][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.290255][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.290280][ T9425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.992325][ T9425] hsr_slave_0: entered promiscuous mode [ 635.002736][ T9425] hsr_slave_1: entered promiscuous mode [ 635.003626][ T9425] debugfs: 'hsr0' already exists in 'hsr' [ 635.003649][ T9425] Cannot create hsr debugfs directory [ 637.632609][ T13] bridge_slave_1: left allmulticast mode [ 637.632635][ T13] bridge_slave_1: left promiscuous mode [ 637.632845][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.809230][ T13] bridge_slave_0: left allmulticast mode [ 637.809262][ T13] bridge_slave_0: left promiscuous mode [ 637.809502][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.811467][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 639.817955][ T9613] binder: 9611:9613 ioctl c0285840 200000000000 returned -22 [ 644.235975][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.276003][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.298504][ T13] bond0 (unregistering): Released all slaves [ 644.499996][ T36] audit: type=1326 audit(1780632381.460:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9640 comm="syz.2.632" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1ecce59 code=0x0 [ 644.503513][ T9639] binder: 9637:9639 ioctl c00c6211 0 returned -14 [ 645.624959][ T9348] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 645.687995][ T9348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.747650][ T9348] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 645.811658][ T9348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.971839][ T9348] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 646.618511][ T9348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.524194][ T9348] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 648.561078][ T9348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.155198][ T8862] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 649.215246][ T13] hsr_slave_0: left promiscuous mode [ 649.255260][ T13] hsr_slave_1: left promiscuous mode [ 649.255930][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.255947][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.305148][ T8862] usb 4-1: Using ep0 maxpacket: 16 [ 649.306618][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.306639][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.321713][ T8862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.321766][ T8862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 649.321787][ T8862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 649.323064][ T8862] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 649.323089][ T8862] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 649.323108][ T8862] usb 4-1: Manufacturer: syz [ 649.329911][ T8862] usb 4-1: config 0 descriptor?? [ 649.456439][ T13] veth1_macvtap: left promiscuous mode [ 649.458414][ T13] veth0_macvtap: left promiscuous mode [ 649.458558][ T13] veth1_vlan: left promiscuous mode [ 649.458649][ T13] veth0_vlan: left promiscuous mode [ 650.106726][ T13] team0 (unregistering): Port device team_slave_1 removed [ 650.145770][ T13] team0 (unregistering): Port device team_slave_0 removed [ 650.990492][ T9348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.081567][ T9348] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.130390][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.130603][ T5811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.163100][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.163231][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.950422][ T9] usb 4-1: USB disconnect, device number 37 [ 652.693031][ T9425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 654.031048][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 654.125626][ T9425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 654.462592][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.478811][ T9425] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 654.544093][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.561161][ T9425] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 654.612653][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.983451][ T9735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.011127][ T5615] Bluetooth: hci1: unexpected event for opcode 0x080f [ 655.053970][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.114764][ T9425] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.161578][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.161704][ T9316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.178281][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.178789][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.234081][ T9348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.275588][ T5727] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 655.445496][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 655.448224][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.448256][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.448309][ T5727] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 655.448332][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.461798][ T5727] usb 3-1: config 0 descriptor?? [ 655.473495][ T5727] hub 3-1:0.0: USB hub found [ 655.682117][ T5727] hub 3-1:0.0: 1 port detected [ 655.931385][ T5727] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 655.931411][ T5727] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 655.977699][ T5727] usbhid 3-1:0.0: can't add hid device: -71 [ 655.977824][ T5727] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 657.286013][ T5727] usb 3-1: USB disconnect, device number 27 [ 657.294312][ T9348] veth0_vlan: entered promiscuous mode [ 657.321995][ T9348] veth1_vlan: entered promiscuous mode [ 657.463951][ T9348] veth0_macvtap: entered promiscuous mode [ 657.477134][ T9348] veth1_macvtap: entered promiscuous mode [ 658.118293][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.177668][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.263897][ T66] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.264968][ T66] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.271197][ T66] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.284277][ T66] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.408582][ T9425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.195588][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.195609][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.252839][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.252861][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.329864][ T9425] veth0_vlan: entered promiscuous mode [ 659.393589][ T9425] veth1_vlan: entered promiscuous mode [ 659.487099][ T9425] veth0_macvtap: entered promiscuous mode [ 659.492435][ T9425] veth1_macvtap: entered promiscuous mode [ 659.530948][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.551658][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.609617][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.610152][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.610193][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.610227][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.709192][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.709212][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.113589][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.113603][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.335153][ T5734] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 664.567420][ T5734] usb 7-1: Using ep0 maxpacket: 32 [ 664.581260][ T5734] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 664.581289][ T5734] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 664.581311][ T5734] usb 7-1: config 0 interface 0 has no altsetting 0 [ 664.583639][ T5734] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 664.583667][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.583687][ T5734] usb 7-1: Product: syz [ 664.583700][ T5734] usb 7-1: Manufacturer: syz [ 664.583708][ T5734] usb 7-1: SerialNumber: syz [ 664.613389][ T5734] usb 7-1: config 0 descriptor?? [ 666.215400][ T5734] gs_usb 7-1:0.0: Couldn't send data format (err=-110) [ 666.215442][ T5734] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 667.768951][ T8870] usb 7-1: USB disconnect, device number 2 [ 669.795218][ T5727] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 669.947302][ T5727] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.947317][ T5727] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 669.953704][ T5727] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 669.953735][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.953756][ T5727] usb 6-1: Product: syz [ 669.953771][ T5727] usb 6-1: Manufacturer: syz [ 669.953785][ T5727] usb 6-1: SerialNumber: syz [ 670.022331][ T5727] usb 6-1: config 0 descriptor?? [ 671.294574][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.666'. [ 671.300104][ T9859] binder: 9852:9859 ioctl c0285840 200000000000 returned -22 [ 674.455829][ T5727] usb 6-1: USB disconnect, device number 2 [ 680.757182][ T9907] hub 8-0:1.0: USB hub found [ 680.768585][ T9907] hub 8-0:1.0: 1 port detected [ 681.982776][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.008146][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.365187][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 682.515128][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 682.518219][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.518270][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.518298][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 682.518320][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 682.518342][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.521371][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.521399][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.521420][ T43] usb 2-1: Manufacturer: syz [ 682.630822][ T43] usb 2-1: config 0 descriptor?? [ 682.649512][ T36] audit: type=1326 audit(1780632419.600:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9913 comm="syz.6.683" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc14b46ce59 code=0x0 [ 682.809237][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.852324][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.056005][ T43] rc_core: IR keymap rc-hauppauge not found [ 683.056018][ T43] Registered IR keymap rc-empty [ 683.056107][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.082035][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.097228][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 683.104284][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 683.141511][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.155714][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.176491][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.195208][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.225245][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.255383][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.275706][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.295220][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.315257][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.335221][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.375992][ T43] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 683.376015][ T43] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 683.441567][ T43] usb 2-1: USB disconnect, device number 24 [ 683.665812][ T9922] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 683.825979][ T9922] usb 6-1: Using ep0 maxpacket: 16 [ 683.827954][ T9922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.828004][ T9922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.828032][ T9922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 683.828054][ T9922] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 683.828077][ T9922] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.831702][ T9922] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 683.831730][ T9922] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 683.831750][ T9922] usb 6-1: Manufacturer: syz [ 683.919310][ T9922] usb 6-1: config 0 descriptor?? [ 684.302535][ T9922] rc_core: IR keymap rc-hauppauge not found [ 684.302554][ T9922] Registered IR keymap rc-empty [ 684.302711][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 684.315263][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 684.346075][ T9922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 684.570136][ T9922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 685.015368][ T1170] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.015500][ T1170] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.015537][ T1170] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.015571][ T1170] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.109011][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.137478][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.158567][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.185251][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.215318][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.235365][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.261152][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.275287][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.295200][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.326431][ T9922] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 685.370726][ T9922] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 685.371679][ T9922] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 685.440463][ T9922] usb 6-1: USB disconnect, device number 3 [ 686.780250][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.780318][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.481187][ T36] audit: type=1326 audit(1780632431.430:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9961 comm="syz.6.693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc14b46ce59 code=0x0 [ 698.405754][ T821] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 698.431878][ T9990] overlayfs: failed to resolve './file2': -2 [ 698.568168][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 698.595104][ T821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.595159][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.595186][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 698.595206][ T821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 698.595228][ T821] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.599790][ T821] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 698.599821][ T821] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 698.599896][ T821] usb 3-1: Manufacturer: syz [ 698.617317][ T821] usb 3-1: config 0 descriptor?? [ 699.117305][ T821] rc_core: IR keymap rc-hauppauge not found [ 699.117319][ T821] Registered IR keymap rc-empty [ 699.117427][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.135242][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.164210][ T821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 699.219282][ T821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 699.283119][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.300221][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.316737][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.335244][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.358513][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.375352][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.395197][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.415192][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.435219][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.456200][ T821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 699.569972][ T821] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 699.569987][ T821] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 699.604263][ T821] usb 3-1: USB disconnect, device number 28 [ 703.797306][T10019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.813224][ T5615] Bluetooth: hci0: unexpected event for opcode 0x080f [ 704.175537][ T821] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 705.068498][T10028] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 705.076610][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 705.079770][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.079806][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.079843][ T821] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 705.079866][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.145959][ T821] usb 2-1: config 0 descriptor?? [ 705.179331][ T5615] Bluetooth: hci2: unexpected event for opcode 0x080f [ 705.181092][ T821] hub 2-1:0.0: USB hub found [ 705.224273][T10031] overlayfs: failed to resolve './file2': -2 [ 705.349405][ T821] hub 2-1:0.0: 1 port detected [ 705.815250][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 705.952580][ T821] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 705.952598][ T821] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 705.968532][ T821] usbhid 2-1:0.0: can't add hid device: -71 [ 705.968646][ T821] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 706.007529][ T821] usb 2-1: USB disconnect, device number 25 [ 706.020432][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 706.027209][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.027240][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.027277][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 706.027300][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.159447][ T9] usb 4-1: config 0 descriptor?? [ 706.182418][ T9] hub 4-1:0.0: USB hub found [ 706.401390][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 706.416238][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 706.416354][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 706.450126][ T9] usb 4-1: USB disconnect, device number 38 [ 706.815164][ T821] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 708.018392][ T821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.018409][ T821] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.022597][ T821] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 708.022615][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.022626][ T821] usb 3-1: Product: syz [ 708.022634][ T821] usb 3-1: Manufacturer: syz [ 708.022641][ T821] usb 3-1: SerialNumber: syz [ 708.028557][ T821] usb 3-1: config 0 descriptor?? [ 709.613950][T10054] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 709.915459][ T5726] usb 3-1: USB disconnect, device number 29 [ 710.968105][ T9922] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 711.125094][ T9922] usb 6-1: Using ep0 maxpacket: 16 [ 711.131801][ T9922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.131864][ T9922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.131890][ T9922] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 711.131913][ T9922] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.165087][ T9922] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.176838][ T9922] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.176854][ T9922] usb 6-1: Manufacturer: syz [ 711.229956][ T9922] usb 6-1: config 0 descriptor?? [ 712.983402][ T5606] usb 6-1: USB disconnect, device number 4 [ 713.012870][ T821] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 713.175158][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 713.183678][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.183883][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.183912][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 713.183983][ T821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 713.184006][ T821] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.299450][ T821] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 713.299515][ T821] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 713.299571][ T821] usb 2-1: Manufacturer: syz [ 713.858730][ T821] usb 2-1: config 0 descriptor?? [ 715.607095][T10082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.725182][ T821] rc_core: IR keymap rc-hauppauge not found [ 715.725242][ T821] Registered IR keymap rc-empty [ 715.725680][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.804648][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.821437][ T821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 715.846547][ T821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 715.908944][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.926737][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.945335][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.955652][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 715.965467][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.000413][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.015839][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.037784][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.057965][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.076873][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.100788][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.115706][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 716.185752][ T821] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 716.185892][ T821] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 716.246749][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.246781][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.246942][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 716.246967][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.550275][ T9] usb 6-1: config 0 descriptor?? [ 716.595838][ T821] usb 2-1: USB disconnect, device number 26 [ 716.823902][ T9] hub 6-1:0.0: USB hub found [ 716.824867][ T9] hub 6-1:0.0: 1 port detected [ 718.596845][ T9] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 718.596871][ T9] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 718.614399][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 718.614515][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 718.657591][ T9] usb 6-1: USB disconnect, device number 5 [ 721.625825][T10121] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 723.450722][T10131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.739'. [ 723.621426][T10131] netlink: 'syz.2.739': attribute type 1 has an invalid length. [ 728.773201][ T5615] Bluetooth: hci1: unexpected event for opcode 0x080f [ 728.846706][T10142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.175173][ T8870] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 729.325226][ T8870] usb 3-1: Using ep0 maxpacket: 32 [ 729.327820][ T8870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.327851][ T8870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.327889][ T8870] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 729.327913][ T8870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.334796][ T8870] usb 3-1: config 0 descriptor?? [ 729.344275][ T8870] hub 3-1:0.0: USB hub found [ 730.215336][ T8870] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 730.549451][T10152] netlink: 'syz.6.745': attribute type 49 has an invalid length. [ 731.007635][ T8870] usbhid 3-1:0.0: can't add hid device: -71 [ 731.014870][ T8870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 731.566187][ T8870] usb 3-1: USB disconnect, device number 30 [ 734.084721][T10177] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 734.625168][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 735.379906][T10186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'. [ 735.421783][T10186] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 735.821076][T10193] overlayfs: missing 'lowerdir' [ 735.896030][T10195] : renamed from bond_slave_0 [ 735.946504][ T8870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 736.106041][ T8870] usb 6-1: Using ep0 maxpacket: 16 [ 736.158724][ T8870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.158776][ T8870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.158803][ T8870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 736.158823][ T8870] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 736.158845][ T8870] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.230045][ T8870] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 736.230115][ T8870] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 736.230167][ T8870] usb 6-1: Manufacturer: syz [ 736.534165][ T8870] usb 6-1: config 0 descriptor?? [ 737.025242][ T8870] rc_core: IR keymap rc-hauppauge not found [ 737.025262][ T8870] Registered IR keymap rc-empty [ 737.025397][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.045131][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.066446][ T8870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 737.068161][ T8870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 737.071310][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.106260][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.125242][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.145185][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.166016][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.185435][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.205187][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.225149][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.245175][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.265198][ T8870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 737.295689][ T8870] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 737.295715][ T8870] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 737.525781][T10214] binder: 10210:10214 ioctl c00c6211 0 returned -14 [ 738.311297][ T8870] usb 6-1: USB disconnect, device number 6 [ 738.460635][T10219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.470040][ T5615] Bluetooth: hci1: unexpected event for opcode 0x080f [ 738.955251][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 739.115745][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 739.118953][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.118980][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.119003][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 739.119015][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.121969][ T43] usb 3-1: config 0 descriptor?? [ 739.180314][ T43] hub 3-1:0.0: USB hub found [ 739.324810][ T43] hub 3-1:0.0: 1 port detected [ 740.535515][T10228] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 741.906092][ T43] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 741.906119][ T43] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 742.225810][ T43] usbhid 3-1:0.0: can't add hid device: -32 [ 742.225928][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 742.440414][T10236] netlink: 36 bytes leftover after parsing attributes in process `syz.6.768'. [ 742.486903][ T5726] usb 3-1: USB disconnect, device number 31 [ 742.511684][T10237] netlink: 'syz.6.768': attribute type 1 has an invalid length. [ 745.317041][T10240] binder: 10238:10240 ioctl f507 0 returned -22 [ 748.064417][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.064504][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.525115][ T5726] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 748.675079][ T5726] usb 7-1: Using ep0 maxpacket: 16 [ 748.677321][ T5726] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.677372][ T5726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 748.677399][ T5726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 748.677420][ T5726] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 748.677443][ T5726] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.679730][ T5726] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 748.679757][ T5726] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 748.679777][ T5726] usb 7-1: Manufacturer: syz [ 748.769424][ T5726] usb 7-1: config 0 descriptor?? [ 750.076595][ T5726] rc_core: IR keymap rc-hauppauge not found [ 750.076615][ T5726] Registered IR keymap rc-empty [ 750.076763][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.103643][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.119914][ T5726] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 750.122962][ T5726] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input24 [ 750.157111][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.185447][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.215375][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.245301][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.265847][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.285265][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.305283][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.325162][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.345169][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.493620][ T5726] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 750.773705][T10264] No control pipe specified [ 750.940311][ T5726] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 750.940371][ T5726] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 750.985598][ T5726] usb 7-1: USB disconnect, device number 3 [ 751.616533][T10274] binder: 10272:10274 ioctl c00c6211 0 returned -14 [ 753.056763][T10280] loop7: detected capacity change from 0 to 7 [ 753.057498][ C0] blk_print_req_error: 10 callbacks suppressed [ 753.057508][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.057524][ C0] buffer_io_error: 10 callbacks suppressed [ 753.057529][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.057786][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.057801][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.057983][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.057996][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.058156][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.058169][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.058340][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.058352][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.058592][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.058606][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.058903][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.058918][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.058970][T10280] ldm_validate_partition_table(): Disk read failed. [ 753.059099][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.059113][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.059270][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.059283][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.059464][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 753.059477][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 753.059787][T10280] Dev loop7: unable to read RDB block 0 [ 753.060426][T10280] loop7: unable to read partition table [ 753.060551][T10280] loop7: partition table beyond EOD, truncated [ 753.060562][T10280] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 755.595875][T10296] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 755.710147][T10293] netlink: 36 bytes leftover after parsing attributes in process `syz.6.782'. [ 755.775395][T10293] netlink: 'syz.6.782': attribute type 1 has an invalid length. [ 759.071924][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 759.078834][T10306] binder: 10300:10306 ioctl c0285840 0 returned -22 [ 762.078917][T10319] binder: 10314:10319 ioctl c00c6211 0 returned -14 [ 766.332698][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'. [ 766.339155][T10347] binder: 10344:10347 ioctl c0285840 0 returned -22 [ 766.786285][T10349] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 766.786495][T10349] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 769.441183][T10364] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 772.615848][T10398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.643755][ T5615] Bluetooth: hci2: unexpected event for opcode 0x080f [ 772.723445][T10402] fuse: Bad value for 'fd' [ 772.905106][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 773.133845][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 773.517048][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.517078][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.517112][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 773.517135][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.054058][ T9] usb 4-1: config 0 descriptor?? [ 775.137319][ T9] usb 4-1: can't set config #0, error -71 [ 775.159481][ T9] usb 4-1: USB disconnect, device number 39 [ 776.804478][T10423] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 777.024273][T10427] No control pipe specified [ 778.115210][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 779.001092][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 779.012188][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.012241][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 779.012267][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 779.012290][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 779.012313][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.014876][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 779.014902][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 779.014922][ T43] usb 3-1: Manufacturer: syz [ 779.102898][ T43] usb 3-1: config 0 descriptor?? [ 779.445321][ T43] rc_core: IR keymap rc-hauppauge not found [ 779.445342][ T43] Registered IR keymap rc-empty [ 779.445657][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.466547][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.486941][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 779.490369][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 779.520617][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.546742][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.577262][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.595180][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.615231][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.635437][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.655338][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.675696][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.695183][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.715340][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 779.741602][ T43] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 779.741903][ T43] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 779.859901][ T43] usb 3-1: USB disconnect, device number 32 [ 779.915151][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 780.657052][ T36] audit: type=1326 audit(1780632517.610:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.3.827" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f643ece59 code=0x0 [ 782.840786][T10485] binder: 10483:10485 ioctl f507 0 returned -22 [ 785.317329][T10500] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 787.257773][T10510] ALSA: seq fatal error: cannot create timer (-19) [ 788.489902][T10510] loop7: detected capacity change from 0 to 7 [ 788.494331][ C0] blk_print_req_error: 10 callbacks suppressed [ 788.494349][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.494375][ C0] buffer_io_error: 10 callbacks suppressed [ 788.494386][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.494897][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.494924][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.559728][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.559763][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.560069][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.560095][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.563818][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.563848][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.564122][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.564147][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.564383][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.564408][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.564486][T10510] ldm_validate_partition_table(): Disk read failed. [ 788.564656][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.564679][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.564900][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.564924][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.794571][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 788.794603][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 788.794825][T10510] Dev loop7: unable to read RDB block 0 [ 788.877917][T10510] loop7: unable to read partition table [ 788.878140][T10510] loop7: partition table beyond EOD, truncated [ 788.878172][T10510] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 793.487422][T10549] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 794.179472][T10551] No control pipe specified [ 799.050167][ T820] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 799.138638][T10584] fuse: Invalid rootmode [ 799.196012][ T820] usb 6-1: Using ep0 maxpacket: 16 [ 799.198050][ T820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.198110][ T820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.198139][ T820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 799.198161][ T820] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 799.198185][ T820] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.203710][ T820] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 799.203739][ T820] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 799.203758][ T820] usb 6-1: Manufacturer: syz [ 799.228553][ T820] usb 6-1: config 0 descriptor?? [ 799.545093][ T820] rc_core: IR keymap rc-hauppauge not found [ 799.545113][ T820] Registered IR keymap rc-empty [ 799.545302][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.565218][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.629854][ T820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 799.635426][ T820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 799.644909][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.666955][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.685899][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.705486][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.725413][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.755156][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.780367][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.805240][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.825719][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.855394][ T820] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 799.888244][ T820] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 799.888261][ T820] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 799.923398][ T820] usb 6-1: USB disconnect, device number 7 [ 801.476337][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 801.480725][T10608] binder: 10598:10608 ioctl c0285840 200000000000 returned -22 [ 801.547593][T10606] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 802.295231][ T820] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 802.624031][ T820] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 802.629054][ T820] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 802.629826][ T820] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 802.630457][ T820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.179389][ T820] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.557730][ T820] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 803.576108][ T820] usb 6-1: USB disconnect, device number 8 [ 805.625073][ T5734] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 805.770666][T10635] : renamed from bond_slave_0 (while UP) [ 805.775066][ T5734] usb 7-1: Using ep0 maxpacket: 16 [ 805.778554][ T5734] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.778602][ T5734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 805.778629][ T5734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 805.778650][ T5734] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 805.778672][ T5734] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.780986][ T5734] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 805.781011][ T5734] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 805.781030][ T5734] usb 7-1: Manufacturer: syz [ 805.802864][ T5734] usb 7-1: config 0 descriptor?? [ 806.055681][ T8870] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 806.115826][ T5734] rc_core: IR keymap rc-hauppauge not found [ 806.115845][ T5734] Registered IR keymap rc-empty [ 806.115997][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.135184][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.156644][ T5734] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 806.176670][ T5734] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input27 [ 806.183890][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.195130][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.205576][ T8870] usb 3-1: Using ep0 maxpacket: 32 [ 806.208393][ T8870] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.208423][ T8870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 806.211688][ T8870] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 806.211714][ T8870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.211734][ T8870] usb 3-1: Product: syz [ 806.211748][ T8870] usb 3-1: Manufacturer: syz [ 806.211762][ T8870] usb 3-1: SerialNumber: syz [ 806.216700][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.376862][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.395117][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.416554][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.431332][ T8870] usb 3-1: config 0 descriptor?? [ 806.436556][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.451894][ T8870] gs_usb 3-1:0.0: Required endpoints not found [ 806.455245][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 806.482506][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 807.532388][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 808.851686][ T5734] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 808.851712][ T5734] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 808.862077][ T5734] usb 7-1: USB disconnect, device number 4 [ 809.371188][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.371255][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.433175][T10659] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 810.809863][ T8870] usb 3-1: USB disconnect, device number 33 [ 812.456578][ T5734] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 812.588256][T10679] fuse: Bad value for 'fd' [ 812.607520][ T5734] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 812.607573][ T5734] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 812.607614][ T5734] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.607639][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.693803][ T5734] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.971393][ T5734] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 812.974769][ T5734] usb 6-1: USB disconnect, device number 9 [ 818.657965][T10716] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 835.079280][T10792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.085576][ T5603] Bluetooth: hci0: unexpected event for opcode 0x080f [ 836.034108][ T5727] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 836.185035][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 836.187112][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.187142][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.187181][ T5727] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 836.187205][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.244276][ T5727] usb 2-1: config 0 descriptor?? [ 836.256487][ T5727] hub 2-1:0.0: USB hub found [ 836.283262][T10799] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 836.475873][ T5727] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 836.500024][ T5727] usbhid 2-1:0.0: can't add hid device: -71 [ 836.500144][ T5727] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 836.535988][ T5727] usb 2-1: USB disconnect, device number 27 [ 840.669480][T10822] No control pipe specified [ 845.179898][T10845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.197904][ T5603] Bluetooth: hci2: unexpected event for opcode 0x080f [ 845.484757][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 845.975203][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 845.977303][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.977335][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.977371][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 845.977394][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.980442][ T5603] Bluetooth: min 0 < 6 [ 845.995264][ T9] usb 4-1: config 0 descriptor?? [ 846.040232][ T9] hub 4-1:0.0: USB hub found [ 846.245967][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 846.261555][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 846.261671][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 846.297312][ T9] usb 4-1: USB disconnect, device number 40 [ 846.352702][ T8870] IPVS: starting estimator thread 0... [ 847.855167][T10854] IPVS: using max 15 ests per chain, 36000 per kthread [ 848.998232][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 849.735912][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 849.742415][T10873] binder: 10871:10873 ioctl c0285840 200000000000 returned -22 [ 869.036642][T10939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.081407][ T5615] Bluetooth: hci5: unexpected event for opcode 0x080f [ 870.001248][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.001317][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.290748][ T821] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 878.097334][T10984] binder: 10980:10984 ioctl c00c6211 0 returned -14 [ 878.998220][T10994] netlink: 'syz.1.968': attribute type 49 has an invalid length. [ 891.584253][T11078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.987'. [ 895.965694][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 896.176036][T11106] tipc: Started in network mode [ 896.176122][T11106] tipc: Node identity 4, cluster identity 4711 [ 896.176158][T11106] tipc: Node number set to 4 [ 906.285518][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 906.318874][T11161] binder: 11158:11161 ioctl c0285840 200000000000 returned -22 [ 913.235030][ T5734] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 913.427619][ T5734] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 913.427658][ T5734] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 913.427689][ T5734] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 913.427702][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.566861][ T5734] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.139706][ T5734] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 914.168968][ T5734] usb 2-1: USB disconnect, device number 28 [ 916.149541][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1023'. [ 916.165659][T11211] binder: 11203:11211 ioctl c0285840 200000000000 returned -22 [ 917.842219][T11222] NILFS (nullb0): couldn't find nilfs on the device [ 921.585014][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 923.420641][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1031'. [ 923.565123][ T821] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 923.751757][T11242] vim2m vim2m.0: vidioc_s_fmt queue busy [ 924.670936][ T821] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 924.670987][ T821] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 924.671029][ T821] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 924.671051][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.786671][T11247] hsr_slave_1 (unregistering): left promiscuous mode [ 924.817620][ T821] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 925.673263][ T820] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 926.499780][ T820] usb 7-1: Using ep0 maxpacket: 16 [ 927.816069][ T5615] Bluetooth: hci5: unexpected event for opcode 0x080f [ 927.846253][ T820] usb 7-1: device descriptor read/all, error -71 [ 928.153137][T11259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.288855][ T8870] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 928.433185][ T821] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 928.453258][ T821] usb 2-1: USB disconnect, device number 29 [ 928.467134][ T8870] usb 6-1: Using ep0 maxpacket: 32 [ 928.469455][ T8870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.469487][ T8870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.469526][ T8870] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 928.469551][ T8870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.524150][ T8870] usb 6-1: config 0 descriptor?? [ 928.543126][ T8870] hub 6-1:0.0: USB hub found [ 929.734508][ T8870] hub 6-1:0.0: 1 port detected [ 930.225440][ T8870] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 930.225467][ T8870] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 930.247628][ T8870] usbhid 6-1:0.0: can't add hid device: -71 [ 930.247737][ T8870] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 930.279942][ T8870] usb 6-1: USB disconnect, device number 11 [ 930.644989][T11276] netlink: 'syz.2.1039': attribute type 49 has an invalid length. [ 932.311346][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.311414][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.443353][T11296] No control pipe specified [ 943.725004][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1055'. [ 943.726956][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1055'. [ 944.115131][T11322] loop7: detected capacity change from 0 to 7 [ 944.311481][ C0] blk_print_req_error: 5 callbacks suppressed [ 944.311495][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.311521][ C0] buffer_io_error: 5 callbacks suppressed [ 944.311531][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.311809][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.311833][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.312072][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.312097][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.312350][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.312374][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.312619][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.312644][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.312884][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.312910][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.313071][T11322] ldm_validate_partition_table(): Disk read failed. [ 944.313149][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.313339][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.313587][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.313623][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.313887][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.313911][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.314156][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 944.314181][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 944.334685][T11322] Dev loop7: unable to read RDB block 0 [ 944.350353][T11322] loop7: unable to read partition table [ 944.350571][T11322] loop7: partition table beyond EOD, truncated [ 944.350608][T11322] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 947.504315][T11350] binder: 11346:11350 ioctl f507 0 returned -22 [ 950.227138][T11357] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1060'. [ 957.842099][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1068'. [ 959.209080][T11391] NILFS (nullb0): couldn't find nilfs on the device [ 963.239852][T11415] NILFS (nullb0): couldn't find nilfs on the device [ 970.580109][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1082'. [ 970.655319][T11443] binder: 11441:11443 ioctl c0285840 200000000000 returned -22 [ 973.626040][T11461] NILFS (nullb0): couldn't find nilfs on the device [ 974.375143][ T5734] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 974.380722][ T5615] Bluetooth: min 0 < 6 [ 974.524951][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 974.526672][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.526702][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 974.526718][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 974.526730][ T5734] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 974.526742][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.545936][ T5734] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 974.545965][ T5734] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 974.545984][ T5734] usb 2-1: Manufacturer: syz [ 974.555245][ T5734] usb 2-1: config 0 descriptor?? [ 976.385036][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 976.465045][ T5734] rc_core: IR keymap rc-hauppauge not found [ 976.465062][ T5734] Registered IR keymap rc-empty [ 976.465310][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.620204][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.636150][ T5734] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 976.641925][ T5734] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 976.653812][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.665285][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.456830][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.484194][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.521245][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.550613][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.570243][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.600624][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.654896][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.685571][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.795477][ T5734] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 977.795492][ T5734] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 978.064825][ T5734] usb 2-1: USB disconnect, device number 30 [ 981.542050][ T36] audit: type=1326 audit(1780632718.500:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11502 comm="syz.1.1096" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f852f57ce59 code=0x0 [ 987.565334][T11526] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 991.352495][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1105'. [ 992.867711][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.867780][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.923285][T11556] binder: 11554:11556 ioctl f507 0 returned -22 [ 998.958838][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 998.973584][T11568] binder: 11564:11568 ioctl c0285840 200000000000 returned -22 [ 1001.220395][T11570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.640586][ T5727] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1002.335393][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 1002.337415][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.337445][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.337481][ T5727] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1002.337494][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.405141][ T5727] usb 4-1: config 0 descriptor?? [ 1002.459919][ T5727] hub 4-1:0.0: USB hub found [ 1004.173221][ T5727] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1004.209290][ T5727] usbhid 4-1:0.0: can't add hid device: -71 [ 1004.209410][ T5727] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1004.265867][ T5727] usb 4-1: USB disconnect, device number 41 [ 1007.219534][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 1007.238878][T11602] binder: 11600:11602 ioctl c0285840 200000000000 returned -22 [ 1009.383508][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1009.414707][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1009.441370][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1009.451014][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1009.451747][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1011.598655][ T5615] Bluetooth: hci4: command tx timeout [ 1012.905028][ T5734] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1014.109622][ T5615] Bluetooth: hci4: command tx timeout [ 1014.373069][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 1014.375745][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.375779][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1014.375794][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1014.375806][ T5734] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1014.375818][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.378649][ T5734] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1014.378666][ T5734] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1014.378677][ T5734] usb 3-1: Manufacturer: syz [ 1014.401616][ T5734] usb 3-1: config 0 descriptor?? [ 1015.354990][ T5734] rc_core: IR keymap rc-hauppauge not found [ 1015.355010][ T5734] Registered IR keymap rc-empty [ 1015.363012][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.387648][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.406470][ T5734] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1015.418401][ T5734] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 1015.429411][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.448438][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.475796][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.505585][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.526717][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.545170][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.575107][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.595018][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.625716][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1015.655211][ T5734] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1016.145232][ T5615] Bluetooth: hci4: command tx timeout [ 1016.319891][ T5734] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1016.319916][ T5734] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1016.580715][ T5734] usb 3-1: USB disconnect, device number 34 [ 1018.326677][ T5615] Bluetooth: hci4: command tx timeout [ 1018.500930][ T5824] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.182038][ T5824] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.817856][T11682] binder: 11679:11682 ioctl f507 0 returned -22 [ 1024.018769][ T5824] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.397800][T11692] NILFS (nullb0): couldn't find nilfs on the device [ 1025.136034][T11603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.136164][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.136465][T11603] bridge_slave_0: entered allmulticast mode [ 1025.139531][T11603] bridge_slave_0: entered promiscuous mode [ 1025.196970][T11603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.197154][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.197392][T11603] bridge_slave_1: entered allmulticast mode [ 1025.204593][T11603] bridge_slave_1: entered promiscuous mode [ 1025.283595][T11603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.298495][T11603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.618132][ T5824] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.797960][T11603] team0: Port device team_slave_0 added [ 1027.345383][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1027.406507][T11603] team0: Port device team_slave_1 added [ 1027.490979][T11603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.490995][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.491021][T11603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.493132][T11603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.493145][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.493170][T11603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.575034][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1027.577408][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.577456][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.577483][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1027.577504][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1027.577527][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1027.578974][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1027.579000][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1027.579019][ T9] usb 2-1: Manufacturer: syz [ 1027.599373][ T9] usb 2-1: config 0 descriptor?? [ 1027.787442][T11603] hsr_slave_0: entered promiscuous mode [ 1027.788719][T11603] hsr_slave_1: entered promiscuous mode [ 1027.792047][T11603] debugfs: 'hsr0' already exists in 'hsr' [ 1027.792071][T11603] Cannot create hsr debugfs directory [ 1029.264791][ T9] rc_core: IR keymap rc-hauppauge not found [ 1029.264812][ T9] Registered IR keymap rc-empty [ 1029.695691][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1029.715969][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.245908][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1030.272139][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 1030.301799][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.345095][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.365080][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.385066][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.408063][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.427134][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.445071][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.466893][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.485053][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.505149][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1030.531804][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1030.531830][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1030.582013][ T9] usb 2-1: USB disconnect, device number 31 [ 1035.495761][T11767] binder: 11762:11767 ioctl c00c6211 0 returned -14 [ 1036.732428][ T5824] bridge_slave_1: left allmulticast mode [ 1036.732462][ T5824] bridge_slave_1: left promiscuous mode [ 1036.732745][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.900270][ T5824] bridge_slave_0: left allmulticast mode [ 1036.900304][ T5824] bridge_slave_0: left promiscuous mode [ 1036.900554][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.861882][ T5824] bond0 (unregistering): (slave 30): Releasing backup interface [ 1042.935544][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.986932][ T5824] bond0 (unregistering): Released all slaves [ 1043.106378][ T5734] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1043.165161][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.169504][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.214958][ T5734] usb 7-1: Using ep0 maxpacket: 16 [ 1044.217122][ T5734] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.217191][ T5734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1044.217223][ T5734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1044.217243][ T5734] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1044.217269][ T5734] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.219057][ T5734] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1044.219084][ T5734] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1044.219103][ T5734] usb 7-1: Manufacturer: syz [ 1044.315142][ T5734] usb 7-1: config 0 descriptor?? [ 1044.319106][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.825234][ T5734] rc_core: IR keymap rc-hauppauge not found [ 1044.825253][ T5734] Registered IR keymap rc-empty [ 1044.825394][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1044.855051][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1044.873076][T11767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.997279][T11812] hub 8-0:1.0: USB hub found [ 1045.005116][T11812] hub 8-0:1.0: 1 port detected [ 1045.826371][T11767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.855417][ T5734] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1045.861401][ T5734] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input32 [ 1045.897159][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1045.914355][T11767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1045.914379][T11767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1045.940204][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1045.964964][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1045.995167][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1045.997128][T11767] veth1_vlan: left promiscuous mode [ 1046.000658][T11767] veth0_vlan: left promiscuous mode [ 1046.002994][T11767] veth0_vlan: entered promiscuous mode [ 1046.028082][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1046.049232][T11767] veth1_vlan: entered promiscuous mode [ 1046.055064][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1046.065075][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1046.084791][T11767] veth1_macvtap: left promiscuous mode [ 1046.090590][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1046.093461][T11767] veth0_macvtap: left promiscuous mode [ 1046.098926][T11767] veth0_macvtap: entered promiscuous mode [ 1046.115191][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1046.115595][T11767] veth1_macvtap: entered promiscuous mode [ 1046.145228][ T5734] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1046.177575][ T5734] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1046.177653][ T5734] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1046.248726][T11767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.255825][ T820] usb 7-1: USB disconnect, device number 7 [ 1046.282284][T11767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.302068][T11767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.318870][T11767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1046.338445][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1046.397481][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.397618][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.402011][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.402107][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.609849][ T6487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.660015][ T6487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.971088][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 1047.053085][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1165'. [ 1047.053108][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1165'. [ 1047.094995][ T6487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.101896][T11409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.683044][ T5824] tipc: Left network mode [ 1047.729683][T11603] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1047.775823][T11603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.899790][T11603] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1048.394088][T11850] NILFS (nullb0): couldn't find nilfs on the device [ 1049.211981][T11603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.216580][T11603] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1050.074034][T11603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1051.819763][T11603] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1051.864014][T11603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.553537][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1054.316682][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.325632][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.487077][T11902] binder: 11896:11902 ioctl c00c6211 0 returned -14 [ 1055.221564][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1174'. [ 1055.435899][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1174'. [ 1055.435921][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1174'. [ 1055.926796][ T5824] hsr_slave_0: left promiscuous mode [ 1055.965141][ T5824] hsr_slave_1: left promiscuous mode [ 1055.966065][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.966089][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.135910][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 1056.141745][T11917] binder: 11914:11917 ioctl c0285840 200000000000 returned -22 [ 1058.095773][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.095802][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.364928][ T2344] batman_adv: batadv_iv_ogm_emit: mesh interface switch for queued OGM [ 1059.053962][ T5824] veth1_macvtap: left promiscuous mode [ 1059.054070][ T5824] veth0_macvtap: left promiscuous mode [ 1059.054325][ T5824] veth1_vlan: left promiscuous mode [ 1059.054503][ T5824] veth0_vlan: left promiscuous mode [ 1059.767819][T11939] hub 8-0:1.0: USB hub found [ 1059.770390][T11939] hub 8-0:1.0: 1 port detected [ 1064.197758][T11960] binder: 11958:11960 ioctl c00c6211 0 returned -14 [ 1065.197468][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 1065.276324][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 1065.659115][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1065.889944][T11603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.967152][T11603] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.307133][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.307282][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.396997][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.397177][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.233387][T11999] NILFS (nullb0): couldn't find nilfs on the device [ 1069.234496][T11996] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 1070.452564][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1070.912638][T12001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1070.957371][T12001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1071.261935][T11992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1071.262681][T11992] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1072.996225][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1073.435956][ T5615] Bluetooth: hci5: command tx timeout [ 1074.364388][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1196'. [ 1074.601571][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1196'. [ 1074.601607][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1196'. [ 1075.504991][ T5615] Bluetooth: hci5: command tx timeout [ 1075.901239][T12052] netlink: 'syz.6.1199': attribute type 25 has an invalid length. [ 1076.651827][T12056] No control pipe specified [ 1077.279846][T12053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.295686][T12053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.324403][T12053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.584978][ T5615] Bluetooth: hci5: command tx timeout [ 1078.600908][T12053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.636286][T12053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.716208][T12053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1078.716225][T12053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1078.855971][T12053] veth1_vlan: left promiscuous mode [ 1078.900167][T12053] veth0_vlan: left promiscuous mode [ 1078.900836][T12053] veth0_vlan: entered promiscuous mode [ 1078.903258][T12053] veth1_vlan: entered promiscuous mode [ 1078.987400][T12053] veth1_macvtap: left promiscuous mode [ 1079.005356][T12053] veth0_macvtap: left promiscuous mode [ 1079.006271][T12053] veth0_macvtap: entered promiscuous mode [ 1079.056805][T12053] veth1_macvtap: entered promiscuous mode [ 1079.061314][T12053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1079.085866][T12053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1079.127326][T12053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1079.146489][T12053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1079.252879][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.262193][ T68] bridge0: port 1(bridge_slave_0) entered listening state [ 1079.285659][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.285779][ T68] bridge0: port 2(bridge_slave_1) entered listening state [ 1079.348502][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.419066][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.665013][ T5615] Bluetooth: hci5: command tx timeout [ 1082.241877][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.242298][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.233472][T11987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.233859][T11987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.234573][T11987] bridge_slave_0: entered allmulticast mode [ 1084.501894][T11987] bridge_slave_0: entered promiscuous mode [ 1085.174749][T11987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.202403][T11987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.203107][T11987] bridge_slave_1: entered allmulticast mode [ 1085.451776][T11987] bridge_slave_1: entered promiscuous mode [ 1087.590651][T11987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.607258][T11987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.718523][T11987] team0: Port device team_slave_0 added [ 1087.729824][T11987] team0: Port device team_slave_1 added [ 1087.892743][T11987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.892760][T11987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.892786][T11987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.902970][T11987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.902985][T11987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.903009][T11987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.779862][T11987] hsr_slave_0: entered promiscuous mode [ 1088.784010][T11987] hsr_slave_1: entered promiscuous mode [ 1088.788253][T11987] debugfs: 'hsr0' already exists in 'hsr' [ 1088.788278][T11987] Cannot create hsr debugfs directory [ 1089.516801][ T5734] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1089.669971][ T5734] usb 7-1: config 7 has an invalid interface number: 223 but max is 0 [ 1089.669999][ T5734] usb 7-1: config 7 has no interface number 0 [ 1089.670030][ T5734] usb 7-1: too many endpoints for config 7 interface 223 altsetting 7: 36, using maximum allowed: 30 [ 1089.670116][ T5734] usb 7-1: config 7 interface 223 altsetting 7 has an endpoint descriptor with address 0x52, changing to 0x2 [ 1089.670142][ T5734] usb 7-1: config 7 interface 223 altsetting 7 endpoint 0x2 has invalid maxpacket 60846, setting to 64 [ 1089.670169][ T5734] usb 7-1: config 7 interface 223 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1089.670199][ T5734] usb 7-1: config 7 interface 223 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 36 [ 1089.670225][ T5734] usb 7-1: config 7 interface 223 has no altsetting 0 [ 1089.673782][ T5734] usb 7-1: New USB device found, idVendor=1199, idProduct=0023, bcdDevice=58.16 [ 1089.673810][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.673830][ T5734] usb 7-1: Product: syz [ 1089.673845][ T5734] usb 7-1: Manufacturer: syz [ 1089.673859][ T5734] usb 7-1: SerialNumber: syz [ 1090.064918][ T5734] sierra 7-1:7.223: Sierra USB modem converter detected [ 1090.216022][ T5734] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1090.238434][ T5734] usb 7-1: USB disconnect, device number 8 [ 1090.576066][T12141] NILFS (nullb0): couldn't find nilfs on the device [ 1091.226020][ T5734] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1091.227018][ T5734] sierra 7-1:7.223: device disconnected [ 1091.607764][T11272] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1091.765086][T11272] usb 2-1: Using ep0 maxpacket: 16 [ 1091.771598][T11272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.771717][T11272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1091.771757][T11272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1091.771791][T11272] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1091.771826][T11272] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1091.865152][T11272] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1091.865182][T11272] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1091.865201][T11272] usb 2-1: Manufacturer: syz [ 1091.874545][T11272] usb 2-1: config 0 descriptor?? [ 1092.927620][T11272] rc_core: IR keymap rc-hauppauge not found [ 1092.927640][T11272] Registered IR keymap rc-empty [ 1092.927788][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1092.953437][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1092.968272][T11272] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1092.988660][T11272] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 1093.016234][ T5824] bridge_slave_1: left allmulticast mode [ 1093.016268][ T5824] bridge_slave_1: left promiscuous mode [ 1093.016526][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.017432][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.058184][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.076462][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.105046][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.135010][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.155026][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.176709][ T5824] bridge_slave_0: left allmulticast mode [ 1093.176743][ T5824] bridge_slave_0: left promiscuous mode [ 1093.176987][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.191468][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.205004][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.224985][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.244965][T11272] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1093.280869][T11272] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1093.280895][T11272] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1094.717411][T11272] usb 2-1: USB disconnect, device number 32 [ 1095.428888][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.508143][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.565754][ T5824] bond0 (unregistering): Released all slaves [ 1097.089714][T12177] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1101.155701][ T5824] hsr_slave_0: left promiscuous mode [ 1101.290966][ T5824] hsr_slave_1: left promiscuous mode [ 1101.297438][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.359437][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.479575][T12193] ======================================================= [ 1103.479575][T12193] WARNING: The mand mount option has been deprecated and [ 1103.479575][T12193] and is ignored by this kernel. Remove the mand [ 1103.479575][T12193] option from the mount to silence this warning. [ 1103.479575][T12193] ======================================================= [ 1111.556940][T11992] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1111.589238][T11992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1111.591856][T11992] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1111.593228][T11992] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1111.593946][T11992] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1115.753773][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.753842][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.004296][T11992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1116.044700][T11992] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1116.067937][T11992] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1116.070281][T11992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1116.071029][T11992] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1117.343129][T11992] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1117.410915][T11992] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1117.413260][T11992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1117.433232][T11992] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1117.435410][T11992] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1117.990704][T11992] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1118.035106][T11992] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1118.037984][T11992] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1118.072942][T11992] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1118.089476][T11992] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1119.504985][ T5615] Bluetooth: hci7: command tx timeout [ 1120.147350][ T5615] Bluetooth: hci8: command tx timeout [ 1121.584999][ T5615] Bluetooth: hci7: command tx timeout [ 1122.225216][ T5615] Bluetooth: hci8: command tx timeout [ 1123.664970][ T5615] Bluetooth: hci7: command tx timeout [ 1124.306623][ T5615] Bluetooth: hci8: command tx timeout [ 1125.745036][ T5615] Bluetooth: hci7: command tx timeout [ 1126.385165][ T5615] Bluetooth: hci8: command tx timeout [ 1127.953224][T11992] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1128.002026][T11992] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1128.085142][T11992] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1128.086274][T11992] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1128.115528][T11992] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1130.224992][ T5615] Bluetooth: hci9: command tx timeout [ 1132.304988][ T5615] Bluetooth: hci9: command tx timeout [ 1134.385052][ T5615] Bluetooth: hci9: command tx timeout [ 1136.464906][ T5615] Bluetooth: hci9: command tx timeout [ 1172.543588][T11992] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1172.606943][T11992] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1172.609244][T11992] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1172.610419][T11992] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1172.612004][T11992] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1174.705352][ T5615] Bluetooth: hci10: command tx timeout [ 1176.526086][T11992] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1176.571576][T11992] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1176.610733][T11992] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1176.614004][T11992] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1176.622704][T11992] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1176.784983][ T5615] Bluetooth: hci10: command tx timeout [ 1177.190581][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.190648][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.693095][T11992] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1177.731538][T11992] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1177.733745][T11992] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1177.755150][T11992] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1177.755880][T11992] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1177.910213][T11992] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1177.952675][T11992] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1177.990644][T11992] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1177.992468][T11992] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1177.993364][T11992] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1178.705435][ T5615] Bluetooth: hci11: command tx timeout [ 1178.864962][ T5615] Bluetooth: hci10: command tx timeout [ 1179.905087][ T5615] Bluetooth: hci12: command tx timeout [ 1180.144964][ T5615] Bluetooth: hci13: command tx timeout [ 1180.785052][ T5615] Bluetooth: hci11: command tx timeout [ 1180.944971][ T5615] Bluetooth: hci10: command tx timeout [ 1181.985037][ T5615] Bluetooth: hci12: command tx timeout [ 1182.224903][ T5615] Bluetooth: hci13: command tx timeout [ 1182.865136][ T5615] Bluetooth: hci11: command tx timeout [ 1184.065022][ T5615] Bluetooth: hci12: command tx timeout [ 1184.304918][ T5615] Bluetooth: hci13: command tx timeout [ 1184.945041][ T5615] Bluetooth: hci11: command tx timeout [ 1186.145129][ T5615] Bluetooth: hci12: command tx timeout [ 1186.384974][ T5615] Bluetooth: hci13: command tx timeout [ 1188.039923][T11992] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1188.092085][T11992] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1188.093533][T11992] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1188.096768][T11992] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1188.099033][T11992] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1190.224938][ T5615] Bluetooth: hci14: command tx timeout [ 1192.304894][ T5615] Bluetooth: hci14: command tx timeout [ 1194.384894][ T5615] Bluetooth: hci14: command tx timeout [ 1196.464877][ T5615] Bluetooth: hci14: command tx timeout [ 1209.084780][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1209.084798][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5828/3:b..l P12199/1:b..l [ 1209.084844][ C1] rcu: (detected by 1, t=10502 jiffies, g=65649, q=4732 ncpus=2) [ 1209.084861][ C1] task:syz.1.1227 state:D stack:27416 pid:12199 tgid:12188 ppid:5598 task_flags:0x400040 flags:0x00080002 [ 1209.084928][ C1] Call Trace: [ 1209.085004][ C1] [ 1209.085057][ C1] __schedule+0x16ec/0x5620 [ 1209.085258][ C1] ? __pfx___schedule+0x10/0x10 [ 1209.085306][ C1] schedule_rtlock+0x30/0x70 [ 1209.085331][ C1] rtlock_slowlock_locked+0x3638/0x3c80 [ 1209.085409][ C1] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 1209.085441][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1209.085477][ C1] ? rcu_is_watching+0x15/0xb0 [ 1209.085631][ C1] rt_spin_lock+0x165/0x400 [ 1209.085656][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1209.085678][ C1] ? __local_bh_disable_ip+0x3c/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1209.085716][ C1] ? lock_sock_nested+0x69/0x130 [ 1209.085825][ C1] ? lock_sock_nested+0x69/0x130 [ 1209.085848][ C1] lock_sock_nested+0x7e/0x130 [ 1209.085872][ C1] tipc_sendmsg+0x47/0x70 [ 1209.085945][ C1] ____sys_sendmsg+0x94c/0x9c0 [ 1209.086005][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.086040][ C1] ? import_iovec+0x73/0xa0 [ 1209.086151][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1209.086176][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.086261][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.086292][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 1209.086343][ C1] ? __fget_files+0x2a/0x420 [ 1209.086412][ C1] ? __fget_files+0x3a6/0x420 [ 1209.086439][ C1] __sys_sendmmsg+0x282/0x4e0 [ 1209.086477][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1209.086513][ C1] ? reacquire_held_locks+0x104/0x190 [ 1209.086538][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1209.086586][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 1209.086658][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 1209.086685][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.086724][ C1] do_syscall_64+0x174/0x580 [ 1209.086798][ C1] ? trace_irq_disable+0x3b/0x140 [ 1209.086868][ C1] ? clear_bhb_loop+0x40/0x90 [ 1209.086891][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.086913][ C1] RIP: 0033:0x7f852f57ce59 [ 1209.086964][ C1] RSP: 002b:00007f852cf4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1209.087012][ C1] RAX: ffffffffffffffda RBX: 00007f852f7f6360 RCX: 00007f852f57ce59 [ 1209.087025][ C1] RDX: 04000000000000e4 RSI: 0000200000003240 RDI: 0000000000000005 [ 1209.087037][ C1] RBP: 00007f852f612d6f R08: 0000000000000000 R09: 0000000000000000 [ 1209.087049][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.087059][ C1] R13: 00007f852f7f63f8 R14: 00007f852f7f6360 R15: 00007ffcaeed38c8 [ 1209.087090][ C1] [ 1209.087098][ C1] task:kworker/u8:15 state:R running task stack:20640 pid:5828 tgid:5828 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1209.087151][ C1] Workqueue: tipc_send tipc_conn_send_work [ 1209.087179][ C1] Call Trace: [ 1209.087185][ C1] [ 1209.087196][ C1] __schedule+0x16ec/0x5620 [ 1209.087251][ C1] ? __pfx___schedule+0x10/0x10 [ 1209.087290][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1209.087315][ C1] irqentry_exit+0x14f/0x8b0 [ 1209.087340][ C1] ? trace_irq_disable+0x3b/0x140 [ 1209.087366][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1209.087385][ C1] RIP: 0010:lock_release+0x46/0x3c0 [ 1209.087408][ C1] Code: 10 6b c9 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 13 6b c9 10 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 bc ff e7 0d 73 0d f5 0b 09 00 84 c0 0f 84 94 02 00 00 83 3d d6 12 e8 0d 00 0f 84 [ 1209.087457][ C1] RSP: 0018:ffffc90003ace130 EFLAGS: 00000293 [ 1209.087472][ C1] RAX: 0000000000000000 RBX: ffffffff90ad6801 RCX: 0000000080000001 [ 1209.087484][ C1] RDX: ffffc90003ace201 RSI: ffffffff8176c226 RDI: ffffffff8dfc8000 [ 1209.087497][ C1] RBP: dffffc0000000000 R08: ffffc90003ace720 R09: 0000000000000000 [ 1209.087510][ C1] R10: ffffc90003ace2b8 R11: fffff52000759c59 R12: ffffc90003ace730 [ 1209.087523][ C1] R13: ffffffff8176c226 R14: ffffffff8dfc8000 R15: ffffffff8176c226 [ 1209.087536][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1209.087573][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1209.087601][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1209.087628][ C1] ? deref_stack_reg+0x19f/0x230 [ 1209.087655][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1209.087677][ C1] unwind_next_frame+0x1bba/0x2550 [ 1209.087706][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1209.087729][ C1] ? tipc_msg_create+0x51/0x4d0 [ 1209.087809][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1209.087857][ C1] arch_stack_walk+0x11b/0x150 [ 1209.087892][ C1] ? tipc_group_proto_xmit+0xce/0x790 [ 1209.087936][ C1] ? __alloc_skb+0x27d/0x7d0 [ 1209.087960][ C1] stack_trace_save+0xa9/0x100 [ 1209.087980][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1209.087999][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.088025][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1209.088114][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 1209.088138][ C1] kasan_save_track+0x3e/0x80 [ 1209.088193][ C1] ? kasan_save_track+0x3e/0x80 [ 1209.088210][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1209.088229][ C1] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1209.088279][ C1] ? __alloc_skb+0x27d/0x7d0 [ 1209.088300][ C1] ? tipc_msg_create+0x51/0x4d0 [ 1209.088371][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1209.088394][ C1] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1209.088415][ C1] ? __alloc_skb+0x27d/0x7d0 [ 1209.088443][ C1] __alloc_skb+0x27d/0x7d0 [ 1209.088472][ C1] tipc_msg_create+0x51/0x4d0 [ 1209.088504][ C1] tipc_group_proto_xmit+0xce/0x790 [ 1209.088529][ C1] tipc_group_proto_rcv+0x182d/0x1e80 [ 1209.088566][ C1] tipc_sk_proto_rcv+0x25b/0x17d0 [ 1209.088593][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.088621][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.088645][ C1] ? __pfx_tipc_sk_proto_rcv+0x10/0x10 [ 1209.088669][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.088693][ C1] ? tipc_sk_filtering+0x13c/0x510 [ 1209.088718][ C1] tipc_sk_filter_rcv+0x315b/0x33a0 [ 1209.088739][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1209.088773][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.088801][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.088840][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1209.088867][ C1] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 1209.088892][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1209.088937][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1209.088965][ C1] tipc_sk_rcv+0x8cd/0x2b90 [ 1209.088983][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1209.089001][ C1] ? kmem_cache_free+0x187/0x6c0 [ 1209.089047][ C1] ? tipc_sk_proto_rcv+0x7a6/0x17d0 [ 1209.089068][ C1] ? process_scheduled_works+0xb5d/0x1860 [ 1209.089087][ C1] ? kthread+0x388/0x470 [ 1209.089121][ C1] ? tipc_sk_rcv+0x299/0x2b90 [ 1209.089158][ C1] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1209.089195][ C1] ? tipc_loopback_trace+0x48/0x1b0 [ 1209.089237][ C1] tipc_node_xmit+0x227/0xf10 [ 1209.089272][ C1] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1209.089301][ C1] ? tipc_sk_filter_rcv+0x3b9/0x33a0 [ 1209.089335][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.089386][ C1] tipc_node_distr_xmit+0x2e5/0x420 [ 1209.089422][ C1] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 1209.089466][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1209.089486][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1209.089516][ C1] tipc_sk_rcv+0x279a/0x2b90 [ 1209.089534][ C1] ? process_scheduled_works+0xb5d/0x1860 [ 1209.089551][ C1] ? worker_thread+0xa53/0xfc0 [ 1209.089575][ C1] ? kthread+0x388/0x470 [ 1209.089614][ C1] ? tipc_sk_rcv+0x299/0x2b90 [ 1209.089652][ C1] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1209.089671][ C1] ? rcu_is_watching+0x15/0xb0 [ 1209.089711][ C1] ? tipc_conn_send_work+0x1bd/0xaa0 [ 1209.089748][ C1] ? tipc_conn_send_work+0x1bd/0xaa0 [ 1209.089778][ C1] tipc_conn_send_work+0x707/0xaa0 [ 1209.089805][ C1] ? tipc_conn_send_work+0x1bd/0xaa0 [ 1209.089841][ C1] ? __pfx_tipc_conn_send_work+0x10/0x10 [ 1209.089886][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1209.089915][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1209.089941][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1209.089960][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1209.089981][ C1] process_scheduled_works+0xb5d/0x1860 [ 1209.090030][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1209.090056][ C1] ? assign_work+0x3d5/0x5e0 [ 1209.090080][ C1] worker_thread+0xa53/0xfc0 [ 1209.090126][ C1] kthread+0x388/0x470 [ 1209.090150][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1209.090168][ C1] ? __pfx_kthread+0x10/0x10 [ 1209.090192][ C1] ret_from_fork+0x514/0xb70 [ 1209.090234][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1209.090254][ C1] ? __switch_to+0xc79/0x1410 [ 1209.090283][ C1] ? __pfx_kthread+0x10/0x10 [ 1209.090308][ C1] ret_from_fork_asm+0x1a/0x30 [ 1209.090357][ C1] [ 1209.090369][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 8110 jiffies! g65649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1209.090389][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=39588 [ 1209.090400][ C1] rcu: rcu_preempt kthread starved for 8111 jiffies! g65649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1209.090419][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1209.090428][ C1] rcu: RCU grace-period kthread stack dump: [ 1209.090434][ C1] task:rcu_preempt state:I stack:26848 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1209.090486][ C1] Call Trace: [ 1209.090492][ C1] [ 1209.090503][ C1] __schedule+0x16ec/0x5620 [ 1209.090525][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.090580][ C1] ? __pfx___schedule+0x10/0x10 [ 1209.090613][ C1] ? schedule+0x90/0x360 [ 1209.090640][ C1] schedule+0x164/0x360 [ 1209.090666][ C1] schedule_timeout+0x158/0x2c0 [ 1209.090692][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1209.090717][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1209.090779][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1209.090804][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1209.090859][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1209.090947][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1209.090972][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1209.091000][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1209.091030][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1209.091056][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1209.091076][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1209.091103][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1209.091124][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1209.091150][ C1] kthread+0x388/0x470 [ 1209.091173][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1209.091194][ C1] ? __pfx_kthread+0x10/0x10 [ 1209.091218][ C1] ret_from_fork+0x514/0xb70 [ 1209.091240][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1209.091260][ C1] ? __switch_to+0xc79/0x1410 [ 1209.091288][ C1] ? __pfx_kthread+0x10/0x10 [ 1209.091313][ C1] ret_from_fork_asm+0x1a/0x30 [ 1209.091349][ C1] [ 1209.091355][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1209.091369][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1209.091397][ C0] NMI backtrace for cpu 0 [ 1209.091428][ C0] CPU: 0 UID: 0 PID: 12198 Comm: syz.1.1227 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1209.091452][ C0] Tainted: [L]=SOFTLOCKUP [ 1209.091458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1209.091467][ C0] RIP: 0010:__local_bh_enable+0x127/0x2f0 [ 1209.091485][ C0] Code: 05 e8 cd f0 a3 00 4c 89 e0 48 05 b0 04 00 00 49 39 84 24 a0 04 00 00 0f 85 fb 00 00 00 43 0f b6 04 3e 84 c0 0f 85 6e 01 00 00 <66> c7 03 00 00 65 48 8b 05 14 27 e2 10 48 8d 98 50 96 6b 92 48 89 [ 1209.091497][ C0] RSP: 0018:ffffc900046df290 EFLAGS: 00000046 [ 1209.091510][ C0] RAX: 0000000000000000 RBX: ffff88802c274240 RCX: ffffffff99752300 [ 1209.091521][ C0] RDX: 0000000000000000 RSI: ffffffff8d85f7dc RDI: ffff88802c274220 [ 1209.091533][ C0] RBP: 0000000000000001 R08: ffffffff8f8864f7 R09: 1ffffffff1f10c9e [ 1209.091543][ C0] R10: dffffc0000000000 R11: fffffbfff1f10c9f R12: ffff88802c273d80 [ 1209.091554][ C0] R13: 1ffff1100584e92c R14: 1ffff1100584e848 R15: dffffc0000000000 [ 1209.091566][ C0] FS: 00007f852d3716c0(0000) GS:ffff888126183000(0000) knlGS:0000000000000000 [ 1209.091580][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1209.091591][ C0] CR2: 00007fe9ea9d7ae0 CR3: 00000000847ec000 CR4: 00000000003526f0 [ 1209.091605][ C0] Call Trace: [ 1209.091611][ C0] [ 1209.091620][ C0] __local_bh_enable_ip+0x1a0/0x2b0 [ 1209.091638][ C0] tipc_sk_rcv+0x44d/0x2b90 [ 1209.091654][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.091677][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1209.091697][ C0] ? tipc_sk_rcv+0x299/0x2b90 [ 1209.091721][ C0] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1209.091735][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1209.091806][ C0] ? tipc_loopback_trace+0x48/0x1b0 [ 1209.091835][ C0] tipc_node_xmit+0x227/0xf10 [ 1209.091855][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1209.091875][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1209.091896][ C0] ? tipc_bcast_xmit+0x339/0x4f0 [ 1209.091940][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1209.091959][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1209.091979][ C0] ? kasan_save_track+0x4f/0x80 [ 1209.091994][ C0] ? kasan_save_track+0x3e/0x80 [ 1209.092008][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1209.092024][ C0] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1209.092040][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1209.092065][ C0] ? tipc_msg_create+0x51/0x4d0 [ 1209.092084][ C0] ? tipc_group_proto_xmit+0xce/0x790 [ 1209.092098][ C0] ? tipc_group_join+0x16e/0x710 [ 1209.092111][ C0] ? tipc_sk_join+0x478/0x6a0 [ 1209.092129][ C0] ? tipc_setsockopt+0x73e/0x990 [ 1209.092148][ C0] ? do_sock_setsockopt+0x17c/0x1b0 [ 1209.092168][ C0] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1209.092188][ C0] ? do_syscall_64+0x174/0x580 [ 1209.092209][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.092243][ C0] tipc_node_distr_xmit+0x2e5/0x420 [ 1209.092265][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1209.092285][ C0] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 1209.092316][ C0] ? tipc_group_proto_xmit+0x3d8/0x790 [ 1209.092333][ C0] tipc_group_join+0x570/0x710 [ 1209.092352][ C0] ? __pfx_tipc_group_join+0x10/0x10 [ 1209.092373][ C0] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1209.092390][ C0] ? tipc_nametbl_build_group+0x4ee/0x520 [ 1209.092406][ C0] ? tipc_nametbl_build_group+0x2e/0x520 [ 1209.092426][ C0] tipc_sk_join+0x478/0x6a0 [ 1209.092449][ C0] ? __pfx_tipc_sk_join+0x10/0x10 [ 1209.092469][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1209.092485][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1209.092509][ C0] tipc_setsockopt+0x73e/0x990 [ 1209.092531][ C0] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1209.092550][ C0] ? __fget_files+0x2a/0x420 [ 1209.092565][ C0] ? __fget_files+0x2a/0x420 [ 1209.092579][ C0] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1209.092633][ C0] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1209.092653][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 1209.092677][ C0] __x64_sys_setsockopt+0x143/0x1b0 [ 1209.092700][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.092716][ C0] do_syscall_64+0x174/0x580 [ 1209.092738][ C0] ? clear_bhb_loop+0x40/0x90 [ 1209.092756][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.092772][ C0] RIP: 0033:0x7f852f57ce59 [ 1209.092786][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.092799][ C0] RSP: 002b:00007f852d371028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1209.092815][ C0] RAX: ffffffffffffffda RBX: 00007f852f7f6270 RCX: 00007f852f57ce59 [ 1209.092826][ C0] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 1209.092836][ C0] RBP: 00007f852f612d6f R08: 0000000000000010 R09: 0000000000000000 [ 1209.092846][ C0] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 1209.092856][ C0] R13: 00007f852f7f6308 R14: 00007f852f7f6270 R15: 00007ffcaeed38c8 [ 1209.092875][ C0]