last executing test programs: 44m30.240787212s ago: executing program 32 (id=440): inotify_init() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x280002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x200000100000011, 0x803, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x50b6, &(0x7f0000002240)={0x0, 0x9f12, 0x8, 0x3, 0x1000}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendto$inet(r3, 0x0, 0x0, 0x8054, 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000440)={0xff, 0x1, 0x200}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)=0x1eb, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) 41m55.72794138s ago: executing program 33 (id=687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) pipe(&(0x7f0000000080)) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x280449c, 0x0) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x2000) 34m12.995589773s ago: executing program 34 (id=1395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmmsg$inet(r1, 0x0, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0xf9, @dev, 0xa}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') mq_notify(r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000080) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001c00)={0x2020}, 0x2020) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 32m7.216067608s ago: executing program 35 (id=1578): syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xfff1}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x43d5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote, @in6=@local, 0x4e23, 0x81, 0x4e20, 0xf2, 0x2, 0x20, 0xa0, 0x11, r6, r7}, {0x80000001, 0x741, 0x7, 0x151, 0x1, 0x10001, 0x8, 0x2}, {0x9, 0xd228, 0xfffffffffffffffe, 0x4}, 0x3, 0x6e6bb4, 0x2, 0x3, 0x2, 0x1}, {{@in=@local, 0x4d3}, 0xa, @in6=@mcast2, 0x0, 0x1, 0x0, 0x81, 0x8, 0x7, 0x6}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r8}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r8}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0xf, 0x18}, 0xc) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000180)={{r1}, 0x1, 0x4, 0x8}) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080007400000000008000640000000020900010073797a30ff0000000000000073797a3200000000140000001100010000000000000000000000000a83ad98f1370d594a73d44745c71523fadb4deac52df76003802c424dc8b4e94aafac106431310658bbf126d7900af785dbd1169fdc5d6d780c245905f6e0c7801ef3cb2a8bec23a3aa71aa963dc89b872942972dab8188da0e206c98240296acd3743878b07f6d22db857370656133e4a3"], 0x7c}}, 0x40000) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 31m1.50597002s ago: executing program 36 (id=1671): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r3], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 21m49.72340966s ago: executing program 37 (id=2408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r5, 0x1, 0x70bd26, 0xffffffff, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}]}, 0x28}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa95bbbbbbbb00beca5966cad7370028000000e863d94fdfb96af8637560267720cefb2d63cecb372fec7117322b49f2acd9c383666a97adaae93900000000000000000000a300"/90, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r6, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}, 0x1, 0x7a00}, 0x4000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r8, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) 21m29.128447275s ago: executing program 38 (id=2438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) r3 = socket(0x15, 0x5, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{}], 0x1) getsockopt(r3, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 19m49.550539911s ago: executing program 1 (id=2579): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) r4 = socket(0x15, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{}], 0x1) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 19m41.348354834s ago: executing program 3 (id=2594): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f000002"], 0x50) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs\x00', 0x1ff) fstat(r5, &(0x7f0000001200)) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000340)={0x2b, 0x101, 0x4, 0x8, 0x781, 0x81}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8c0) 19m41.062147676s ago: executing program 1 (id=2596): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800eaff", @ANYRES16=r3, @ANYBLOB="01002cbd7000f8dbdf25210000000c00990000800000570000000600eb0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea7d550) landlock_restrict_self(r1, 0x2) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x4, 0x0) recvmmsg(r5, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') landlock_restrict_self(r0, 0x6) 19m40.034334528s ago: executing program 3 (id=2597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x3, 0x67) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 19m35.25283506s ago: executing program 1 (id=2604): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x2}) pipe2$9p(&(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050a"], 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='1', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 19m30.570122556s ago: executing program 1 (id=2609): socket(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000780)={&(0x7f0000000440)=@canfd={{}, 0x4c, 0x3, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b0e47a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x8180}, 0x20044010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=@newtaction={0x34c, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x334, 0x1, [@m_bpf={0xbc, 0x6, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x101, 0x9, 0x80, 0x2}, {0xe454, 0x1, 0xd9, 0x4}, {0x42, 0x5, 0x0, 0x5}, {0x5, 0x4, 0x6f, 0x7}, {0x0, 0x0, 0xb3, 0x8}]}]}, {0x5d, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed37602646c6855209b52b2022e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x6c, 0x15, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x5, 0x3, 0x100000}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "b5076f03acb2067a7bd4ec16812c6a25"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x128, 0x10, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xe632, 0xffffffffffffffff, 0x5, 0x5ab76bcb}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xfff, 0x20000000, 0x9, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x1, 0x2, 0x9, 0x493}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xc9d1, 0x0, 0xaa, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x31c6, 0xffffffff, 0x1, 0x5, 0x7fffffff}, 0x4}}]}, {0x59, 0x6, "cacce1aa25ef79592b90d826e82a213ada88f7af26fbed4e13034fcb50b745f18cf21a9f328a480b97aaa39081dc3cea694c5f84f309e606a9fcd3311a175cb9c014bd073174b946e1362525f1e7ca3ba3cc2bef34"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xa4, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x3, 0x7, 0x2}, 0x5a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000, 0x401, 0xdbc0}, 0x6a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5a, 0x7a1e, 0x0, 0x7fff, 0xfff}, 0xfeff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x4, 0x8001, 0xaf0a}, 0xa26}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x3c, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "95f1a3136266ea21c9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20048801) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x22) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000700)={0x0, 0x1, [0x6, 0x7f, 0x7fffffffffffffff, 0x3ff, 0x0, 0x400]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000000)={0x5, {0x3, 0x7ff, 0x7, 0xf}, {0x3, 0x7e, 0x4, 0x1ff}, {0x659, 0x5}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES32=r3], 0x0, 0x46, 0x0, 0xfffffffd}, 0x28) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, &(0x7f0000000080)=""/203, 0xcb, 0xa) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(r7, 0x0, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x400006, 0x0, 0x9, '\x00', '\x00', '\x00', 0x0, 0x81, 0x3, 0xba, "b6855a32474f04ed0000ddcffbffffff"}) 19m24.980840384s ago: executing program 3 (id=2619): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002200)='net/ip_mr_vif\x00') preadv(r4, &(0x7f0000003440)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x5, 0xfffffff7) lseek(r4, 0xffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000e00)={0x2, 0x4, @start={0x0, 0x1, "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", "656805a3d568bbf5d9b38097aafb01dd490267d4cac3c5d43e5390122fb91011a7a241d479f1b1bdc8177f054b1b39666a10a86b77bf98cf161fe9e18f2ee6b3ca5ebda74d0c1ee97885c8253665edb690656c04b012edcac8590f587c5aef57d0d429f07b55c4fad32faf403af2a5b4efc99fb9c5ea05ea8ac52ecc0550ee545e672cbc2ac0dbebe570e4bfcb96a3ee81d049a008a7348ed1eeeec88daaefbca621607c15102d56e0ba9403335657b55f4b547b56c0e9bcf750b5a3b9d292594f049456b8cb8c2f165a695fe0419bf54ce1099012796dbaa1e5282e472037728edeced955b19b668b7db7c2b7e03566169ed5f472c6e2b65cf8169efe19d02fc58fda65090534b46b2d89cfc52ab98b5defeb92b88f2544303160975dde0a45f7a0abae792994e84c1f4f2f7fdb1ec21c454b33f3ce671db2f16f29a76bf5fd85fa76c88d9430ae237d05d895f5c4ef487de4c37b40195bb383ece15d04463c456b8a3f772f786f30a3ad244f9c429fffd15593b1016cc885e61f2c5e443da4275a343f0e9fa5604a20a43f3368b4fb5b0d98744b65523fa0a0ec8552b5c6ffbf14c74f691bc443f9cce266dee6235d6f7f84172920b1df580c57d48e8391de2c3631e5fd117519246bf230af5e1ad1acb8531decc9240905831ffa5e0fbae8151b3f7cdd0b6fd6d375b26d1e5f64764dce9fb5e7f09aa5c6d0fc6e58d4d50a4c8134555c51b1f10bb6b2c52dfafa8e5c8f689e604c66ebe0015608ca96124d5f91e09aa122cd62002dfb5c5e7ef2a14d18f93949db8520820cf443e3e4a2a54955a18ecfb88ce5290e960eeda2f210c93e921f210251be74451c5730d2e329584e20b92c3635f20f331a96dc5ee2903fac4055033c03b6c2c1b5dcdd60aee94240a5ce8562bf34df04ec6a4897aba8b4cfc5acfea66fbc7f3402336d1a1c7f5a18b5e6806a4fcac468c623eb3f6c56652c19786157e58d9d09255fc1cd3df432986f006ced1b850f074d92c6333881a7ccf0f6cf02fc00df5238f7819db37839d9757ddec8b40a7aea42ea9002fe3cb85fbc4723119940c4c13d40170e1c0b97ae4ab4c514477a605ad32fc4b08a3456a1fd8a15460ea842c05a6c98c0544a92f0e5206aec7b7c454a60364a658c5f2f6821f2140fdc6f47295c437d95f080801cf14eeae442109e39cfab23184ab9431e4a1354b26ee8dd40ad9427bdd1b89fa4a39b2456b7bcebfd14e181ea5e401944e0d849517a652470cb7875e7a4da30eb5bba7e982450d612f035b8fc23cb2f8d74999ced7f71254e2d93d63d9530a22a9752402f559339840d9829320964fc3edc302799c6024eb14a2427317cb1c2f06b90a8dac716314a2d75fc036d3dc5872c2002d8b5a16c2e33abd704d85fdbdb0bfe957562472183926b6035990e85d24dc1e3300855ab667094a05602bd51"}, [0xfffffffffffffffa, 0x5, 0xfffffffffffffffe, 0x2, 0x1, 0x200, 0x2, 0x8, 0x5, 0x42cbdbb4, 0x1, 0xe0, 0xfffffffffffffff7, 0xffffffffffff8001, 0xfc, 0xfffffffffffff5a2, 0xc4, 0xf, 0xa, 0x590, 0x6, 0x6, 0xf, 0x9, 0x9, 0x8, 0xfffffffffffffff1, 0x79e, 0x3, 0x10000, 0x8, 0x3, 0x200, 0x7, 0x4, 0x4, 0x5, 0x2, 0xb4, 0x9, 0x4, 0xfff, 0x101, 0xff, 0x7b9, 0xc2, 0x4, 0x3, 0x19fe, 0x5cf61ee7, 0xff, 0x4, 0xa3, 0x5c9b, 0x2, 0x7, 0x7, 0x7, 0x4d85, 0x8, 0x1, 0x1ff, 0x6, 0x67cf]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap}]}}) 19m23.498074022s ago: executing program 3 (id=2620): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x38479e6792826b0c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r0, 0x54a6) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000"], 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r3, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 19m22.534312614s ago: executing program 1 (id=2623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x3, 0x67) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 19m21.460229751s ago: executing program 3 (id=2625): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, &(0x7f0000000600)="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", 0xa8c, 0x6, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[], &(0x7f00000011c0)=""/113, 0x49, 0x71, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 19m6.473975431s ago: executing program 39 (id=2623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x3, 0x67) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 19m6.169051548s ago: executing program 40 (id=2625): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, &(0x7f0000000600)="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", 0xa8c, 0x6, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[], &(0x7f00000011c0)=""/113, 0x49, 0x71, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 18m25.375949543s ago: executing program 5 (id=2682): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = socket(0x28, 0x5, 0x0) listen(r4, 0x5) r5 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40004) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, 0xffffffffffffffff, 0x100000000) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) 18m20.790748634s ago: executing program 5 (id=2687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100"/13, @ANYBLOB="faa08015"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r5, 0x0, 0x0, 0xce2) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='usrquota_block']) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fsopen(0x0, 0x0) 18m16.844718858s ago: executing program 5 (id=2693): socket$inet(0x2b, 0x801, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x888000, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYBLOB]) shmctl$IPC_RMID(r4, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 18m14.703815929s ago: executing program 5 (id=2696): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x300, 0x0, 0x1}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0xfffffffffffffd9d, 0x4000004) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 18m10.682966802s ago: executing program 5 (id=2702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfffffffffffffff5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x200040, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}, {@common=@dfltgid}, {@common=@version_L}, {@common=@access_client}, {@timeout={'timeout', 0x3d, 0x51}}, {@common=@access_client}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@audit}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f000000ac40)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) connect$can_j1939(r4, &(0x7f0000000280)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x1}, 0xfd}, 0x18) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)=0x8) 18m8.587410514s ago: executing program 5 (id=2705): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, 0xffffffffffffffff, 0xffffe000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000140)={0x10, 0x0, r3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x913, &(0x7f0000000300)={0x0, 0x400600, 0x0, 0x1000001, 0xf7fffffc}, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(0x0, 0x1) fcntl$dupfd(r5, 0x0, r5) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x40000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) ioctl$sock_bt_hci(r8, 0x400448c9, 0x0) write(r7, &(0x7f0000000040)="05000000010000", 0x7) 17m50.126248535s ago: executing program 41 (id=2705): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, 0xffffffffffffffff, 0xffffe000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000140)={0x10, 0x0, r3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x913, &(0x7f0000000300)={0x0, 0x400600, 0x0, 0x1000001, 0xf7fffffc}, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(0x0, 0x1) fcntl$dupfd(r5, 0x0, r5) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x40000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) ioctl$sock_bt_hci(r8, 0x400448c9, 0x0) write(r7, &(0x7f0000000040)="05000000010000", 0x7) 2m15.509337207s ago: executing program 4 (id=4405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m12.309841022s ago: executing program 4 (id=4431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0xd, 0x1, 0x1, 0xfffffff8, 0x3, 0x0, 0x7}]}) 2m12.036138116s ago: executing program 4 (id=4436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m11.894634958s ago: executing program 4 (id=4439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 2m11.600953742s ago: executing program 4 (id=4443): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2m11.050972755s ago: executing program 4 (id=4449): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r0, 0x1, 0x10000001, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x976}]]}, 0x34}, 0x1, 0x0, 0x0, 0x54a1a7b10f47ca8e}, 0x8804) 2m10.709255126s ago: executing program 42 (id=4449): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r0, 0x1, 0x10000001, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x976}]]}, 0x34}, 0x1, 0x0, 0x0, 0x54a1a7b10f47ca8e}, 0x8804) 27.329729233s ago: executing program 2 (id=5185): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$TIOCGPTPEER(r0, 0x400461f1, 0x2) 25.229392041s ago: executing program 2 (id=5192): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1) 24.108421836s ago: executing program 2 (id=5196): mq_open(&(0x7f0000000200)='\xd9\x93\x10\xe3\x8e\x80Dg@]\xa6\xa2\x9ae\xf1\xce\x18h\x00\x95v\x17jk\xf4\x9f{\fw\x10J&qo\xf4\x9c0\x12*xO\x8b\xe3\xb6\xaa\xc5\x99\xbfK\xd3\x8d\x99K\xfa\xbdZX\x8b\x98e\xf1\x9f\xd6v^\x88\x1c', 0x840, 0x100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mq_timedsend(r0, 0x0, 0x0, 0x76, 0x0) 23.736863997s ago: executing program 2 (id=5198): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 23.667300051s ago: executing program 2 (id=5199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 23.30487578s ago: executing program 2 (id=5203): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 22.786147827s ago: executing program 43 (id=5203): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 9.480859132s ago: executing program 8 (id=5266): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000280)="935a") r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x4, &(0x7f0000000040)={0x19, "78b3060abe61f6304382447c087935e141a6349f941d4dc197ce00"}}) 7.437608473s ago: executing program 8 (id=5276): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x5, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 7.119039661s ago: executing program 0 (id=5277): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r1, 0x50) listen(r1, 0x0) 7.048036684s ago: executing program 0 (id=5279): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6.445036253s ago: executing program 8 (id=5284): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x10003, 0x3ff, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x6a, 0x8b], 0xeeee8000, 0x201145}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.22874848s ago: executing program 7 (id=5286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x4000000000800002, 0xfffffffffffffffd, 0x7, 0x3e, 0x6, 0x2, 0x40000, 0x5, 0xfdb, 0x10000000009, 0x1, 0x1, 0x1002], 0x1, 0x1c0083}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x464801, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.159975074s ago: executing program 9 (id=5287): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000380)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1, 0x10000000000000}]) 5.780943514s ago: executing program 7 (id=5289): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff", 0xa5}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a5", 0xed}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a696", 0x3e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000", 0x4c}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b4", 0x6a}, {&(0x7f0000000e80)="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", 0x128}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.779409807s ago: executing program 9 (id=5290): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() 5.717243347s ago: executing program 8 (id=5291): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xc010) r1 = socket(0x1d, 0xa, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x30000000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) 5.528238106s ago: executing program 7 (id=5292): r0 = socket(0x2b, 0x1, 0x1) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) mount$9p_fd(0x0, 0x0, 0x0, 0x21004a, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 4.832940664s ago: executing program 9 (id=5293): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x2a020400) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 4.789126198s ago: executing program 7 (id=5294): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4.584485477s ago: executing program 9 (id=5295): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_', @ANYRESDEC=0x0]) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924032003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 4.499942292s ago: executing program 7 (id=5296): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) 4.212857125s ago: executing program 6 (id=5297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024a00010100000009040000160202"], 0x0) 3.792962501s ago: executing program 7 (id=5298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000029c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x1, 0x101}) 3.750519735s ago: executing program 0 (id=5299): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x2000e080) 2.814503961s ago: executing program 44 (id=5298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000029c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x1, 0x101}) 2.799857258s ago: executing program 0 (id=5301): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xe0, 0x0, {0x0, 0x0, 0x4, 0xcbe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x80000) 2.651033802s ago: executing program 9 (id=5302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.62186462s ago: executing program 0 (id=5303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000000)='erofs\x00', 0x0, &(0x7f0000000380)='acl') 2.50476872s ago: executing program 6 (id=5304): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0xe4}], 0x2000000000000069, 0x0, 0x0, 0x0) 1.886785501s ago: executing program 6 (id=5305): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 730.081057ms ago: executing program 6 (id=5306): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r3, 0x0, 0x0, 0x4) 674.52641ms ago: executing program 0 (id=5307): close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) 671.680046ms ago: executing program 8 (id=5308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x484, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x454, 0x2, [@TCA_CGROUP_POLICE={0x450, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe962, 0xffffffffffffffff, 0x8, 0x3ff, 0x0, {0x1, 0x1, 0x8, 0x2, 0x8, 0x9}, {0x8, 0x2, 0x9, 0x1, 0x3}, 0x10001, 0x5, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcbb2, 0x3, 0x2, 0x3, 0x6, 0x8001, 0x1fc, 0x6, 0xbac7, 0x92, 0x3, 0x0, 0x200, 0x9, 0xfffffff2, 0x5, 0x208, 0x5, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x9, 0xc633, 0x2, 0x9, 0x8001, 0x3, 0x6, 0x4, 0x10, 0x3, 0x1ff, 0xa6, 0x2, 0x2, 0x4, 0x1, 0x3, 0x9, 0x0, 0x5, 0x1, 0x2, 0xb3, 0x7, 0x2, 0x101, 0x4, 0x624, 0xfffffffb, 0x1, 0x8, 0x1ff, 0xfffffffb, 0x4, 0x0, 0x2c1269cf, 0xffff, 0x2, 0x6, 0x4, 0x8e, 0x7, 0xffffffa4, 0xff, 0x56, 0x200, 0x3, 0x4, 0x7fffffff, 0xe95d, 0x10, 0x5, 0xb, 0x9, 0x5, 0x1, 0x8, 0x0, 0xa89, 0x5, 0x402, 0x7fff, 0x0, 0x1, 0x7, 0x7, 0x8, 0x100000, 0x5, 0x1, 0x84ca, 0x5d20, 0x40, 0x5, 0x3, 0x3, 0xe4, 0xfffffff9, 0x2, 0x7, 0x3, 0x2, 0x4, 0x1, 0x2, 0x5, 0x7f, 0x9, 0xf28, 0x7, 0x0, 0x7, 0x3, 0xfffffff8, 0x101, 0x4, 0x5, 0x6, 0x80000000, 0x0, 0x2, 0x7, 0xfff, 0x7fa, 0x5, 0x4, 0x101, 0xfffffffd, 0xd019, 0xffffff81, 0xf9c, 0xe00, 0x3, 0x3ff, 0x7, 0x6, 0x6, 0xfffffffa, 0x7, 0xd3, 0xfffffffb, 0x8, 0xa, 0x19, 0x5, 0x3, 0x4, 0x40, 0x3, 0x0, 0x2, 0x6, 0xd05, 0x6, 0x7, 0x2, 0x199, 0x8, 0xffff, 0x8001, 0x4, 0x6, 0x2, 0x800, 0x4, 0xff, 0x1, 0xffff, 0x6, 0x8, 0xe47, 0xdd, 0xfffffff8, 0x7ff, 0x6, 0xdfaf, 0x80, 0x5, 0x7fffffff, 0x1, 0xb, 0x5, 0x8, 0x10, 0x101, 0x3e00000, 0x2, 0x66c, 0x3ff, 0x30, 0x5, 0x9, 0x5, 0x3074, 0x401, 0x1, 0x9, 0xfd9b, 0x7, 0x0, 0x3ff, 0xb9c, 0x362, 0x100, 0x8, 0x2, 0x8, 0x8, 0x9, 0x0, 0x9, 0x1, 0xfffffff7, 0x6, 0x19, 0x4, 0xf, 0x9, 0x4, 0x2, 0x400, 0x4, 0x8, 0x9, 0x1, 0x4, 0x0, 0x8000, 0x3c, 0xffff, 0x2, 0x7, 0x9, 0x200, 0x0, 0x7, 0x1, 0x9, 0x520, 0x8, 0x3c9eaf17, 0x4, 0x6, 0x1f, 0xff, 0x80, 0x6, 0x5, 0x6, 0x0, 0x6, 0x1, 0x5]}]}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x80}, 0x0) 670.856827ms ago: executing program 9 (id=5309): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000004", @ANYRES32=0x1, @ANYRES32], 0x48) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 320.085693ms ago: executing program 6 (id=5310): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x880, 0x2) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000200)='./bus\x00') 272.727051ms ago: executing program 8 (id=5311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000a40)="123c163d8e1379f8f5e165bba2ee644ab23f7b4f158b153d324bdf0c9b46dcdf71dbff5ab31c1c6f0893c609831d792529d1df541e059e5d0817d37e194b61885803c0b6ea461f068ac7704d0296cc46d612a2d6893733e63c529dc8b98806c0c08064d1746cb773379bdb8431", 0x6d, 0x24008000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001500)="dad037410e96f80f05133d3a89a206c8382239c6d39e666cdcdc15b080df7981d4e20b262e99ebfc862b44ef0e157ff7d7b6d212370cb72e51a86627c15bbe649d77cb1c0dcfdee88dde651b8ac56b2a82ba88727cbcfd3084c3a716fdae3203f98195385e62e70f5d8986f0f7dbd386e8ff32b89f54ef0b1e047afa94a48b97ebc82cdd20c1fd5df7425ddfe47ea5a2ae823e69d5f6bfb6786a7a9efeeafa2092f36395e1d19177c849f059d589f7c742ffffef0539152abca6c45213920ee67faba2c40e", 0xc5}], 0x1}}], 0x1, 0xc0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 6 (id=5312): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48143}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xab28}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x6, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x0) ppoll(&(0x7f00000002c0)=[{r1, 0x4001}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2980.642731][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.666687][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.711880][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.731269][ T30] audit: type=1400 audit(2000001775.311:579): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25997 comm="syz.8.4292" daddr=fe80::bb dest=20002 [ 2980.759034][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.777274][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.784919][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.808715][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.817993][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.825943][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.850968][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.867520][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4295'. [ 2980.877269][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.884820][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.893564][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.903100][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.916335][T21662] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2980.936292][T15005] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 2980.956827][T15005] hid-generic 00A0:0006:0003.0018: hidraw0: HID v0.05 Device [syz1] on syz0 [ 2981.015211][T26005] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4296'. [ 2981.016608][T25535] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2981.088690][T21662] usb 8-1: Using ep0 maxpacket: 16 [ 2981.116408][T21662] usb 8-1: config 0 has no interfaces? [ 2981.148344][T21662] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2981.167060][T21662] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2981.186629][T25535] usb 7-1: Using ep0 maxpacket: 32 [ 2981.200078][T21662] usb 8-1: Product: syz [ 2981.204414][T21662] usb 8-1: Manufacturer: syz [ 2981.219990][T21662] usb 8-1: SerialNumber: syz [ 2981.222717][T25535] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 2981.262481][T21662] usb 8-1: config 0 descriptor?? [ 2981.267706][T25535] usb 7-1: config 0 has no interface number 0 [ 2981.301475][T25535] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2981.340530][T25535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2981.351961][T26009] overlayfs: workdir and upperdir must be separate subtrees [ 2981.363226][T25535] usb 7-1: Product: syz [ 2981.373728][T25535] usb 7-1: Manufacturer: syz [ 2981.396757][T25535] usb 7-1: SerialNumber: syz [ 2981.417999][T25535] usb 7-1: config 0 descriptor?? [ 2981.456337][T15005] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2981.478500][T25535] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2981.539009][T21662] usb 8-1: USB disconnect, device number 27 [ 2981.618805][T15005] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2981.630549][T15005] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2981.641359][T15005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2981.657758][T15005] usb 9-1: config 0 descriptor?? [ 2981.683481][T25535] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2981.736995][T25535] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2982.089137][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2982.097812][T18033] usb 7-1: USB disconnect, device number 16 [ 2982.113880][T18033] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2982.163702][T15005] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 2982.163915][T18033] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2982.189885][T18033] quatech2 7-1:0.51: device disconnected [ 2982.256098][T15005] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0019/input/input44 [ 2983.335275][T25561] wlan1: Trigger new scan to find an IBSS to join [ 2983.470816][T15005] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 2983.497616][T26038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4311'. [ 2983.507201][T15005] usb 9-1: USB disconnect, device number 29 [ 2983.574169][ T30] audit: type=1400 audit(2000001778.152:580): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26039 comm="syz.8.4312" daddr=fe80::aa dest=20003 [ 2983.789855][T26045] block nbd8: NBD_DISCONNECT [ 2984.450424][T18009] wlan1: Creating new IBSS network, BSSID 1e:fe:50:09:8b:e2 [ 2984.572125][T26048] fido_id[26048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 2984.573406][T25535] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2984.773823][T25535] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2984.812025][T25535] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2984.831895][T25535] usb 8-1: Product: syz [ 2984.884181][T25535] usb 8-1: Manufacturer: syz [ 2984.910425][T25535] usb 8-1: SerialNumber: syz [ 2984.939552][T25535] usb 8-1: config 0 descriptor?? [ 2984.959798][T25535] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2984.980979][T26061] sp0: Synchronizing with TNC [ 2985.004534][T18507] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2985.086307][T26061] Falling back ldisc for ttyS3. [ 2985.184616][T18507] usb 7-1: Using ep0 maxpacket: 32 [ 2985.205964][T18507] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 2985.225565][T18507] usb 7-1: config 0 has no interface number 0 [ 2985.230488][T26065] bridge_slave_0: entered promiscuous mode [ 2985.231734][T18507] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2985.292884][T18507] usb 7-1: config 0 interface 85 has no altsetting 0 [ 2985.327148][T18507] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2985.354430][T18507] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2985.370819][T18507] usb 7-1: Product: syz [ 2985.376840][T18507] usb 7-1: Manufacturer: syz [ 2985.382021][T18507] usb 7-1: SerialNumber: syz [ 2985.407870][T18507] usb 7-1: config 0 descriptor?? [ 2985.760745][T26078] smc: net device bond0 applied user defined pnetid SYZ2 [ 2985.772207][T26078] smc: net device bond0 erased user defined pnetid SYZ2 [ 2985.798390][T21662] usb 8-1: USB disconnect, device number 28 [ 2986.033006][T18507] appletouch 7-1:0.85: Geyser mode initialized. [ 2986.043755][T18507] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input45 [ 2986.247448][T25535] usb 7-1: USB disconnect, device number 17 [ 2986.287649][T25535] appletouch 7-1:0.85: input: appletouch disconnected [ 2986.444494][T26088] syz.8.4333: attempt to access beyond end of device [ 2986.444494][T26088] loop8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 2986.458515][T26088] gfs2: error -5 reading superblock [ 2986.661507][ T30] audit: type=1400 audit(2000001781.243:581): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26092 comm="syz.4.4335" dest=20259 [ 2986.773658][T18507] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2986.863001][ T30] audit: type=1400 audit(2000001781.444:582): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26098 comm="syz.6.4338" daddr=::ffff:172.20.20.39 dest=20007 [ 2986.944665][T18507] usb 9-1: Using ep0 maxpacket: 16 [ 2986.965053][T18507] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2986.985048][T18507] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2987.009176][T18507] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2987.029798][T18507] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2987.044891][T18507] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2987.069690][T18507] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2987.080479][T18507] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2987.089852][T18507] usb 9-1: Manufacturer: syz [ 2987.101018][T18507] usb 9-1: config 0 descriptor?? [ 2987.461241][T18507] rc_core: IR keymap rc-hauppauge not found [ 2987.473853][T18507] Registered IR keymap rc-empty [ 2987.479468][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.513480][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.546844][T18507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2987.562259][T18507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input46 [ 2987.604649][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.625792][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.673977][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.694649][T21662] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2987.734338][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.763687][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.803476][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.825780][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.854707][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.884269][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.910646][T21662] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2987.921260][T21662] usb 8-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 2987.933112][T18507] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2987.950592][T21662] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2987.977286][T18507] mceusb 9-1:0.0: Registered  with mce emulator interface version 1 [ 2988.013132][T21662] usb 8-1: config 0 descriptor?? [ 2988.019604][T18507] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2988.048145][T18507] usb 9-1: USB disconnect, device number 30 [ 2988.474461][T21662] itetech 0003:258A:6A88.001A: ignoring exceeding usage max [ 2988.489872][T21662] itetech 0003:258A:6A88.001A: ignoring exceeding usage max [ 2988.521841][T21662] itetech 0003:258A:6A88.001A: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.7-1/input0 [ 2988.682522][T18507] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2988.718813][T21662] usb 8-1: USB disconnect, device number 29 [ 2988.872855][T18507] usb 7-1: Using ep0 maxpacket: 8 [ 2989.379404][T18507] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2989.418152][T18507] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2989.444484][T18507] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2989.531060][T18507] usb 7-1: config 0 descriptor?? [ 2989.568052][T18507] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2989.829412][ T30] audit: type=1400 audit(2000001784.415:583): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26149 comm="syz.8.4360" daddr=fe80::bb dest=20000 [ 2990.122245][T25535] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2990.134207][T26163] netlink: 'syz.0.4365': attribute type 5 has an invalid length. [ 2990.222775][T18507] gspca_vc032x: reg_r err -71 [ 2990.241260][T18507] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 2990.314416][T25535] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2990.318107][T18507] usb 7-1: USB disconnect, device number 18 [ 2990.355270][T25535] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2990.436589][T25535] usb 8-1: config 0 descriptor?? [ 2990.474797][T25535] cp210x 8-1:0.0: cp210x converter detected [ 2991.030165][T26178] loop8: detected capacity change from 0 to 7 [ 2991.053665][T17705] Dev loop8: unable to read RDB block 7 [ 2991.067214][T17705] loop8: unable to read partition table [ 2991.077082][T17705] loop8: partition table beyond EOD, truncated [ 2991.106919][T25535] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2991.121333][T26178] Dev loop8: unable to read RDB block 7 [ 2991.127092][T26178] loop8: unable to read partition table [ 2991.141686][T25535] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 2991.156294][T26178] loop8: partition table beyond EOD, truncated [ 2991.163938][T25535] usb 8-1: cp210x converter now attached to ttyUSB0 [ 2991.177606][T26178] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 2991.201804][T25535] usb 8-1: USB disconnect, device number 30 [ 2991.232551][T25535] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2991.259015][T25535] cp210x 8-1:0.0: device disconnected [ 2991.266407][ T5189] Dev loop8: unable to read RDB block 7 [ 2991.289820][ T5189] loop8: unable to read partition table [ 2991.310065][ T5189] loop8: partition table beyond EOD, truncated [ 2991.860272][T26197] netlink: 'syz.8.4380': attribute type 1 has an invalid length. [ 2991.890510][T26199] veth0_to_bridge: entered promiscuous mode [ 2991.920995][T26197] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4380'. [ 2991.949793][T26198] veth0_to_bridge: left promiscuous mode [ 2992.043842][T14413] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 2992.246973][T26211] sp0: Synchronizing with TNC [ 2992.684609][T26226] netem: change failed [ 2993.375847][T26238] macvlan0: entered promiscuous mode [ 2993.399656][T26238] netlink: 'syz.4.4399': attribute type 1 has an invalid length. [ 2993.522254][T26238] netlink: 'syz.4.4399': attribute type 2 has an invalid length. [ 2994.138576][T26244] bridge_slave_0: entered promiscuous mode [ 2994.169717][T26244] bridge_slave_0: entered allmulticast mode [ 2994.193009][T25535] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2994.335156][ T30] audit: type=1326 audit(2000001788.927:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.363597][T25535] usb 8-1: Using ep0 maxpacket: 16 [ 2994.380371][T25535] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2994.401142][ T30] audit: type=1326 audit(2000001788.957:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.411805][T25535] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2994.445804][ T30] audit: type=1326 audit(2000001788.957:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.473431][T25535] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2994.485442][T25535] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2994.506472][T25535] usb 8-1: config 0 descriptor?? [ 2994.535401][ T30] audit: type=1326 audit(2000001788.957:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.619842][ T30] audit: type=1326 audit(2000001788.957:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.679710][ T30] audit: type=1326 audit(2000001788.957:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.771920][ T30] audit: type=1326 audit(2000001788.957:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.837010][ T30] audit: type=1326 audit(2000001788.957:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.899424][ T30] audit: type=1326 audit(2000001788.957:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2994.952298][ T30] audit: type=1326 audit(2000001788.957:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26245 comm="syz.8.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4252ab19 code=0x7ffc0000 [ 2995.040584][T25535] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2995.408260][ T5950] usb 8-1: USB disconnect, device number 31 [ 2996.422547][T26280] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4415'. [ 2998.314845][T26324] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4435'. [ 2998.377895][T26324] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4435'. [ 2998.715861][T26339] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 2998.807620][T18507] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2999.001854][T18507] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2999.021745][T18507] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2999.035178][T18507] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2999.046598][T18507] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2999.066281][T18507] usb 8-1: config 0 descriptor?? [ 2999.124740][T26350] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 2999.505698][T18507] steelseries 0003:1038:12B6.001C: reserved main item tag 0xe [ 2999.534157][T18507] steelseries 0003:1038:12B6.001C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.7-1/input0 [ 2999.992826][ T5950] usb 8-1: USB disconnect, device number 32 [ 3000.367538][T26374] binder: 26373:26374 ioctl c0306201 200000000340 returned -14 [ 3000.701035][T22994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3001.552731][T22994] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3001.562753][T22994] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3002.507328][T22994] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3002.517069][T22994] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3002.649699][T26379] lo speed is unknown, defaulting to 1000 [ 3002.668548][T26379] lo speed is unknown, defaulting to 1000 [ 3002.677748][T26379] dummy0 speed is unknown, defaulting to 1000 [ 3002.785654][ T5849] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 3002.943518][ T30] kauditd_printk_skb: 572 callbacks suppressed [ 3002.943541][ T30] audit: type=1400 audit(2000001797.532:1166): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26399 comm="syz.0.4467" dest=20004 [ 3002.978922][ T5849] usb 8-1: Using ep0 maxpacket: 32 [ 3003.032166][T26379] chnl_net:caif_netlink_parms(): no params data found [ 3003.033106][ T5849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3003.099825][ T5849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3003.121929][ T5849] usb 8-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 3003.158444][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.178456][ T30] audit: type=1326 audit(2000001797.772:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26404 comm="syz.0.4468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59898e929 code=0x0 [ 3003.213124][ T5849] usb 8-1: config 0 descriptor?? [ 3003.257638][T26379] bridge0: port 1(bridge_slave_0) entered blocking state [ 3003.275418][T26379] bridge0: port 1(bridge_slave_0) entered disabled state [ 3003.291738][T26379] bridge_slave_0: entered allmulticast mode [ 3003.304249][T26379] bridge_slave_0: entered promiscuous mode [ 3003.314052][T26379] bridge0: port 2(bridge_slave_1) entered blocking state [ 3003.323986][T26379] bridge0: port 2(bridge_slave_1) entered disabled state [ 3003.332168][T26379] bridge_slave_1: entered allmulticast mode [ 3003.343044][T26379] bridge_slave_1: entered promiscuous mode [ 3003.423224][T26379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3003.453665][T26379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3003.686923][ T5849] logitech 0003:046D:C50C.001D: unexpected long global item [ 3003.706866][ T5849] logitech 0003:046D:C50C.001D: parse failed [ 3003.713153][ T5849] logitech 0003:046D:C50C.001D: probe with driver logitech failed with error -22 [ 3003.727914][T26379] team0: Port device team_slave_0 added [ 3003.743142][T26379] team0: Port device team_slave_1 added [ 3003.886153][ T5950] usb 8-1: USB disconnect, device number 33 [ 3003.941898][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3003.975960][T26379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3003.983028][T26379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3004.015072][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.033562][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.054791][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.074387][T26379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3004.085669][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.104799][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.113492][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.139506][T26379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3004.154930][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.176870][T26379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3004.212684][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.230956][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.259963][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.287708][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.304722][T26379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3004.338428][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.367026][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.394893][ T5849] hid-generic 009C:0699:1000003.001E: unknown main item tag 0x0 [ 3004.438633][ T5849] hid-generic 009C:0699:1000003.001E: hidraw0: HID v200.05 Device [syz0] on syz0 [ 3004.584135][T26427] netlink: 'syz.7.4477': attribute type 15 has an invalid length. [ 3004.613583][T22994] Bluetooth: hci0: command tx timeout [ 3004.672648][T26379] hsr_slave_0: entered promiscuous mode [ 3004.729226][T26379] hsr_slave_1: entered promiscuous mode [ 3004.742225][T26379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3004.785150][T26379] Cannot create hsr debugfs directory [ 3005.407252][T26379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3005.444603][ T30] audit: type=1400 audit(2000001800.043:1168): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26446 comm="syz.6.4486" daddr=fc02:: dest=20003 [ 3005.584330][ T5950] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 3005.650662][ T30] audit: type=1400 audit(2000001800.243:1169): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26450 comm="syz.8.4488" daddr=fe80::d [ 3005.666654][T26379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3005.765118][ T5950] usb 8-1: Using ep0 maxpacket: 32 [ 3005.785901][ T5950] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 3005.799477][T26455] vivid-000: disconnect [ 3005.800655][ T5950] usb 8-1: config 0 has no interface number 0 [ 3005.810762][ T5950] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3005.812476][T26454] vivid-000: reconnect [ 3005.827999][ T5950] usb 8-1: config 0 interface 85 has no altsetting 0 [ 3005.862892][ T5950] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 3005.876034][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3005.888470][ T5950] usb 8-1: Product: syz [ 3005.890692][T26379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3005.892859][ T5950] usb 8-1: Manufacturer: syz [ 3005.892882][ T5950] usb 8-1: SerialNumber: syz [ 3005.898413][ T5950] usb 8-1: config 0 descriptor?? [ 3005.984772][T25535] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 3006.091643][T26379] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 3006.114848][T26379] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 3006.128832][T26379] bridge0: port 1(netdevsim0) entered disabled state [ 3006.156470][T25535] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64 [ 3006.169329][T26379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3006.181647][T25535] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 3006.206024][T25535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3006.222310][T25535] usb 7-1: config 0 descriptor?? [ 3006.230420][T26453] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 3006.527325][T26379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3006.551781][T26379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3006.575035][T26379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3006.588253][T26379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3006.671898][T25535] kye 0003:0458:0087.001F: hidraw0: USB HID v4.01 Device [HID 0458:0087] on usb-dummy_hcd.6-1/input0 [ 3006.694699][T22994] Bluetooth: hci0: command tx timeout [ 3006.719993][ T5950] appletouch 8-1:0.85: Geyser mode initialized. [ 3006.731399][ T5950] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input47 [ 3006.745192][ C0] appletouch 8-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 3006.912280][ T5950] usb 7-1: USB disconnect, device number 19 [ 3006.961464][T18507] usb 8-1: USB disconnect, device number 34 [ 3007.001281][T26471] fido_id[26471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 3007.018135][T26379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3007.062838][T18507] appletouch 8-1:0.85: input: appletouch disconnected [ 3007.069204][T26379] 8021q: adding VLAN 0 to HW filter on device team0 [ 3007.116533][T26474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4495'. [ 3007.151729][T18432] bridge0: port 1(bridge_slave_0) entered blocking state [ 3007.159366][T18432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3007.202950][T18432] bridge0: port 2(bridge_slave_1) entered blocking state [ 3007.210788][T18432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3007.268618][T26474] veth3: entered promiscuous mode [ 3007.947675][ T30] audit: type=1400 audit(2000001802.544:1170): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26490 comm="syz.6.4500" dest=20004 [ 3007.974184][T26379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3008.025183][T26493] tun0: tun_chr_ioctl cmd 1074025676 [ 3008.030586][T26493] tun0: owner set to 0 [ 3008.150597][T26379] veth0_vlan: entered promiscuous mode [ 3008.208044][T26379] veth1_vlan: entered promiscuous mode [ 3008.217007][T26497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4503'. [ 3008.315925][T26379] veth0_macvtap: entered promiscuous mode [ 3008.363088][T26379] veth1_macvtap: entered promiscuous mode [ 3008.437329][T26379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3008.443360][T26503] input: syz1 as /devices/virtual/input/input48 [ 3008.481414][T26379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3008.531982][T26379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.572045][T26379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.593512][T26379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.603107][T26379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3008.763299][T22994] Bluetooth: hci0: command tx timeout [ 3009.015316][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3009.043111][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3009.135846][T20159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3009.156261][T20159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3009.218647][ T30] audit: type=1400 audit(2000001803.815:1171): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26519 comm="syz.8.4513" daddr=::ffff:127.0.0.1 dest=16385 [ 3009.397096][T26526] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4514'. [ 3009.430972][T26526] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4514'. [ 3009.662119][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3009.834918][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 3009.877006][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3009.903325][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3009.926302][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3009.939850][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3009.950937][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3009.986380][ T43] usb 3-1: config 0 descriptor?? [ 3009.999427][T26541] lo speed is unknown, defaulting to 1000 [ 3010.010539][T26541] lo speed is unknown, defaulting to 1000 [ 3010.051498][T26541] dummy0 speed is unknown, defaulting to 1000 [ 3010.084782][T26545] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 3010.427756][ T43] microsoft 0003:045E:07DA.0020: unknown main item tag 0x1 [ 3010.461529][ T43] microsoft 0003:045E:07DA.0020: report is too long [ 3010.468252][ T43] microsoft 0003:045E:07DA.0020: item 0 2 0 11 parsing failed [ 3010.492990][ T43] microsoft 0003:045E:07DA.0020: parse failed [ 3010.510336][ T43] microsoft 0003:045E:07DA.0020: probe with driver microsoft failed with error -22 [ 3010.661402][ T43] usb 3-1: USB disconnect, device number 14 [ 3010.839626][T26566] netlink: 84 bytes leftover after parsing attributes in process `syz.8.4530'. [ 3010.850579][T22994] Bluetooth: hci0: command tx timeout [ 3011.499328][ T30] audit: type=1400 audit(2000001806.096:1172): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26579 comm="syz.6.4536" daddr=ff01::1 dest=20000 [ 3011.661060][T13920] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3011.670115][T26587] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 3011.844342][T13920] usb 3-1: Using ep0 maxpacket: 8 [ 3011.852797][T13920] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 3011.886253][T13920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3011.944588][T13920] pvrusb2: Hardware description: Terratec Grabster AV400 [ 3011.979887][T13920] pvrusb2: ********** [ 3011.997894][T13920] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 3012.000804][T26595] bond0: entered promiscuous mode [ 3012.025677][T13920] pvrusb2: Important functionality might not be entirely working. [ 3012.034222][T26595] bond_slave_0: entered promiscuous mode [ 3012.034513][T26595] bond_slave_1: entered promiscuous mode [ 3012.065172][T13920] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 3012.084671][T13920] pvrusb2: ********** [ 3012.148977][ T2342] pvrusb2: Invalid write control endpoint [ 3012.413231][T13920] usb 3-1: USB disconnect, device number 15 [ 3012.501027][ T30] audit: type=1400 audit(2000001807.096:1173): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26605 comm="syz.8.4546" daddr=fc01:: [ 3012.524192][ T2342] pvrusb2: Invalid write control endpoint [ 3012.537477][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 3012.563882][ T30] audit: type=1400 audit(2000001807.126:1174): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26605 comm="syz.8.4546" daddr=fc02:: [ 3012.600704][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 3012.608612][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 3012.654160][ T2342] pvrusb2: Device being rendered inoperable [ 3012.672045][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 3012.680062][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 3012.772842][ T2342] pvrusb2: Attached sub-driver cx25840 [ 3012.780112][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 3012.825787][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 3013.517917][ T30] audit: type=1400 audit(2000001808.117:1175): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=26627 comm="syz.6.4554" saddr=fe80::bb src=3 daddr=fe80::aa dest=3618 [ 3014.449925][T13920] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 3014.475305][ T6145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3015.358624][T26650] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4564'. [ 3015.510836][T13920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3015.529767][T13920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3015.542917][T13920] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 3015.559403][T13920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3015.591568][T13920] usb 3-1: config 0 descriptor?? [ 3016.209332][T13920] hid-led 0003:27B8:01ED.0021: probe with driver hid-led failed with error -71 [ 3016.267533][T13920] usb 3-1: USB disconnect, device number 16 [ 3017.964677][ T30] audit: type=1400 audit(2000001812.549:1176): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26695 comm="syz.6.4582" daddr=fe80:: [ 3018.158380][ T30] audit: type=1400 audit(2000001812.759:1177): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26700 comm="syz.6.4586" daddr=ff02::1 [ 3018.265138][T26707] Bluetooth: MGMT ver 1.23 [ 3019.440032][T26722] netlink: 'syz.7.4594': attribute type 1 has an invalid length. [ 3019.623985][T26728] pim6reg: entered allmulticast mode [ 3019.659514][T26728] pim6reg: left allmulticast mode [ 3019.717119][ T5849] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 3019.876955][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 3019.905677][ T5849] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 3019.946310][ T5849] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3019.962983][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.023440][ T5849] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3020.053062][ T5849] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3020.075262][ T5849] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 3020.104590][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.129448][ T5849] usb 3-1: Product: syz [ 3020.143751][ T5849] usb 3-1: Manufacturer: syz [ 3020.156940][ T5849] usb 3-1: SerialNumber: syz [ 3020.174344][ T5849] usb 3-1: config 0 descriptor?? [ 3020.467133][ T5849] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input50 [ 3021.057325][ T5849] usb 3-1: USB disconnect, device number 17 [ 3021.067542][ T5174] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 3021.263163][T13920] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 3021.460971][T13920] usb 8-1: config 0 has no interfaces? [ 3021.477247][T13920] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3021.506172][T13920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3021.539061][T13920] usb 8-1: config 0 descriptor?? [ 3021.966531][T26140] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 3022.026141][T26750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3022.052749][T26750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3022.072240][ T5950] usb 8-1: USB disconnect, device number 35 [ 3022.138239][T26140] usb 7-1: config 0 has no interfaces? [ 3022.143897][T26140] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3022.169823][T26140] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3022.201993][T26140] usb 7-1: config 0 descriptor?? [ 3022.418996][T17269] usb 7-1: USB disconnect, device number 20 [ 3022.425659][T13920] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3022.446653][ T5849] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 3022.590289][T13920] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3022.599859][T13920] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3022.611570][ T5849] usb 9-1: Using ep0 maxpacket: 16 [ 3022.617252][T13920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3022.630534][T13920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3022.647537][T13920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3022.660101][ T5849] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3022.673016][ T5849] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3022.682201][ T5849] usb 9-1: Product: syz [ 3022.688092][ T5849] usb 9-1: Manufacturer: syz [ 3022.693620][ T5849] usb 9-1: SerialNumber: syz [ 3022.699004][T13920] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3022.708481][T13920] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3022.718712][T13920] usb 3-1: Product: syz [ 3022.723558][T13920] usb 3-1: Manufacturer: syz [ 3022.735689][ T5849] usb 9-1: config 0 descriptor?? [ 3022.779940][T13920] cdc_wdm 3-1:1.0: skipping garbage [ 3022.790712][T13920] cdc_wdm 3-1:1.0: skipping garbage [ 3022.811041][T13920] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3022.817207][T13920] cdc_wdm 3-1:1.0: Unknown control protocol [ 3022.987979][T13920] usb 9-1: USB disconnect, device number 31 [ 3023.004980][T17269] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 3023.189787][T17269] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3023.204085][T17269] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3023.218001][T17269] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3023.228957][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 3023.231527][ T5849] usb 3-1: USB disconnect, device number 18 [ 3023.243628][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 3023.244813][T17269] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3023.253077][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 3023.267416][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3023.310099][T17269] usb 8-1: Product: syz [ 3023.317302][T17269] usb 8-1: Manufacturer: syz [ 3023.322144][T17269] usb 8-1: SerialNumber: syz [ 3023.454750][ T30] audit: type=1400 audit(2000001818.052:1178): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26786 comm="syz.6.4623" daddr=::ffff:172.20.20.4 [ 3023.576439][T17269] usb 8-1: 0:2 : does not exist [ 3023.611711][T17269] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 3023.697057][T17269] usb 8-1: USB disconnect, device number 36 [ 3024.051297][T26797] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3024.895602][T26807] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 3024.923694][T26807] Â: renamed from pim6reg1 [ 3025.016504][ C0] vkms_vblank_simulate: vblank timer overrun [ 3025.030344][ T30] audit: type=1400 audit(2000001819.523:1179): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26808 comm="syz.8.4632" daddr=ff02::1 dest=20003 [ 3025.290614][T26817] lo speed is unknown, defaulting to 1000 [ 3025.308804][T26817] lo speed is unknown, defaulting to 1000 [ 3025.326562][T26817] dummy0 speed is unknown, defaulting to 1000 [ 3025.834528][ T5950] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 3026.051367][ T5950] usb 7-1: config 0 has no interfaces? [ 3026.058291][ T5950] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3026.714547][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3026.726991][ T5950] usb 7-1: config 0 descriptor?? [ 3027.024270][T18033] usb 7-1: USB disconnect, device number 21 [ 3027.871307][T26841] lo speed is unknown, defaulting to 1000 [ 3027.936518][T26841] lo speed is unknown, defaulting to 1000 [ 3027.962858][ T5950] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3027.982276][T26841] dummy0 speed is unknown, defaulting to 1000 [ 3028.166160][ T5950] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3028.212278][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3028.256233][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3028.277235][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3028.340729][ T5950] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3028.351282][ T5950] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3028.366154][ T5950] usb 3-1: Manufacturer: syz [ 3028.386498][ T5950] usb 3-1: config 0 descriptor?? [ 3028.947798][ T5950] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 3028.976732][ T5950] appleir 0003:05AC:8243.0022: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 3029.048718][T26869] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4653'. [ 3029.072908][T17269] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 3029.073053][T26869] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4653'. [ 3029.199258][ T5950] usb 3-1: USB disconnect, device number 19 [ 3029.268230][T17269] usb 7-1: Using ep0 maxpacket: 16 [ 3029.319497][T17269] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 3029.335896][ T30] audit: type=1400 audit(2000001823.945:1180): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26871 comm="syz.0.4654" daddr=fe80::aa [ 3029.359731][T26870] fido_id[26870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3029.376647][T17269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3029.385500][T17269] usb 7-1: Product: syz [ 3029.389715][T17269] usb 7-1: Manufacturer: syz [ 3029.394566][T17269] usb 7-1: SerialNumber: syz [ 3029.413132][T17269] usb 7-1: config 0 descriptor?? [ 3029.459946][T17269] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 3029.522453][T26876] loop8: detected capacity change from 0 to 8 [ 3029.561210][T26876] Dev loop8: unable to read RDB block 8 [ 3029.570698][T26878] ieee802154 phy1 wpan1: encryption failed: -22 [ 3029.588103][T26876] loop8: unable to read partition table [ 3029.600089][T26878] ieee802154 phy1 wpan1: encryption failed: -22 [ 3029.605145][T26876] loop8: partition table beyond EOD, truncated [ 3029.614598][T26876] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 3029.653644][T17269] pwc: Warning: more than 1 configuration available. [ 3029.670767][T17269] pwc: Failed to set LED on/off time (-71) [ 3029.677825][T17269] pwc: send_video_command error -71 [ 3029.683486][T17269] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 3029.691155][T17269] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 3029.731565][T17269] usb 7-1: USB disconnect, device number 22 [ 3029.755984][T23989] udevd[23989]: setting owner of /dev/bus/usb/007/022 to uid=0, gid=0 failed: No such file or directory [ 3030.067544][T26891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3030.497784][T26903] syzkaller1: entered promiscuous mode [ 3030.517512][T26903] syzkaller1: entered allmulticast mode [ 3030.687218][T21662] IPVS: starting estimator thread 0... [ 3030.706438][T26908] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3030.801554][T26913] IPVS: using max 24 ests per chain, 57600 per kthread [ 3030.816664][T26917] syzkaller1: entered promiscuous mode [ 3030.834179][T26917] syzkaller1: entered allmulticast mode [ 3032.485549][T26988] lo speed is unknown, defaulting to 1000 [ 3032.535849][T26988] lo speed is unknown, defaulting to 1000 [ 3032.572514][T26988] dummy0 speed is unknown, defaulting to 1000 [ 3033.153339][T27007] syzkaller1: entered promiscuous mode [ 3033.190460][T27007] syzkaller1: entered allmulticast mode [ 3033.979542][T27038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4702'. [ 3034.232767][ T30] audit: type=1400 audit(2000001828.847:1181): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27047 comm="syz.7.4709" dest=2 [ 3034.338456][T27050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3034.381447][T27052] netlink: 'syz.6.4711': attribute type 1 has an invalid length. [ 3034.393294][T27052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4711'. [ 3034.673473][T27062] syzkaller1: entered promiscuous mode [ 3034.687820][T27062] syzkaller1: entered allmulticast mode [ 3034.727332][T27064] syzkaller1: entered promiscuous mode [ 3034.734251][T27064] syzkaller1: entered allmulticast mode [ 3034.742368][T27062] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 3034.939357][ T30] audit: type=1400 audit(2000001829.538:1182): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27069 comm="syz.7.4720" daddr=ff01::1 dest=20000 [ 3035.519269][ T5950] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 3035.599374][T17269] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3035.681336][T27092] tun0: tun_chr_ioctl cmd 1074025675 [ 3035.694033][T27092] tun0: persist enabled [ 3035.713375][T27092] tun0: tun_chr_ioctl cmd 1074025675 [ 3035.721804][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3035.733627][T27092] tun0: persist enabled [ 3035.743600][ T5950] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3035.765254][T17269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3035.778864][ T5950] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3035.800553][T17269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3035.809060][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3035.828495][T17269] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3035.850759][ T5950] usb 7-1: config 0 descriptor?? [ 3035.888821][T17269] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3035.911669][T17269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3035.986355][T17269] usb 3-1: config 0 descriptor?? [ 3036.434791][ T5950] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 3036.449455][ T5950] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 3036.881633][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.143328][ T5950] usb 7-1: USB disconnect, device number 23 [ 3037.173424][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.181571][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.193824][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.202592][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.210289][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.218686][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.226880][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.238906][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.246666][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.256406][T17269] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 3037.275371][T17269] plantronics 0003:047F:FFFF.0024: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3037.330750][T17269] usb 3-1: USB disconnect, device number 20 [ 3037.379802][T27111] fido_id[27111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 3037.536805][T27116] fido_id[27116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3039.264010][ T30] audit: type=1400 audit(2000001833.870:1183): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=27157 comm="syz.7.4754" saddr=fe80::bb daddr=fe80::aa dest=20002 [ 3039.297530][ T30] audit: type=1400 audit(2000001833.870:1184): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=27157 comm="syz.7.4754" saddr=fe80::bb daddr=fe80::aa dest=20002 [ 3039.557908][T27165] syzkaller1: entered promiscuous mode [ 3039.573749][T27165] syzkaller1: entered allmulticast mode [ 3039.933910][T27170] netlink: 64535 bytes leftover after parsing attributes in process `syz.8.4758'. [ 3039.943653][T27173] team_slave_1: entered promiscuous mode [ 3040.736793][ T30] audit: type=1400 audit(2000001835.351:1185): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27182 comm="syz.0.4763" daddr=fc00::1 [ 3041.186152][T27199] syzkaller1: entered promiscuous mode [ 3041.194362][T27199] syzkaller1: entered allmulticast mode [ 3041.684268][T18033] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3042.508779][T18033] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3042.591628][T18033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3042.635711][T18033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3042.652964][T18033] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3042.702752][T18033] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3042.714418][T27231] loop8: detected capacity change from 0 to 7 [ 3042.730083][T18033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3042.779685][T27231] Dev loop8: unable to read RDB block 7 [ 3042.791232][T18033] usb 3-1: config 0 descriptor?? [ 3042.796510][T27231] loop8: unable to read partition table [ 3042.802421][T27231] loop8: partition table beyond EOD, truncated [ 3042.833437][T27231] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 3042.833437][T27231] ) failed (rc=-5) [ 3042.888979][ T30] audit: type=1400 audit(2000001837.502:1186): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27234 comm="syz.0.4785" dest=2 [ 3043.257325][T18033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 3043.335485][T18033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 3044.012273][T18033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 3044.031836][T18033] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3044.067072][T18033] usb 3-1: USB disconnect, device number 21 [ 3044.219330][T27251] fido_id[27251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3045.600807][T19736] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 3045.672206][T19736] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 3045.790796][T27273] lo speed is unknown, defaulting to 1000 [ 3045.839523][T27273] lo speed is unknown, defaulting to 1000 [ 3045.869293][T27273] dummy0 speed is unknown, defaulting to 1000 [ 3045.890285][T19736] usb 5-1: USB disconnect, device number 28 [ 3045.905670][T26966] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3045.974761][ T5950] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 3046.243599][ T5950] usb 8-1: Using ep0 maxpacket: 8 [ 3046.276936][ T5950] usb 8-1: unable to get BOS descriptor or descriptor too short [ 3046.294526][ T5950] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 3046.302203][ T5950] usb 8-1: can't read configurations, error -71 [ 3046.374239][T27288] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4805'. [ 3046.427774][T27288] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4805'. [ 3046.445423][T27290] netlink: 'syz.8.4806': attribute type 39 has an invalid length. [ 3046.732998][T27295] netlink: 'syz.6.4807': attribute type 1 has an invalid length. [ 3047.103280][T18033] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 3047.263311][T18033] usb 9-1: Using ep0 maxpacket: 8 [ 3047.281970][T18033] usb 9-1: config 51 has an invalid interface number: 123 but max is 0 [ 3047.308792][T27306] vlan0: entered allmulticast mode [ 3047.336206][T18033] usb 9-1: config 51 has no interface number 0 [ 3047.348774][T27306] macvtap0: entered allmulticast mode [ 3047.363354][T27306] veth0_macvtap: entered allmulticast mode [ 3047.374134][T18033] usb 9-1: config 51 interface 123 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 3047.411956][T18033] usb 9-1: config 51 interface 123 has no altsetting 0 [ 3047.456621][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4814'. [ 3047.470487][T18033] usb 9-1: string descriptor 0 read error: -22 [ 3047.484789][T18033] usb 9-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=64.81 [ 3047.503106][T18033] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.530250][T18033] usb 9-1: unsupported MDLM descriptors [ 3047.708639][T27313] lo speed is unknown, defaulting to 1000 [ 3047.717650][T27313] lo speed is unknown, defaulting to 1000 [ 3047.727433][T27313] dummy0 speed is unknown, defaulting to 1000 [ 3047.778985][T19736] usb 9-1: USB disconnect, device number 32 [ 3048.767780][T27322] kvm: user requested TSC rate below hardware speed [ 3049.450659][T27313] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4816'. [ 3049.487638][T27313] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4816'. [ 3049.811974][T18033] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3049.975327][T18033] usb 3-1: Using ep0 maxpacket: 32 [ 3049.990338][T18033] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3050.012989][T18033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 3050.046368][T18033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3050.057910][T18033] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3050.078256][T18033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3050.102948][T18033] usb 3-1: config 0 descriptor?? [ 3050.122623][T27342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3050.159741][T18033] hub 3-1:0.0: USB hub found [ 3050.172401][T19736] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 3050.357689][T18033] hub 3-1:0.0: 2 ports detected [ 3050.377026][T19736] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3050.401125][T19736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3050.409684][T19736] usb 8-1: Product: syz [ 3050.414593][T19736] usb 8-1: Manufacturer: syz [ 3050.426113][T19736] usb 8-1: SerialNumber: syz [ 3050.455934][T19736] usb 8-1: config 0 descriptor?? [ 3050.565656][T18033] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 3050.597453][T18033] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 3050.623930][T18033] usbhid 3-1:0.0: can't add hid device: -71 [ 3050.756534][T18033] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3050.793200][T18033] usb 3-1: USB disconnect, device number 22 [ 3050.869796][T27363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3050.887033][T19736] usb 8-1: Firmware: major: 13, minor: 242, hardware type: UNKNOWN (129) [ 3051.095299][T19736] usb 8-1: Read permanent extended address ac:83:de:59:10:b2:10:83 from device [ 3051.131319][T19736] usb 8-1: atusb_probe: initialization failed, error = -524 [ 3051.139703][T19736] atusb 8-1:0.0: probe with driver atusb failed with error -524 [ 3051.184639][T27367] sp0: Synchronizing with TNC [ 3051.233989][T27366] [U] è [ 3051.243923][ T30] audit: type=1326 audit(2000001845.866:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27368 comm="syz.2.4839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bfa18e929 code=0x0 [ 3051.297993][T19736] usb 8-1: USB disconnect, device number 39 [ 3051.684227][ T30] audit: type=1400 audit(2000001846.306:1188): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27377 comm="syz.0.4842" daddr=::ffff:0.0.0.0 dest=20000 [ 3052.207663][T27394] syzkaller1: entered promiscuous mode [ 3052.221375][ T43] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 3052.246917][T27394] syzkaller1: entered allmulticast mode [ 3052.980456][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 3053.034231][ T43] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 3053.131247][ T43] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3053.259669][ T43] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3053.409788][ T43] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3053.499754][ T43] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3053.562826][ T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3053.597970][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3053.836792][ T43] usb 7-1: usb_control_msg returned -32 [ 3053.850931][ T43] usbtmc 7-1:16.0: can't read capabilities [ 3054.238749][T27446] usb 7-1: usbtmc_ioctl_clear_in_halt returned -32 [ 3054.969916][ T43] usb 9-1: new low-speed USB device number 33 using dummy_hcd [ 3055.174844][ C1] vkms_vblank_simulate: vblank timer overrun [ 3055.190555][ T43] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3055.207829][ T43] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 3055.216650][ T43] usb 9-1: can't read configurations, error -71 [ 3055.306907][ T5950] usb 7-1: USB disconnect, device number 24 [ 3055.510380][ T30] audit: type=1326 audit(2000001850.128:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27470 comm="syz.2.4868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bfa18e929 code=0x0 [ 3056.029048][T17269] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 3056.199012][T17269] usb 8-1: Using ep0 maxpacket: 8 [ 3056.207012][T17269] usb 8-1: config 0 has an invalid interface number: 130 but max is 0 [ 3056.216215][T17269] usb 8-1: config 0 has no interface number 0 [ 3056.226027][T17269] usb 8-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 3056.238071][T17269] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3056.255024][T17269] usb 8-1: Product: syz [ 3056.259505][T17269] usb 8-1: Manufacturer: syz [ 3056.264276][T17269] usb 8-1: SerialNumber: syz [ 3056.273934][T17269] usb 8-1: config 0 descriptor?? [ 3056.289954][T17269] as10x_usb: device has been detected [ 3056.296410][T17269] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 3056.359364][ T43] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 3056.367781][T17269] usb 8-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 3056.540201][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 3056.563387][ T43] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 3056.586245][ T43] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 3056.602537][ T43] usb 9-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 3056.614806][ T43] usb 9-1: Product: syz [ 3056.625482][ T43] usb 9-1: Manufacturer: syz [ 3056.646214][ T43] usb 9-1: SerialNumber: syz [ 3056.655093][ T43] usb 9-1: config 0 descriptor?? [ 3056.707735][T17269] as10x_usb: error during firmware upload part1 [ 3056.720086][T17269] Registered device PCTV Systems picoStick (74e) [ 3056.775571][T17269] usb 8-1: USB disconnect, device number 40 [ 3057.471390][ T43] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 3057.512838][T17269] Unregistered device PCTV Systems picoStick (74e) [ 3057.517689][T17269] as10x_usb: device has been disconnected [ 3058.300000][ T43] gspca_sunplus: reg_w_riv err -71 [ 3058.305769][ T43] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 3058.333061][T19736] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 3058.347049][ T43] usb 9-1: USB disconnect, device number 35 [ 3058.362838][T27510] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input52 [ 3058.376463][T23989] udevd[23989]: setting mode of /dev/bus/usb/009/035 to 020664 failed: No such file or directory [ 3058.400080][T23989] udevd[23989]: setting owner of /dev/bus/usb/009/035 to uid=0, gid=0 failed: No such file or directory [ 3058.496944][T19736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 3058.527643][T19736] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 3058.536770][T19736] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3058.577477][T19736] usb 8-1: config 0 descriptor?? [ 3058.583454][T27506] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3058.631972][T27514] KVM: debugfs: duplicate directory 27514-4 [ 3059.046833][T19736] elan 0003:04F3:0755.0026: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 3059.067621][ T5849] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 3059.245842][T27506] elan 0003:04F3:0755.0026: pid 27506 passed too short report [ 3059.259598][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3059.276473][T17269] usb 8-1: USB disconnect, device number 41 [ 3059.291519][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3059.306625][ T5849] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 3059.333317][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3059.352670][ T5849] usb 7-1: config 0 descriptor?? [ 3059.803134][ T5849] pyra 0003:1E7D:2CF6.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 3059.998256][ T5950] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3060.172006][ T5950] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3060.187790][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.208731][ T5950] usb 3-1: config 0 descriptor?? [ 3060.446556][ T5950] kaweth 3-1:0.0: Firmware present in device. [ 3060.584795][ T5849] pyra 0003:1E7D:2CF6.0027: couldn't init struct pyra_device [ 3060.616778][ T5849] pyra 0003:1E7D:2CF6.0027: couldn't install mouse [ 3060.670845][ T5849] pyra 0003:1E7D:2CF6.0027: probe with driver pyra failed with error -71 [ 3060.743079][ T5849] usb 7-1: USB disconnect, device number 25 [ 3060.816551][ T5950] kaweth 3-1:0.0: Statistics collection: 0 [ 3060.823284][T19736] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 3060.831363][ T5950] kaweth 3-1:0.0: Multicast filter limit: 0 [ 3060.840609][ T5950] kaweth 3-1:0.0: MTU: 0 [ 3060.844959][ T5950] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3060.996440][T19736] usb 8-1: Using ep0 maxpacket: 32 [ 3061.021710][T19736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3061.161698][T19736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3061.253706][T19736] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3061.422930][T19736] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3061.482182][T19736] usb 8-1: config 0 descriptor?? [ 3061.491493][ T5950] kaweth 3-1:0.0: kaweth interface created at eth17 [ 3061.509805][T19736] hub 8-1:0.0: USB hub found [ 3061.638687][ T5950] usb 3-1: USB disconnect, device number 23 [ 3061.693238][T27559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3061.733748][T19736] hub 8-1:0.0: 1 port detected [ 3061.901922][T27563] syzkaller0: refused to change device tx_queue_len [ 3062.353144][T19736] hub 8-1:0.0: activate --> -90 [ 3062.404188][T27575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3062.796525][ T43] usb 8-1: USB disconnect, device number 42 [ 3062.945291][ T5849] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3063.005819][T19736] usb 8-1-port1: config error [ 3063.096007][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 3063.104048][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3063.119905][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3063.131124][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3063.141428][ T5849] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3063.151605][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3063.167175][ T5849] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3063.176461][ T5849] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3063.184626][ T5849] usb 3-1: Manufacturer: syz [ 3063.192123][ T5849] usb 3-1: config 0 descriptor?? [ 3063.225616][T18033] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 3063.395995][T18033] usb 7-1: Using ep0 maxpacket: 8 [ 3063.415823][T18033] usb 7-1: config 0 has no interfaces? [ 3063.432514][T18033] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 3063.455689][T18033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3063.472676][T18033] usb 7-1: Product: syz [ 3063.483831][T18033] usb 7-1: Manufacturer: syz [ 3063.495151][T18033] usb 7-1: SerialNumber: syz [ 3063.510244][T18033] usb 7-1: config 0 descriptor?? [ 3063.535897][ T5849] rc_core: IR keymap rc-hauppauge not found [ 3063.550516][ T5849] Registered IR keymap rc-empty [ 3063.567549][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3063.706957][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3063.746689][ T5849] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 3063.769169][ T5849] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53 [ 3063.786943][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3063.815258][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3063.827059][T17269] usb 7-1: USB disconnect, device number 26 [ 3063.833697][ C0] rc rc0: IR event FIFO is full! [ 3063.838717][ C0] rc rc0: IR event FIFO is full! [ 3063.843746][ C0] rc rc0: IR event FIFO is full! [ 3063.848762][ C0] rc rc0: IR event FIFO is full! [ 3063.853767][ C0] rc rc0: IR event FIFO is full! [ 3063.859192][ C0] rc rc0: IR event FIFO is full! [ 3063.864202][ C0] rc rc0: IR event FIFO is full! [ 3063.869194][ C0] rc rc0: IR event FIFO is full! [ 3063.874189][ C0] rc rc0: IR event FIFO is full! [ 3063.881071][T27596] rc rc0: two consecutive events of type pulse [ 3063.893410][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3063.956383][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3063.986272][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3064.006502][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3064.034877][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3064.076056][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3064.100993][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3064.124900][ T5849] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3064.165619][ T5849] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3064.184826][ T5849] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3064.199824][ T5849] usb 3-1: USB disconnect, device number 24 [ 3064.293225][T27604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3064.596623][T27612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3066.923408][ T30] audit: type=1400 audit(2000001861.554:1190): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=27641 comm="syz.0.4937" saddr=fe80::bb daddr=fe80::aa dest=20002 [ 3066.974519][ T30] audit: type=1400 audit(2000001861.554:1191): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=27641 comm="syz.0.4937" saddr=fe80::aa daddr=fe80::aa dest=20002 [ 3067.110203][T27648] syzkaller1: entered promiscuous mode [ 3067.117723][T27648] syzkaller1: entered allmulticast mode [ 3067.243101][T17269] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 3067.405119][T17269] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3067.438479][T17269] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3067.466854][T17269] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3067.474204][T27654] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3067.511320][T17269] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3067.537744][T17269] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3067.572156][T17269] usb 9-1: config 0 descriptor?? [ 3068.063827][T17269] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 3068.133190][T13920] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 3068.310860][T13920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3068.319349][T27668] pim6reg1: entered promiscuous mode [ 3068.338924][T13920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 3068.362762][T13920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3068.372111][T27668] pim6reg1: entered allmulticast mode [ 3068.376317][T13920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3068.406339][T13920] usb 3-1: Product: syz [ 3068.417434][T13920] usb 3-1: Manufacturer: syz [ 3068.423156][T13920] usb 3-1: SerialNumber: syz [ 3068.438652][T27660] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3069.102230][ T43] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 3069.262527][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 3069.284953][ T5849] usb 9-1: USB disconnect, device number 36 [ 3069.298545][ T43] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3069.325761][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.352519][ T43] usb 7-1: Product: syz [ 3069.356897][ T43] usb 7-1: Manufacturer: syz [ 3069.361558][ T43] usb 7-1: SerialNumber: syz [ 3069.373612][ T43] usb 7-1: config 0 descriptor?? [ 3069.497289][T13920] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3069.504256][T13920] cdc_ncm 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 3069.513225][T13920] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3069.586053][ T43] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3069.631974][ T5950] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 3069.705470][T13920] cdc_ncm 3-1:1.0: setting tx_max = 36 [ 3069.727720][T13920] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3069.753465][T13920] usb 3-1: USB disconnect, device number 25 [ 3069.761142][T13920] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 3069.790512][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3069.832639][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3069.847846][ T5950] usb 8-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 3069.858204][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.895690][ T5950] usb 8-1: config 0 descriptor?? [ 3069.933969][T27681] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 8388612, id = 0 [ 3070.203189][ T43] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 3070.223553][ T43] usb 7-1: USB disconnect, device number 27 [ 3070.338438][ T5950] elo 0003:04E7:0030.0029: unknown main item tag 0x0 [ 3070.346697][ T5950] elo 0003:04E7:0030.0029: unknown main item tag 0x0 [ 3070.354495][ T5950] elo 0003:04E7:0030.0029: unknown main item tag 0x0 [ 3070.361376][ T5950] elo 0003:04E7:0030.0029: unknown main item tag 0x0 [ 3070.361889][T13920] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 3070.368496][ T5950] elo 0003:04E7:0030.0029: unknown main item tag 0x0 [ 3070.384030][ T5950] elo 0003:04E7:0030.0029: unknown main item tag 0x0 [ 3070.390786][ T5950] elo 0003:04E7:0030.0029: unknown main item tag 0x0 [ 3070.400341][ T5950] elo 0003:04E7:0030.0029: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.7-1/input0 [ 3070.541581][ T5849] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3070.545439][ T43] usb 8-1: USB disconnect, device number 43 [ 3070.549463][T13920] usb 9-1: Using ep0 maxpacket: 32 [ 3070.573608][T13920] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 3070.583001][T13920] usb 9-1: config 0 has no interface number 0 [ 3070.589162][T13920] usb 9-1: config 0 interface 184 has no altsetting 0 [ 3070.607523][T13920] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3070.617250][T13920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3070.626792][T13920] usb 9-1: Product: syz [ 3070.631008][T13920] usb 9-1: Manufacturer: syz [ 3070.637053][T13920] usb 9-1: SerialNumber: syz [ 3070.645916][T13920] usb 9-1: config 0 descriptor?? [ 3070.654356][T13920] smsc75xx v1.0.0 [ 3070.714982][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3070.726833][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3070.743654][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3070.767403][ T5849] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3070.793559][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3070.822958][ T5849] usb 3-1: config 0 descriptor?? [ 3070.918636][T27692] loop2: detected capacity change from 0 to 7 [ 3070.930319][T27692] Dev loop2: unable to read RDB block 7 [ 3070.937077][T27692] loop2: unable to read partition table [ 3070.943597][T27692] loop2: partition table beyond EOD, truncated [ 3070.950004][T27692] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3071.291922][ T5849] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3071.336939][ T30] audit: type=1400 audit(2000001865.966:1192): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27699 comm="syz.6.4963" daddr=ff01::1 [ 3071.626925][T27707] Unknown status report in ack skb [ 3071.679192][T13920] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 3071.701486][ T43] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 3071.876792][ T43] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 3071.880446][T13920] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3071.893702][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3071.903968][T13920] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 3071.916474][T13920] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 3071.924688][ T43] usb 8-1: Product: syz [ 3071.931674][ T43] usb 8-1: Manufacturer: syz [ 3071.936629][ T43] usb 8-1: SerialNumber: syz [ 3071.953055][ T43] usb 8-1: config 0 descriptor?? [ 3071.960952][T13920] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3071.985788][T13920] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 3072.004780][T13920] usb 9-1: USB disconnect, device number 37 [ 3072.145576][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4969'. [ 3072.371173][ T43] airspy 8-1:0.0: Board ID: 00 [ 3072.376274][ T43] airspy 8-1:0.0: Firmware version: [ 3072.615195][ C1] plantronics 0003:047F:FFFF.002A: usb_submit_urb(ctrl) failed: -1 [ 3072.630885][ T5950] usb 3-1: USB disconnect, device number 26 [ 3073.187607][ T43] airspy 8-1:0.0: usb_control_msg() failed -71 request 0f [ 3073.227173][ T43] airspy 8-1:0.0: Registered as swradio24 [ 3073.244155][ T43] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 3073.280242][ T43] usb 8-1: USB disconnect, device number 44 [ 3073.381291][T26140] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 3073.550263][T26140] usb 7-1: Using ep0 maxpacket: 8 [ 3073.567062][T26140] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3073.590184][T26140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3073.603396][T26140] usb 7-1: Product: syz [ 3073.607700][T26140] usb 7-1: Manufacturer: syz [ 3073.620313][T26140] usb 7-1: SerialNumber: syz [ 3073.634654][T26140] usb 7-1: config 0 descriptor?? [ 3073.655171][T26140] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3073.670128][T26140] usb 7-1: setting power ON [ 3073.675793][T26140] dvb-usb: bulk message failed: -22 (2/0) [ 3073.695886][T26140] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3073.710712][T26140] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3073.730789][T26140] usb 7-1: media controller created [ 3073.808555][T26140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3073.868617][T27731] dvb-usb: bulk message failed: -22 (3/0) [ 3073.890661][T27731] dvb-usb: bulk message failed: -22 (3/0) [ 3073.913527][T26140] usb 7-1: selecting invalid altsetting 6 [ 3073.930390][T26140] usb 7-1: digital interface selection failed (-22) [ 3073.949292][T26140] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3073.990524][T26140] usb 7-1: setting power OFF [ 3073.995862][T26140] dvb-usb: bulk message failed: -22 (2/0) [ 3074.014362][T26140] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3074.039677][T26140] (NULL device *): no alternate interface [ 3074.122682][T26140] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3074.179368][T26140] usb 7-1: USB disconnect, device number 28 [ 3074.501715][T27765] netlink: 1428 bytes leftover after parsing attributes in process `syz.7.4986'. [ 3074.519484][ T5950] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 3074.733037][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3074.805034][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3074.827642][ T5950] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3074.867732][ T5950] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3074.877980][ T5950] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.981707][ T5950] usb 9-1: config 0 descriptor?? [ 3075.127394][T18033] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 3075.311640][T18033] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3075.440438][T18033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3075.590863][T18033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3075.613560][ C0] Unknown status report in ack skb [ 3075.658611][T18033] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3075.710899][T18033] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3075.747647][T18033] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3075.766634][ T5950] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 3075.767223][T18033] usb 8-1: Manufacturer: syz [ 3075.785080][T27776] lo speed is unknown, defaulting to 1000 [ 3075.787259][T27776] lo speed is unknown, defaulting to 1000 [ 3075.813653][T27776] dummy0 speed is unknown, defaulting to 1000 [ 3075.843541][T27784] binfmt_misc: register: failed to install interpreter file ./file0 [ 3075.861646][T18033] usb 8-1: config 0 descriptor?? [ 3076.135206][ T30] audit: type=1400 audit(2000001870.758:1193): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27790 comm="syz.0.4995" daddr=ff02::1 dest=65533 [ 3076.247414][ T5849] usb 9-1: USB disconnect, device number 38 [ 3076.292402][T18033] appleir 0003:05AC:8243.002C: unknown main item tag 0x0 [ 3076.344008][T18033] appleir 0003:05AC:8243.002C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 3076.914629][T13553] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3076.961318][T27806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3076.969522][T27806] bridge0: port 3(bond1) entered blocking state [ 3076.976349][T27806] bridge0: port 3(bond1) entered disabled state [ 3076.984458][T27806] bond1: entered allmulticast mode [ 3076.993212][T27806] bond1: entered promiscuous mode [ 3076.999667][T27806] bridge0: port 3(bond1) entered blocking state [ 3077.006773][T27806] bridge0: port 3(bond1) entered forwarding state [ 3077.165167][T18033] usb 8-1: USB disconnect, device number 45 [ 3077.358376][ T43] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3077.463471][T18432] bridge0: port 3(bond1) entered disabled state [ 3077.510581][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3077.522353][ T43] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3077.535147][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3077.545094][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3077.558655][T27810] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 3077.571942][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3077.825248][ T43] usb 3-1: USB disconnect, device number 27 [ 3077.962503][ T30] audit: type=1400 audit(2000001872.599:1194): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=27816 comm="syz.7.5006" saddr=fe80::bb src=20003 daddr=fe80::aa dest=20002 [ 3078.146478][T27824] input: syz1 as /devices/virtual/input/input54 [ 3078.320734][T27828] loop6: detected capacity change from 0 to 7 [ 3078.346034][T27828] Dev loop6: unable to read RDB block 7 [ 3078.358783][T27828] loop6: unable to read partition table [ 3078.364883][T27828] loop6: partition table beyond EOD, truncated [ 3078.374282][T27828] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3078.806344][T27849] macsec0: entered promiscuous mode [ 3078.822564][T27849] macsec0: entered allmulticast mode [ 3078.832239][T27849] veth1_macvtap: entered promiscuous mode [ 3078.850312][T27849] veth1_macvtap: entered allmulticast mode [ 3078.866687][T27849] macsec0: left promiscuous mode [ 3078.874223][T27849] macsec0: left allmulticast mode [ 3078.879783][T27849] veth1_macvtap: left allmulticast mode [ 3079.432944][ T30] audit: type=1400 audit(2000001874.060:1195): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27864 comm="syz.2.5025" dest=2 [ 3080.341324][T27883] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 3080.390346][T27886] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 3080.435987][T27886] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 3080.484827][T27886] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 3080.623011][T27892] loop4: detected capacity change from 0 to 7 [ 3080.676393][T27892] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 3080.681906][T27892] loop4: p1 start 1600481121 is beyond EOD, truncated [ 3080.763610][T27892] loop4: p2 size 1346830336 extends beyond EOD, truncated [ 3080.799690][T27892] loop4: p3 start 1572963 is beyond EOD, truncated [ 3080.814874][T27892] loop4: p4 start 1536 is beyond EOD, truncated [ 3080.823918][T27892] loop4: p5 start 12 is beyond EOD, truncated [ 3081.044445][T24011] udevd[24011]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 3081.381870][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.559793][T27921] fuse: root generation should be zero [ 3082.464977][T27940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5054'. [ 3083.538972][ T30] audit: type=1400 audit(2000001878.172:1196): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27968 comm="syz.2.5066" daddr=ff01::1 dest=20000 [ 3083.734598][ T30] audit: type=1400 audit(2000001878.362:1197): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27981 comm="syz.8.5071" dest=2048 [ 3084.450498][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5077'. [ 3084.624525][T26140] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 3084.799809][T26140] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3084.821149][T26140] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3084.833875][T26140] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3084.848780][T26140] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 3084.861439][T26140] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 3084.885455][T26140] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3084.902334][T26140] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3084.927683][T26140] usb 9-1: Product: syz [ 3084.931940][T26140] usb 9-1: Manufacturer: syz [ 3084.973680][ T30] audit: type=1400 audit(2000001879.603:1198): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=28010 comm="syz.2.5082" saddr=fe80::bb daddr=fe80::aa dest=20002 [ 3084.976271][T26140] cdc_wdm 9-1:1.0: skipping garbage [ 3085.024657][T26140] cdc_wdm 9-1:1.0: skipping garbage [ 3085.074506][ T30] audit: type=1400 audit(2000001879.633:1199): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=28010 comm="syz.2.5082" saddr=fe80::bb daddr=fe80::aa dest=20002 [ 3085.087530][T26140] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 3085.120067][T26140] cdc_wdm 9-1:1.0: Unknown control protocol [ 3085.311368][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 3085.311987][ T5849] usb 9-1: USB disconnect, device number 39 [ 3085.318047][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 3085.318073][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3085.873854][T18033] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 3085.996444][T28042] block nbd7: shutting down sockets [ 3086.067448][T18033] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3086.083037][T18033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3086.121118][T18033] usb 3-1: config 0 descriptor?? [ 3086.385367][T18033] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3086.420582][T18033] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 3086.454369][T18033] [drm] Initialized udl on minor 2 [ 3086.620768][T18033] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 3086.669460][T18033] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 3086.842801][T17269] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3086.869416][T17269] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 3086.877854][T18033] usb 3-1: USB disconnect, device number 28 [ 3087.178937][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5109'. [ 3087.416231][T28082] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5112'. [ 3087.446763][T28082] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5112'. [ 3087.544411][T18033] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 3087.745430][T18033] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3087.790655][T18033] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3087.811236][T18033] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3087.820982][T18033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3088.013144][T26140] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 3088.113557][T18033] usb 8-1: usb_control_msg returned -32 [ 3088.131989][T18033] usbtmc 8-1:16.0: can't read capabilities [ 3088.198365][T26140] usb 9-1: Using ep0 maxpacket: 8 [ 3088.230667][T26140] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 3088.260721][T26140] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 3088.321976][T26140] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3088.350137][T26140] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 3088.363078][T26140] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 3088.380269][T26140] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3088.401506][T26140] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3088.425990][T28100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5120'. [ 3088.435486][T26140] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3088.508995][T28102] usbtmc 8-1:16.0: usbtmc_ioctl_request failed -32 [ 3088.535598][T17269] usb 8-1: USB disconnect, device number 46 [ 3088.685520][T26140] usb 9-1: GET_CAPABILITIES returned 0 [ 3088.691128][T26140] usbtmc 9-1:16.0: can't read capabilities [ 3088.942385][T26140] usb 9-1: USB disconnect, device number 40 [ 3090.337867][T18033] kernel read not supported for file /vga_arbiter (pid: 18033 comm: kworker/0:5) [ 3091.740915][T18033] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 3091.918722][T18033] usb 7-1: Using ep0 maxpacket: 16 [ 3091.941866][T18033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3091.963682][T18033] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3091.980811][T18033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3092.008197][T18033] usb 7-1: Product: syz [ 3092.027153][T18033] usb 7-1: Manufacturer: syz [ 3092.038137][T18033] usb 7-1: SerialNumber: syz [ 3092.058348][T18033] usb 7-1: config 0 descriptor?? [ 3092.085752][T18033] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3092.097892][T18033] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 3092.253908][T28169] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5141'. [ 3092.687442][T18033] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 3093.363950][T18033] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 3093.384568][T18033] em28xx 7-1:0.0: board has no eeprom [ 3093.460288][T18033] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 3093.473023][T18033] em28xx 7-1:0.0: dvb set to bulk mode. [ 3093.504971][T13920] em28xx 7-1:0.0: Binding DVB extension [ 3093.546274][T18033] usb 7-1: USB disconnect, device number 29 [ 3093.588070][T18033] em28xx 7-1:0.0: Disconnecting em28xx [ 3093.801799][T13920] em28xx 7-1:0.0: Registering input extension [ 3093.837397][T18033] em28xx 7-1:0.0: Closing input extension [ 3094.178222][T18033] em28xx 7-1:0.0: Freeing device [ 3098.153494][T18033] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 3098.206019][T28201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3098.218745][T18033] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3098.259257][T28201] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3098.538768][ T30] audit: type=1400 audit(2000001893.169:1200): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28211 comm="syz.2.5152" dest=2 [ 3098.844074][ T5189] udevd[5189]: worker [24011] terminated by signal 33 (Unknown signal 33) [ 3098.874805][ T5189] udevd[5189]: worker [24011] failed while handling '/devices/virtual/block/loop8' [ 3098.884266][ T30] audit: type=1400 audit(2000001893.510:1201): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28219 comm="syz.8.5156" daddr=fe80:: dest=20002 [ 3099.054930][T28225] lo speed is unknown, defaulting to 1000 [ 3099.063492][T28225] lo speed is unknown, defaulting to 1000 [ 3099.101178][T28225] dummy0 speed is unknown, defaulting to 1000 [ 3099.113348][T28228] xt_hashlimit: size too large, truncated to 1048576 [ 3099.178075][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5157'. [ 3100.298919][T28256] lo speed is unknown, defaulting to 1000 [ 3100.307870][T28256] lo speed is unknown, defaulting to 1000 [ 3100.316188][T28256] dummy0 speed is unknown, defaulting to 1000 [ 3100.866685][T18033] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3101.047011][T18033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3101.077619][T18033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3101.106140][T18033] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3101.129773][T18033] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3101.153104][T18033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.175969][T18033] usb 3-1: config 0 descriptor?? [ 3101.407562][ T30] audit: type=1400 audit(2000001896.051:1202): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28274 comm="syz.7.5172" daddr=ff01::1 dest=20000 [ 3101.697154][T18033] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 3101.739330][T18033] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3101.968534][T18033] usb 3-1: USB disconnect, device number 29 [ 3101.976449][T28265] plantronics 0003:047F:FFFF.002E: usb_submit_urb(ctrl) failed: -19 [ 3102.402316][T28294] input: syz1 as /devices/virtual/input/input56 [ 3102.804786][T28304] block nbd7: NBD_DISCONNECT [ 3102.836197][T28304] block nbd7: Send disconnect failed -22 [ 3102.891778][T28304] block nbd7: Disconnected due to user request. [ 3102.951892][T28304] block nbd7: shutting down sockets [ 3102.985669][T28308] delete_channel: no stack [ 3103.555196][T18033] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 3103.765526][T18033] usb 7-1: Using ep0 maxpacket: 8 [ 3103.836749][T18033] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3103.934305][T18033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.050062][T18033] usb 7-1: Product: syz [ 3104.110808][T18033] usb 7-1: Manufacturer: syz [ 3104.156225][T18033] usb 7-1: SerialNumber: syz [ 3104.222227][T18033] usb 7-1: config 0 descriptor?? [ 3104.256781][T18033] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3104.282289][T18033] usb 7-1: setting power ON [ 3104.292765][T18033] dvb-usb: bulk message failed: -22 (2/0) [ 3104.333675][T18033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3104.359644][ T43] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 3104.375932][T18033] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3104.414880][T18033] usb 7-1: media controller created [ 3104.524489][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 3104.528318][T18033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3104.532310][ T43] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 3104.554588][ T43] usb 8-1: config 0 has no interface number 0 [ 3104.577007][ T43] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3104.582069][T18033] usb 7-1: selecting invalid altsetting 6 [ 3104.592102][T18033] usb 7-1: digital interface selection failed (-22) [ 3104.599066][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.599096][ T43] usb 8-1: Product: syz [ 3104.599114][ T43] usb 8-1: Manufacturer: syz [ 3104.599130][ T43] usb 8-1: SerialNumber: syz [ 3104.626559][ T43] usb 8-1: config 0 descriptor?? [ 3104.629236][T18033] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3104.642548][T18033] usb 7-1: setting power OFF [ 3104.650344][ T43] smsc95xx v2.0.0 [ 3104.664732][T18033] dvb-usb: bulk message failed: -22 (2/0) [ 3104.670555][T18033] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3104.691388][T18033] (NULL device *): no alternate interface [ 3104.772375][T18033] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3104.854701][T18033] usb 7-1: USB disconnect, device number 30 [ 3105.073101][ T43] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3105.094447][ T43] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3105.939734][ T43] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3105.974285][T18033] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 3106.068398][ T43] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 3106.098608][ T43] usb 8-1: USB disconnect, device number 47 [ 3106.133817][T18033] usb 7-1: Using ep0 maxpacket: 8 [ 3106.189220][T18033] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3106.219333][T18033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3106.245789][T28344] kernel read not supported for file /Ù“㎀Dg@]¦¢šeñÎh (pid: 28344 comm: syz.2.5196) [ 3106.260125][ T30] audit: type=1800 audit(2000001900.903:1203): pid=28344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.5196" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=104861 res=0 errno=0 [ 3106.283283][T18033] usb 7-1: Product: syz [ 3106.293622][T18033] usb 7-1: Manufacturer: syz [ 3106.313505][T18033] usb 7-1: SerialNumber: syz [ 3106.319420][T26140] kernel read not supported for file /Ù“㎀Dg@]¦¢šeñÎh (pid: 26140 comm: kworker/1:0) [ 3106.335658][T18033] usb 7-1: config 0 descriptor?? [ 3106.598424][T18033] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3106.922104][T28359] lo speed is unknown, defaulting to 1000 [ 3107.109225][T26966] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3107.152838][T28359] lo speed is unknown, defaulting to 1000 [ 3107.165926][T28359] dummy0 speed is unknown, defaulting to 1000 [ 3107.224926][T26966] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3107.238240][T18033] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3107.283883][T18033] usb 7-1: USB disconnect, device number 31 [ 3107.441784][T26966] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3107.761356][T26966] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3108.224330][T26966] bond1: left allmulticast mode [ 3108.230316][T26966] bond1: left promiscuous mode [ 3108.242063][T26966] bridge0: port 3(bond1) entered disabled state [ 3108.265694][T26966] bridge_slave_1: left allmulticast mode [ 3108.302019][T26966] bridge_slave_1: left promiscuous mode [ 3108.319330][T26966] bridge0: port 2(bridge_slave_1) entered disabled state [ 3108.335351][T14413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3108.348713][T14413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3108.359260][T14413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3108.372503][T14413] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3108.378215][T26966] bridge_slave_0: left allmulticast mode [ 3108.380915][T14413] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3108.414767][T26966] bridge_slave_0: left promiscuous mode [ 3108.435568][T26966] bridge0: port 1(bridge_slave_0) entered disabled state [ 3108.962417][ T43] usb 8-1: new low-speed USB device number 48 using dummy_hcd [ 3109.124988][ T43] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3109.141165][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3109.181264][ T43] usb 8-1: config 0 descriptor?? [ 3109.565664][T26966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3109.578706][T26966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3109.590402][T26966] bond0 (unregistering): Released all slaves [ 3109.944328][T26966] bond1 (unregistering): Released all slaves [ 3109.963158][T28386] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5212'. [ 3110.037619][T28380] lo speed is unknown, defaulting to 1000 [ 3110.063044][T28380] lo speed is unknown, defaulting to 1000 [ 3110.070968][T28380] dummy0 speed is unknown, defaulting to 1000 [ 3110.472444][T22994] Bluetooth: hci0: command tx timeout [ 3110.673189][T26966] hsr_slave_0: left promiscuous mode [ 3110.688243][T26966] hsr_slave_1: left promiscuous mode [ 3110.694918][T26966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3110.704170][T26966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3110.720563][T26966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3110.734088][T26966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3110.789794][T26966] veth1_macvtap: left promiscuous mode [ 3110.810866][T26966] veth0_macvtap: left promiscuous mode [ 3110.827021][T26966] veth1_vlan: left promiscuous mode [ 3110.840464][T26966] veth0_vlan: left promiscuous mode [ 3110.848226][ T43] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3110.872426][ T43] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 3110.899883][ T43] asix 8-1:0.0: probe with driver asix failed with error -71 [ 3110.911570][ T5950] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 3110.926090][ T43] usb 8-1: USB disconnect, device number 48 [ 3111.071741][ T5950] usb 7-1: Using ep0 maxpacket: 8 [ 3111.317592][ T5950] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3111.343281][ T5950] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3111.352978][ T5950] usb 7-1: can't read configurations, error -71 [ 3111.649068][T28418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3112.007241][ C1] vkms_vblank_simulate: vblank timer overrun [ 3112.556377][T22994] Bluetooth: hci0: command tx timeout [ 3112.770577][ T43] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 3112.897618][T26966] team0 (unregistering): Port device team_slave_1 removed [ 3112.940455][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 3112.950630][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3112.984410][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 3112.996425][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3113.008965][ T43] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3113.021458][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3113.053092][ T43] usb 7-1: config 0 descriptor?? [ 3113.059051][T28433] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 3113.073475][ T43] hub 7-1:0.0: USB hub found [ 3113.101457][T26966] team0 (unregistering): Port device team_slave_0 removed [ 3113.288385][ T5849] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 3113.327017][ T43] hub 7-1:0.0: 2 ports detected [ 3113.513668][ T5849] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 3113.546149][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3113.563813][ T5849] usb 9-1: config 0 descriptor?? [ 3114.177598][ T43] usb 7-1: USB disconnect, device number 34 [ 3114.338353][ C1] vkms_vblank_simulate: vblank timer overrun [ 3114.412964][T28438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3114.434433][T28438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3114.488426][ T5849] usb 9-1: Cannot set autoneg [ 3114.493655][ T5849] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 3114.513307][ T5849] usb 9-1: USB disconnect, device number 41 [ 3114.631669][T22994] Bluetooth: hci0: command tx timeout [ 3114.664503][T28380] chnl_net:caif_netlink_parms(): no params data found [ 3114.763822][T28380] bridge0: port 1(bridge_slave_0) entered blocking state [ 3114.771438][T28380] bridge0: port 1(bridge_slave_0) entered disabled state [ 3114.779075][T28380] bridge_slave_0: entered allmulticast mode [ 3114.787908][T28380] bridge_slave_0: entered promiscuous mode [ 3114.803953][T28380] bridge0: port 2(bridge_slave_1) entered blocking state [ 3114.812381][T28380] bridge0: port 2(bridge_slave_1) entered disabled state [ 3114.824662][T28380] bridge_slave_1: entered allmulticast mode [ 3114.870470][T28380] bridge_slave_1: entered promiscuous mode [ 3115.253595][T28380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3115.271605][T28380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3115.437639][T28462] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 3115.632591][T28380] team0: Port device team_slave_0 added [ 3115.644938][T28380] team0: Port device team_slave_1 added [ 3115.655307][T28460] lo speed is unknown, defaulting to 1000 [ 3115.717263][T28460] lo speed is unknown, defaulting to 1000 [ 3115.724325][T28380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3115.734947][T28380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3115.764249][T28380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3115.780167][T28460] dummy0 speed is unknown, defaulting to 1000 [ 3115.794978][T28380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3115.806276][T28380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3115.836376][ T5950] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 3115.858046][T26966] Bluetooth: hci5: Frame reassembly failed (-84) [ 3115.866497][T28380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3116.004374][T28380] hsr_slave_0: entered promiscuous mode [ 3116.012037][T28380] hsr_slave_1: entered promiscuous mode [ 3116.024358][ T5950] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3116.039784][T28380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3116.053344][T28380] Cannot create hsr debugfs directory [ 3116.060436][ T5950] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3116.094303][ T5950] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3116.107912][ T5950] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.159353][T28470] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3116.183219][ T5950] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 3116.434483][ T43] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 3116.507515][ T43] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3116.611473][ T5950] usb 9-1: USB disconnect, device number 42 [ 3116.708639][T14413] Bluetooth: hci0: command tx timeout [ 3116.849301][T28483] tipc: Started in network mode [ 3116.854345][T28483] tipc: Node identity 2d0b50e1d8a655f0002e, cluster identity 4711 [ 3117.395166][ T30] audit: type=1400 audit(2000001912.039:1204): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28490 comm="syz.8.5249" dest=2 [ 3117.559649][T28493] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5250'. [ 3117.662738][T28380] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3117.683198][T28380] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3117.701824][T28380] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3117.720616][T28380] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3117.839886][ T6062] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3117.870756][T28380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3117.901406][T28380] 8021q: adding VLAN 0 to HW filter on device team0 [ 3117.911499][T22994] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 3117.918535][T14413] Bluetooth: hci5: command 0x1003 tx timeout [ 3117.958891][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062b2d400: rx timeout, send abort [ 3117.967355][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062b2d800: rx timeout, send abort [ 3117.982916][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062b2d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3118.000607][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062b2d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3118.120171][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 3118.127421][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3118.140365][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 3118.147648][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3118.554150][T28380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3119.383800][T28380] veth0_vlan: entered promiscuous mode [ 3119.432835][T28380] veth1_vlan: entered promiscuous mode [ 3119.554673][T28380] veth0_macvtap: entered promiscuous mode [ 3119.567462][ T5849] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 3119.600068][T28380] veth1_macvtap: entered promiscuous mode [ 3119.728717][T28380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3119.749112][ T5849] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3119.785174][ T5849] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3119.799873][T28380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3119.955936][ T5849] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3120.020386][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.020624][T28380] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3120.245298][T28380] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3120.402566][T28533] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 3120.430818][ T5849] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 3120.457841][T28380] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3120.505785][T28380] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3120.781120][ T5950] usb 8-1: USB disconnect, device number 49 [ 3120.870604][T18432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3120.906277][T18432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3120.969884][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3120.979268][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3121.097448][T13920] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 3121.266320][T13920] usb 9-1: Using ep0 maxpacket: 16 [ 3121.274450][T13920] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3121.295722][T13920] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 3121.307845][T13920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3121.325436][T13920] usb 9-1: config 0 descriptor?? [ 3121.774234][T13920] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 3121.800343][T13920] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 3121.814571][T13920] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 3121.830316][T13920] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 3121.848679][T13920] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 3121.888415][T13920] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 3121.931919][T28570] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5271'. [ 3121.950137][ C0] usb 9-1: input irq status -75 received [ 3122.210691][T28552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3122.237967][T28552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3122.257770][T13920] usb 9-1: USB disconnect, device number 43 [ 3122.423329][ T30] audit: type=1400 audit(2000001917.071:1205): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=28576 comm="syz.7.5274" daddr=fe80::aa dest=20003 [ 3123.301873][T28590] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 3123.645738][T28596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5280'. [ 3125.274369][ T5849] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 3125.444109][ T5849] usb 9-1: Using ep0 maxpacket: 16 [ 3125.461366][ T5849] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3125.477798][ T5849] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 3125.536380][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 3125.599049][ T5849] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3125.658191][ T5849] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 3125.729960][ T5849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.763622][ T5849] usb 9-1: Product: syz [ 3125.784017][ T5849] usb 9-1: Manufacturer: syz [ 3125.788719][ T5849] usb 9-1: SerialNumber: syz [ 3125.911100][ T5849] usb 9-1: config 0 descriptor?? [ 3126.050698][ T43] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 3126.115487][ T5849] rc_core: IR keymap rc-xbox-dvd not found [ 3126.133653][ T5849] Registered IR keymap rc-empty [ 3126.155051][ T5849] rc rc0: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 3126.218751][ T5849] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input57 [ 3126.245006][ T43] usb 10-1: Using ep0 maxpacket: 16 [ 3126.306588][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3126.325774][T18033] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 3126.349840][ T43] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3126.392892][ T43] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3126.471463][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3126.543659][T18033] usb 7-1: Using ep0 maxpacket: 32 [ 3126.563464][ T43] usb 10-1: Product: syz [ 3126.568705][ T43] usb 10-1: Manufacturer: syz [ 3126.638117][T18033] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3126.644045][ T43] usb 10-1: SerialNumber: syz [ 3126.691317][T18033] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 3126.765786][T18033] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3126.808861][T18033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3126.808985][T28659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5299'. [ 3126.849460][T18033] usb 7-1: SerialNumber: syz [ 3126.904764][T18033] cdc_acm 7-1:1.0: Zero length descriptor references [ 3126.918530][T18033] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 3126.943420][ T43] usb 10-1: 0:2 : does not exist [ 3127.002136][ T43] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 3127.112871][T18033] usb 7-1: USB disconnect, device number 35 [ 3127.146162][ T5950] usb 9-1: USB disconnect, device number 44 [ 3127.146162][ C0] xbox_remote 9-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 3127.181802][ T43] usb 10-1: USB disconnect, device number 2 [ 3127.291092][T23989] udevd[23989]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3127.935459][T28673] erofs (device nbd0): cannot find valid erofs superblock [ 3129.654662][T14413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3129.683561][T14413] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3129.701566][T14413] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3129.717693][T14413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3129.727827][T14413] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3129.815468][T28693] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888040cdde00 pfn:0x40cdc [ 3129.881929][T28693] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3129.890679][T28693] memcg:ffff8881404d0c80 [ 3129.907314][T28682] lo speed is unknown, defaulting to 1000 [ 3129.930237][T28693] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 3129.968186][T28693] raw: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000 [ 3130.006085][T28682] lo speed is unknown, defaulting to 1000 [ 3130.019740][T28693] raw: ffff888040cdde00 0000000000000000 00000001ffffffff ffff8881404d0c80 [ 3130.024450][T28682] dummy0 speed is unknown, defaulting to 1000 [ 3130.047416][T28693] head: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000 [ 3130.064260][T28693] head: ffff888040cdde00 0000000000000000 00000001ffffffff ffff8881404d0c80 [ 3130.081850][T28693] head: 00fff00000000201 ffffea0001033701 00000000ffffffff 00000000ffffffff [ 3130.095486][T28693] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 3130.104493][T28697] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3130.107127][T28693] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 3130.134349][T28693] page_owner tracks the page as allocated [ 3130.141163][T28693] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 28693, tgid 28685 (syz.0.5307), ts 3129815443181, free_ts 3084462078873 [ 3130.176449][T28693] post_alloc_hook+0x240/0x2a0 [ 3130.190445][T28693] get_page_from_freelist+0x21d5/0x22b0 [ 3130.198839][T28693] __alloc_frozen_pages_noprof+0x181/0x370 [ 3130.208790][T28693] alloc_pages_mpol+0x232/0x4a0 [ 3130.215732][T28693] alloc_pages_noprof+0xa9/0x190 [ 3130.220851][T28693] folio_alloc_noprof+0x1e/0x30 [ 3130.234075][T28693] filemap_alloc_folio_noprof+0xdf/0x470 [ 3130.240094][T28693] page_cache_ra_order+0x5e5/0xc70 [ 3130.248413][T28693] filemap_fault+0x59e/0x1200 [ 3130.257237][T28693] __do_fault+0x135/0x390 [ 3130.264986][T28693] __handle_mm_fault+0x198b/0x5620 [ 3130.271018][T28693] handle_mm_fault+0x2d5/0x7f0 [ 3130.278507][T28693] do_user_addr_fault+0x764/0x1390 [ 3130.289004][T28693] exc_page_fault+0x76/0xf0 [ 3130.297920][T28693] asm_exc_page_fault+0x26/0x30 [ 3130.306167][T28693] page last free pid 28000 tgid 27999 stack trace: [ 3130.315512][T28693] __free_frozen_pages+0xc65/0xe60 [ 3130.320732][T28693] __slab_free+0x326/0x400 [ 3130.328422][T28693] qlist_free_all+0x97/0x140 [ 3130.335788][T28693] kasan_quarantine_reduce+0x148/0x160 [ 3130.341346][T28693] __kasan_slab_alloc+0x22/0x80 [ 3130.349800][T28693] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 3130.358287][T28693] alloc_netdev_mqs+0xa6/0x11e0 [ 3130.366563][T28693] rtnl_create_link+0x31f/0xd10 [ 3130.374077][T28693] rtnl_newlink_create+0x25c/0xb00 [ 3130.379312][T28693] rtnl_newlink+0x16d6/0x1c70 [ 3130.385626][T28693] rtnetlink_rcv_msg+0x7cc/0xb70 [ 3130.390676][T28693] netlink_rcv_skb+0x205/0x470 [ 3130.396637][T28693] netlink_unicast+0x758/0x8d0 [ 3130.404606][T28693] netlink_sendmsg+0x805/0xb30 [ 3130.411496][T28693] __sock_sendmsg+0x219/0x270 [ 3130.416266][T28693] ____sys_sendmsg+0x505/0x830 [ 3130.421309][T28693] ------------[ cut here ]------------ [ 3130.427095][T28693] kernel BUG at mm/filemap.c:868! [ 3130.432866][T28693] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 3130.439191][T28693] CPU: 0 UID: 0 PID: 28693 Comm: syz.0.5307 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 3130.451307][T28693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3130.461669][T28693] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 3130.467788][T28693] Code: fe c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 4b 99 0e 00 90 0f 0b e8 03 fe c8 ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 34 99 0e 00 90 <0f> 0b e8 ec fd c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 1d 99 0e 00 [ 3130.487616][T28693] RSP: 0018:ffffc90003a77320 EFLAGS: 00010246 [ 3130.493894][T28693] RAX: 4ff884c5bdf4eb00 RBX: 0000000000000001 RCX: 0000000000000000 [ 3130.502195][T28693] RDX: 0000000000000007 RSI: ffffffff8d96e77b RDI: 00000000ffffffff [ 3130.510192][T28693] RBP: ffffc90003a77488 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 3130.518280][T28693] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: ffffea0001033700 [ 3130.526450][T28693] R13: dffffc0000000000 R14: ffffea0001033708 R15: 0000000000000004 [ 3130.534480][T28693] FS: 00007fa5998666c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 3130.543829][T28693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3130.550465][T28693] CR2: 00007fcd43437f98 CR3: 000000002b2fc000 CR4: 00000000003526f0 [ 3130.558756][T28693] Call Trace: [ 3130.562094][T28693] [ 3130.565146][T28693] ? percpu_ref_put+0x19/0x180 [ 3130.569947][T28693] ? __pfx___filemap_add_folio+0x10/0x10 [ 3130.575607][T28693] ? percpu_ref_put+0xf9/0x180 [ 3130.580514][T28693] filemap_add_folio+0xd5/0x270 [ 3130.585484][T28693] page_cache_ra_order+0x74c/0xc70 [ 3130.590706][T28693] filemap_fault+0x59e/0x1200 [ 3130.595479][T28693] ? __pfx_filemap_fault+0x10/0x10 [ 3130.600727][T28693] __do_fault+0x135/0x390 [ 3130.605088][T28693] __handle_mm_fault+0x198b/0x5620 [ 3130.610243][T28693] ? __pfx___handle_mm_fault+0x10/0x10 [ 3130.615741][T28693] ? find_vma+0xe7/0x160 [ 3130.620115][T28693] ? __pfx_find_vma+0x10/0x10 [ 3130.624821][T28693] handle_mm_fault+0x2d5/0x7f0 [ 3130.629612][T28693] do_user_addr_fault+0x764/0x1390 [ 3130.635194][T28693] exc_page_fault+0x76/0xf0 [ 3130.640234][T28693] asm_exc_page_fault+0x26/0x30 [ 3130.645916][T28693] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 3130.653260][T28693] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 3130.672910][T28693] RSP: 0018:ffffc90003a77b88 EFLAGS: 00050246 [ 3130.679016][T28693] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 3130.687067][T28693] RDX: 0000000000000000 RSI: ffffc90003a77c20 RDI: 0000200000019680 [ 3130.695354][T28693] RBP: ffffc90003a77c90 R08: ffffc90003a77c27 R09: 1ffff9200074ef84 [ 3130.703374][T28693] R10: dffffc0000000000 R11: fffff5200074ef85 R12: 0000200000019688 [ 3130.711472][T28693] R13: 00007ffffffff000 R14: ffffc90003a77c20 R15: 0000200000019680 [ 3130.719513][T28693] _copy_to_user+0x8a/0xb0 [ 3130.724136][T28693] msr_read+0x177/0x250 [ 3130.728352][T28693] ? __pfx_msr_read+0x10/0x10 [ 3130.733063][T28693] ? security_file_permission+0x75/0x290 [ 3130.738844][T28693] ? rw_verify_area+0x258/0x650 [ 3130.744382][T28693] ? __pfx_msr_read+0x10/0x10 [ 3130.749127][T28693] vfs_read+0x1fd/0x980 [ 3130.753421][T28693] ? __pfx_vfs_read+0x10/0x10 [ 3130.758411][T28693] ? __fget_files+0x2a/0x420 [ 3130.763302][T28693] ? __fget_files+0x2a/0x420 [ 3130.768028][T28693] ? __fget_files+0x3a0/0x420 [ 3130.772869][T28693] ? __fget_files+0x2a/0x420 [ 3130.777669][T28693] ksys_read+0x145/0x250 [ 3130.782038][T28693] ? __pfx_ksys_read+0x10/0x10 [ 3130.786825][T28693] ? rcu_is_watching+0x15/0xb0 [ 3130.791630][T28693] ? do_syscall_64+0xbe/0x3b0 [ 3130.796356][T28693] do_syscall_64+0xfa/0x3b0 [ 3130.801005][T28693] ? lockdep_hardirqs_on+0x9c/0x150 [ 3130.806249][T28693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3130.812395][T28693] ? clear_bhb_loop+0x60/0xb0 [ 3130.817149][T28693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3130.823166][T28693] RIP: 0033:0x7fa59898e929 [ 3130.828159][T28693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3130.848513][T28693] RSP: 002b:00007fa599866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3130.857076][T28693] RAX: ffffffffffffffda RBX: 00007fa598bb6080 RCX: 00007fa59898e929 [ 3130.865526][T28693] RDX: 0000000000018ff0 RSI: 0000200000019680 RDI: 0000000000000007 [ 3130.873818][T28693] RBP: 00007fa598a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 3130.881818][T28693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3130.889812][T28693] R13: 0000000000000000 R14: 00007fa598bb6080 R15: 00007ffffd65a288 [ 3130.897934][T28693] [ 3130.900990][T28693] Modules linked in: [ 3130.907235][T28693] ---[ end trace 0000000000000000 ]--- [ 3130.965737][T28682] chnl_net:caif_netlink_parms(): no params data found [ 3131.001166][T28693] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 3131.031231][T28693] Code: fe c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 4b 99 0e 00 90 0f 0b e8 03 fe c8 ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 34 99 0e 00 90 <0f> 0b e8 ec fd c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 1d 99 0e 00 [ 3131.077319][T28693] RSP: 0018:ffffc90003a77320 EFLAGS: 00010246 [ 3131.229417][T28693] RAX: 4ff884c5bdf4eb00 RBX: 0000000000000001 RCX: 0000000000000000 [ 3131.291300][T28693] RDX: 0000000000000007 RSI: ffffffff8d96e77b RDI: 00000000ffffffff [ 3131.299378][T28693] RBP: ffffc90003a77488 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 3131.331190][T28693] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: ffffea0001033700 [ 3131.339269][T28693] R13: dffffc0000000000 R14: ffffea0001033708 R15: 0000000000000004 [ 3131.371314][T28693] FS: 00007fa5998666c0(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 3131.391207][T28693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3131.397889][T28693] CR2: 0000000000000000 CR3: 000000002b2fc000 CR4: 00000000003526f0 [ 3131.420923][T28693] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3131.429168][T28693] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3131.473896][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3131.500931][T28693] Kernel panic - not syncing: Fatal exception [ 3131.507357][T28693] Kernel Offset: disabled [ 3131.511719][T28693] Rebooting in 86400 seconds..