last executing test programs: 16m11.646084967s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1018c0, 0x159) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 16m9.285628197s ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x9, 0x1, 0x8081, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) io_setup(0x81, &(0x7f0000000180)=0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r8, &(0x7f0000000340)='p', 0x300}]) 16m0.175127467s ago: executing program 2 (id=16): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0400ff434e00000038ffe500"], 0x2000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) socket(0x23, 0x3, 0xff) 15m53.512457715s ago: executing program 2 (id=25): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) 15m51.501554503s ago: executing program 2 (id=27): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000070000000400", @ANYBLOB="5a9ce97ca6bb6fb4caaa087df785f5233879ffb86468fe6a7be85a9594369e3e1e0b090556290186a14590d6405481b7ce4844d81a03230212bf86bb6d2348ed0da06ada63bfed6c551d9ebe5cdca44afbff5473eca0f2ab5754dc75044b9faefe2ca9d7975cf76168130a21", @ANYBLOB="00ffffffe900000005000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x80) unshare(0x20000400) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r1, 0x1) 15m49.380129957s ago: executing program 2 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000206030000000000aee3194a6ed1a97714000300686173683a69702c706f72742c6970000900020073797a3100000000050005000a00000005000400010000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15m33.410843786s ago: executing program 32 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000206030000000000aee3194a6ed1a97714000300686173683a69702c706f72742c6970000900020073797a3100000000050005000a00000005000400010000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15m1.300145449s ago: executing program 1 (id=92): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee01) 14m59.922020903s ago: executing program 1 (id=94): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = dup(r5) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}, {&(0x7f0000000dc0)='k', 0x1}], 0x3, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000011c0)="65d21a11ef0b0d0fe05ff0d19d9119e1a7b6718fbf8d0f33b11f989fb99a6259d096d06b08cf8573170769674a", 0x2d}, {&(0x7f00000034c0)}, {&(0x7f0000003500)="d03b5b1c803a1874824babe75b9e2edb2c728cd1fb9d063f2d3cd7d7b4e6f1cc6300fcde9d2fcf128ebeecfbdbf4c81ea1b0414a9806a978b47c2fe4c6d8ff6f5f29a4764574df10171bd859ac9b319100834b53f933e87dece485b8b3bc71647df0ae9410d73ecce651d927cb", 0x6d}, {&(0x7f0000003580)="4b2bf77cb5a115dad975ced56444598bc96d6b8a1d316f720b649c486fe9b36870243a3127af40f89b98fb61a58928e5036a8cdfaf682d176d768c57897db35f11e4bd15be7cbda256aa9e49a57d244a34b3c4d851", 0x55}], 0x4, 0x0, 0x0, 0x24000001}}], 0x2, 0x0) 14m56.908913495s ago: executing program 1 (id=96): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x482480, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000600000000000000001811f6ff000000", @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000080)='syzkaller\x00', 0x800003, 0x1000, &(0x7f0000000c80)=""/4096, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14m55.72341831s ago: executing program 1 (id=98): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000841, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r3, &(0x7f00000002c0)=[{0x0}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 14m54.171011542s ago: executing program 1 (id=102): timerfd_create(0x8, 0x80000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x80800}) listen(r2, 0x5) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 14m45.681376451s ago: executing program 1 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000206030000000000aee3194a6ed1a97714000300686173683a69702c706f72742c6970000900020073797a3100000000050005000a00000005000400010000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 14m29.916938694s ago: executing program 33 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000206030000000000aee3194a6ed1a97714000300686173683a69702c706f72742c6970000900020073797a3100000000050005000a00000005000400010000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9m47.715649424s ago: executing program 3 (id=443): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x486e02) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x8, "b546babfcc590d3033de259c2996817bb959ebab028deda525e1dadeff62de25", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000140)=0x72) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000100)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m43.264211075s ago: executing program 3 (id=450): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2f", 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r7, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r9, 0x0, 0xffffffff004) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100020004814006"], 0x0) r10 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYBLOB="da05f938"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) 9m39.258849028s ago: executing program 3 (id=453): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0x1, 0x1}, 0x66) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x4663, 0x400, 0x10000006, 0x2cc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 9m36.869158069s ago: executing program 3 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000480)={'macvlan1\x00', 0x600}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootm', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0xb0) mount$9p_xen(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x4000, &(0x7f00000002c0)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@cache_mmap}, {@cache_readahead}, {@debug={'debug', 0x3d, 0x80}}, {@cache_loose}, {@access_user}, {@noextend}]}}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="225d8e9cd05e480eae9b7e2f9d7d71756f74612c67727071756f74615f626c6f636b5f686172646c696d69743d332c00beaf7429e8f2b19a09787ab41efb4f72e981d0aa559f829f6553d9297e7adf67465253"]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0x8, 0xfffc, {0x7, 0x1}, {0x2a, 0x2}, @cond=[{0x3, 0x6a, 0x19, 0x2, 0xd, 0x1005}, {0x2, 0x7f, 0x9, 0xa4ed, 0x0, 0xef}]}) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000500)) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"9dcb37ba3871bb300eba85e89f3014f58deb2ff370e50b637b875ebcc073150a696d91c79e95afc7083b3bf09a740c7c4264a15b1760f1de54b08989230e0033106439ba22b8a388715006d12880e179e594f5bfaa890f1cca1fd7b6a2768f070beb2542771dd6f9451f22f058a3c7174a92714fe3c680e7ddb95518e2d5ef942415d510788ac73478c9081c3b90f127011702749dc7c82b33fef046602253b0a3bc7d6030ed6f6d8c8fc7b21642d8d786284320037f37b0e76db6a8a2db072a9eed410fcdd2bfa32ed885631c77955fbda3ad0e2a34b739cbd4ae14a31ae0e1d7b31cfbf1a960dca7dea4b55d77d0ea39636b4a5a683ee481dfd79cf20ba69fa25d22d5c6969ec165501e6c0e412954d4a592889bcfc15a13f4097713708d0041cb2629fb9f47d857887dd39155b2c6658d283cdad83fe910b39a9b56788d890bc88faa62dbba32ac25142e3eb05246d6acd3d5c379005837c0ac01e1335944fde055ca6a4308c6e8e78539fa047933dac5284c3b0aaaa5ada8b40ed2e2f28c84a51e017b296afdb1a28b96f339cbe1d504b3599de6ed7142a50a110b9075b077eef6179c58a8228d2c18ba0e5d467109ff81644a775975ee44f13d488aae79f5d42021cc4855e0c22faab2640195847d6ef42040c3ba8ccaed3000444587ad43d184a77246c2110f360dcd8fa66ca9d0e13164f32f1eabf83116de6d21bead6a70e95ea9cd1d70611b439a51d21a94f2b017cbdb3ed47f09fedf2ad907e354cf56500d44b488c022ed309979989c2801ef4c7c7c6c32ac49e682d1093562ed4235a9b7cc3238aa9762e06335813ce5a963cec321e760927da03fe615d593f0110d670b477eaa0e12bda94c31f628e62f2cd3c5af76a7844d46a345ad0f0fe2a06b8cc7e1ead2b3e1e8984e83df5f34f0250035616d08bfae3b2baea5f46ddc450fbed612416e5ec148773291ec095a446cada1a0ab74724265e2bb319d64525d2f41f98121709e95103549e10fa2f90c662404e84c2f339a17478c885395b999527e6dab08f73256d30a6c91366c89c54545216f3b71f50fff7c6defe35610654e426252629caa3bbfe42c2046f945d5ae91ecdee17e05dd18c4e67659fdb98234bfe59d9be203578f62fba16e67a1f77c647a42fbee5394d001d3b4597974db1dea3e25dd48d98aed9bdf48da1f9c50ad80041f0a17b9896efed36fdb21de43cb39955abfa9c6e29b0d4e283f296895a39502da08d9be021b35bcbcbff769b15656ce64f74efe0ccb1a349b60d6746fc9a8679f20d3e2667b84eec710696afd7fd062111c9fb5e4c269695ff73a448819e582501299a61e6e4a5865ea31073b993618e4a8715c5ac89fdcc0aad13f17857b7d032cc71d47491f082bd39b269e2a67a02e524ae0d526ad3bc654356bbe4dac1c5398793ad860e515fc07e6e4"}) 9m33.821168984s ago: executing program 3 (id=464): getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x40000e5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0x3, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0xffffffff, 0x8000, 0xffff, 0x2, 0x9, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x9b55, 0x4, 0xd, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x1, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0xbac, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120004, 0x7, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0xfffc, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 9m32.316805704s ago: executing program 3 (id=469): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0xc0, r1, 0x400, 0x70bd27, 0x1, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x4, 0xb8, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x10, 0x0, 0x8f}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x701, 0x8, 0x80000001, 0x4, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x66, 0x0, 0x81, 0x4, 0x0, @remote, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x94, 0x1, 0x8, [{@private=0xa010101, 0x7}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010100, 0x8001}, {@broadcast, 0xffff0360}, {@local, 0xfffffffa}]}, @end, @generic={0x83, 0x5, "32c603"}, @ssrr={0x89, 0x1f, 0xf8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @private=0xa010101, @empty, @multicast2, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x6, 0xb, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0xd, 0x1000}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r5 = socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) 9m16.953493016s ago: executing program 34 (id=469): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0xc0, r1, 0x400, 0x70bd27, 0x1, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x4, 0xb8, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x10, 0x0, 0x8f}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x701, 0x8, 0x80000001, 0x4, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x66, 0x0, 0x81, 0x4, 0x0, @remote, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x94, 0x1, 0x8, [{@private=0xa010101, 0x7}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010100, 0x8001}, {@broadcast, 0xffff0360}, {@local, 0xfffffffa}]}, @end, @generic={0x83, 0x5, "32c603"}, @ssrr={0x89, 0x1f, 0xf8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @private=0xa010101, @empty, @multicast2, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x6, 0xb, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0xd, 0x1000}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r5 = socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) 23.281486095s ago: executing program 6 (id=1208): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfc, @loopback, 0xffffffff}, 0x1c) 23.120377331s ago: executing program 6 (id=1211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80004}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00012bbd7000ffdbdf2510"], 0x1c}, 0x1, 0x0, 0x0, 0x240000c5}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x80000000, 0xf}, {0x4}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {0xff}, {0x2}, @control={0x80, 0x0, 0x7fff}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x0, 0x8}, {}, @control}, {0x0, 0x20, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xbf}, @connect={{}, {0x0, 0x45}}}], 0x70) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) shmctl$IPC_RMID(0x0, 0x0) 20.356057885s ago: executing program 5 (id=1214): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x289e0cb5, 0x0) 19.997004081s ago: executing program 5 (id=1217): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 18.251260575s ago: executing program 5 (id=1220): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x3) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 14.940546172s ago: executing program 4 (id=1221): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfc, @loopback, 0xffffffff}, 0x1c) 13.41195255s ago: executing program 7 (id=1224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) r3 = eventfd(0x3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x4) fchdir(r5) mkdirat(r5, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r3, 0x7, 0x2, r2}) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 13.385100104s ago: executing program 4 (id=1225): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) syz_pidfd_open(0x0, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r6, 0x0, 0x0, 0x0, 0x1000) 12.092236653s ago: executing program 4 (id=1227): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x289e0cb5, 0x0) 11.531811041s ago: executing program 4 (id=1228): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) syz_pidfd_open(0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc0046209, 0xfffffffffffffffe) 10.348749613s ago: executing program 6 (id=1230): prlimit64(0x0, 0xe, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff0200000000000000002a7ffda40001000000000000000000000000f9ffffff00"/138], 0x90) read$msr(0xffffffffffffffff, 0x0, 0x0) 8.929866393s ago: executing program 7 (id=1231): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, 'wlan0\x00'}}]}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x5, 0x2, 0x0, 0x7, 0x0, 0x5}, 0x20) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000580)=""/231) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500), 0x20040c1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r2, @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050000000000f80108808c000080200004000a00000000000000fe800000000000000000000000000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a0000004c000200ff0100000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac141400050003000000000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000002f00030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fc0100000000000000000000000000010000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r7], 0x248}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r10, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) 7.950550199s ago: executing program 5 (id=1234): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) mount$afs(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000340)={[{@dyn}, {@flock_openafs}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x480c0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r4, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) 7.938609158s ago: executing program 7 (id=1235): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfc, @loopback, 0xffffffff}, 0x1c) 7.540743553s ago: executing program 7 (id=1236): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000070000000400", @ANYBLOB="5a9ce97ca6bb6fb4caaa087df785f5233879ffb86468fe6a7be85a9594369e3e1e0b090556290186a14590d6405481b7ce4844d81a03230212bf86bb6d2348ed0da06ada63bfed6c551d9ebe5cdca44afbff5473eca0f2ab5754dc75044b9faefe2ca9d7975cf76168130a21", @ANYBLOB="00ffffffe900000005000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x80) unshare(0x20000400) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffff9, 0x0, 0xc}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r1, 0x60}], 0x2, 0x0, 0x0, 0x0) 7.297116982s ago: executing program 4 (id=1237): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) syz_pidfd_open(0x0, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r6, 0x0, 0x0, 0x0, 0x1000) 6.435738573s ago: executing program 6 (id=1238): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x289e0cb5, 0x0) 5.705067879s ago: executing program 7 (id=1239): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) 5.704131543s ago: executing program 4 (id=1240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.580542965s ago: executing program 5 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) r3 = eventfd(0x3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x4) fchdir(r5) mkdirat(r5, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r3, 0x7, 0x2, r2}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 5.440643954s ago: executing program 6 (id=1242): r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x409, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0x697, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xfffc, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0xab9f, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) syz_usb_disconnect(r0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.128374793s ago: executing program 0 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x54, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT={0x4}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 4.67534071s ago: executing program 0 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x6001) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, 0x0, 0x0) 4.564771195s ago: executing program 7 (id=1245): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x3) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.29643808s ago: executing program 0 (id=1246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfc, @loopback, 0xffffffff}, 0x1c) 3.041006574s ago: executing program 0 (id=1247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) io_setup(0x81, &(0x7f0000000180)=0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r8, &(0x7f0000000340)='p', 0x300}]) 1.491868208s ago: executing program 5 (id=1248): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r1 = shmat(r0, &(0x7f0000feb000/0x1000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) getrlimit(0xf, 0x0) shmdt(r1) socket$pppoe(0x18, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x101000) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername(r6, 0x0, 0x0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) read$msr(r7, &(0x7f000001dc00)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000680)='btrfs\x00', 0x208000, 0x0) 1.481065665s ago: executing program 6 (id=1249): prlimit64(0x0, 0xe, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff0200000000000000002a7ffda40001000000000000000000000000f9ffffff00"/138], 0x90) read$msr(0xffffffffffffffff, 0x0, 0x0) 1.208802123s ago: executing program 0 (id=1250): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) read$msr(0xffffffffffffffff, &(0x7f0000004c00)=""/102392, 0x18ff8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000070000000400", @ANYBLOB="5a9ce97ca6bb6fb4caaa087df785f5233879ffb86468fe6a7be85a9594369e3e1e0b090556290186a14590d6405481b7ce4844d81a03230212bf86bb6d2348ed0da06ada63bfed6c551d9ebe5cdca44afbff5473eca0f2ab5754dc75044b9faefe2ca9d7975cf76168130a21", @ANYBLOB="00ffffffe900000005000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x80) unshare(0x20000400) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffff9, 0x0, 0xc}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r1, 0x60}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x482480, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x10, 0x28c55b44, 0xf21, 0x9}) r6 = getpid() syz_pidfd_open(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.4.822'. [ 804.008043][T10158] netlink: 'syz.0.827': attribute type 12 has an invalid length. [ 804.339352][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 804.817342][ T6006] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 804.982662][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 804.988660][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 804.988705][ T6006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 804.988789][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 804.988820][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.988848][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.988876][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 804.988905][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 804.988935][ T6006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 804.991581][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 804.991613][ T6006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 804.991642][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 804.991662][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.991681][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.991700][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 804.991720][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 804.991740][ T6006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 805.102490][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 805.103203][ T6006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 805.103254][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 805.103284][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.103312][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 805.103341][ T6006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 805.103362][ T6006] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 805.103382][ T6006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 805.257445][ T6006] usb 5-1: string descriptor 0 read error: -22 [ 805.257600][ T6006] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 805.257618][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.348247][ T6006] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 805.662629][ T6006] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 805.832519][ T6006] usb 1-1: Using ep0 maxpacket: 8 [ 805.835192][ T6006] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 805.835219][ T6006] usb 1-1: config 0 has no interface number 0 [ 805.835271][ T6006] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 805.838451][ T6006] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 805.838477][ T6006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.838497][ T6006] usb 1-1: Product: syz [ 805.838511][ T6006] usb 1-1: Manufacturer: syz [ 805.838525][ T6006] usb 1-1: SerialNumber: syz [ 805.905956][ T6006] usb 1-1: config 0 descriptor?? [ 805.925502][ T6006] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 806.191579][T10170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.192167][T10170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.252658][ T1460] hsr_slave_0: left promiscuous mode [ 806.272587][ T1460] hsr_slave_1: left promiscuous mode [ 806.273544][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.273574][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.313691][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.313740][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.477377][ T1460] hsr_slave_0: left promiscuous mode [ 806.495762][ T1460] hsr_slave_1: left promiscuous mode [ 806.497056][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.497087][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.537532][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.537564][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.696646][ T1460] veth1_macvtap: left promiscuous mode [ 806.696785][ T1460] veth0_macvtap: left promiscuous mode [ 806.697097][ T1460] veth1_vlan: left promiscuous mode [ 806.697313][ T1460] veth0_vlan: left promiscuous mode [ 806.826263][ T1460] veth1_macvtap: left promiscuous mode [ 806.826390][ T1460] veth0_macvtap: left promiscuous mode [ 806.826689][ T1460] veth1_vlan: left promiscuous mode [ 806.829440][ T1460] veth0_vlan: left promiscuous mode [ 808.436969][ T6006] usb 1-1: USB disconnect, device number 31 [ 809.752836][ T5925] usb 5-1: USB disconnect, device number 30 [ 810.426517][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 811.024616][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 813.729420][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.092514][ T5925] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 814.252529][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 814.278640][ T5925] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 814.278674][ T5925] usb 5-1: config 0 has no interface number 0 [ 814.278739][ T5925] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 814.283033][ T5925] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 814.283062][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.283084][ T5925] usb 5-1: Product: syz [ 814.283099][ T5925] usb 5-1: Manufacturer: syz [ 814.283114][ T5925] usb 5-1: SerialNumber: syz [ 814.289078][ T5925] usb 5-1: config 0 descriptor?? [ 814.307865][ T5925] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 816.683499][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 816.873294][ T8860] usb 5-1: USB disconnect, device number 31 [ 816.933369][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 817.708152][ T8218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 817.720568][ T8218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 817.722919][ T8218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 817.741483][ T8218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 817.764179][ T8218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.399252][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'. [ 819.035859][ T8218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 819.054131][ T8218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 819.060101][ T8218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 819.061893][ T8218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 819.080537][ T8218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 819.802568][ T5848] Bluetooth: hci4: command tx timeout [ 820.001802][ T992] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 820.152735][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 820.155713][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 820.155755][ T992] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 820.155797][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 820.155826][ T992] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.155853][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 820.155880][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 820.155908][ T992] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 820.155937][ T992] usb 5-1: config 168 interface 0 has no altsetting 0 [ 820.157401][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 820.157440][ T992] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 820.157482][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 820.157511][ T992] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.157538][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 820.157565][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 820.157593][ T992] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 820.157622][ T992] usb 5-1: config 168 interface 0 has no altsetting 0 [ 820.159098][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 820.159139][ T992] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 820.159222][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 820.159251][ T992] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.159279][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 820.159307][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 820.159336][ T992] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 820.159365][ T992] usb 5-1: config 168 interface 0 has no altsetting 0 [ 820.169366][ T992] usb 5-1: string descriptor 0 read error: -22 [ 820.170682][ T992] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 820.170713][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.200481][ T992] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 820.608404][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 821.049559][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.050175][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.182823][ T5848] Bluetooth: hci6: command tx timeout [ 821.882600][ T5848] Bluetooth: hci4: command tx timeout [ 823.252528][ T5848] Bluetooth: hci6: command tx timeout [ 823.962862][ T5848] Bluetooth: hci4: command tx timeout [ 824.137671][T10207] chnl_net:caif_netlink_parms(): no params data found [ 824.261075][T10199] chnl_net:caif_netlink_parms(): no params data found [ 824.537937][ T9] usb 5-1: USB disconnect, device number 32 [ 825.122502][ T5927] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 825.282566][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 825.284973][ T5927] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 825.285001][ T5927] usb 5-1: config 0 has no interface number 0 [ 825.285050][ T5927] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 825.288147][ T5927] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 825.288175][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.288196][ T5927] usb 5-1: Product: syz [ 825.288211][ T5927] usb 5-1: Manufacturer: syz [ 825.288227][ T5927] usb 5-1: SerialNumber: syz [ 825.322485][ T5848] Bluetooth: hci6: command tx timeout [ 825.397276][ T8218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 825.422861][ T8218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 825.428904][ T8218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 825.431134][ T5927] usb 5-1: config 0 descriptor?? [ 825.437715][ T5927] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 825.488622][ T8218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 825.489531][ T8218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 826.042516][ T8218] Bluetooth: hci4: command tx timeout [ 826.170104][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 826.276125][T10207] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.276292][T10207] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.276542][T10207] bridge_slave_0: entered allmulticast mode [ 826.279917][T10207] bridge_slave_0: entered promiscuous mode [ 826.594540][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.595536][T10207] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.595994][T10207] bridge_slave_1: entered allmulticast mode [ 826.599185][T10207] bridge_slave_1: entered promiscuous mode [ 826.635127][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.635284][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.635554][T10199] bridge_slave_0: entered allmulticast mode [ 826.639635][T10199] bridge_slave_0: entered promiscuous mode [ 826.738133][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.738299][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.738560][T10199] bridge_slave_1: entered allmulticast mode [ 826.749539][T10199] bridge_slave_1: entered promiscuous mode [ 826.945377][T10207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.034728][T10207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.115674][T10199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.402594][ T8218] Bluetooth: hci6: command tx timeout [ 827.535585][T10199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.562603][ T8218] Bluetooth: hci3: command tx timeout [ 827.664566][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 827.845811][ T9] usb 5-1: USB disconnect, device number 33 [ 827.863119][T10207] team0: Port device team_slave_0 added [ 828.207959][T10207] team0: Port device team_slave_1 added [ 828.380067][T10199] team0: Port device team_slave_0 added [ 828.428891][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 828.632874][T10199] team0: Port device team_slave_1 added [ 829.642659][ T8218] Bluetooth: hci3: command tx timeout [ 830.232569][T10207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.232590][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.232620][T10207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.342593][ T6660] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 830.467538][T10207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.467553][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.467574][T10207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.473523][T10199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.473543][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.473577][T10199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.542367][ T6660] usb 1-1: Using ep0 maxpacket: 8 [ 830.566713][ T6660] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 830.566735][ T6660] usb 1-1: config 0 has no interface number 0 [ 830.566770][ T6660] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 830.566788][ T6660] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 830.566810][ T6660] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 830.566827][ T6660] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.568894][ T6660] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 830.568914][ T6660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.568929][ T6660] usb 1-1: Product: syz [ 830.568939][ T6660] usb 1-1: Manufacturer: syz [ 830.568949][ T6660] usb 1-1: SerialNumber: syz [ 830.663583][ T6660] usb 1-1: config 0 descriptor?? [ 830.679548][ T6660] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 830.798056][T10199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.798074][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.798106][T10199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.289896][ T38] audit: type=1326 audit(1758693848.474:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10275 comm="syz.4.857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3de06eeec9 code=0x0 [ 831.724239][ T8218] Bluetooth: hci3: command tx timeout [ 831.755723][T10207] hsr_slave_0: entered promiscuous mode [ 831.757206][T10207] hsr_slave_1: entered promiscuous mode [ 831.758199][T10207] debugfs: 'hsr0' already exists in 'hsr' [ 831.758224][T10207] Cannot create hsr debugfs directory [ 831.938464][T10199] hsr_slave_0: entered promiscuous mode [ 831.939959][T10199] hsr_slave_1: entered promiscuous mode [ 831.940990][T10199] debugfs: 'hsr0' already exists in 'hsr' [ 831.941016][T10199] Cannot create hsr debugfs directory [ 832.053922][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 833.642598][ T6660] usb 1-1: USB disconnect, device number 32 [ 833.802691][ T8218] Bluetooth: hci3: command tx timeout [ 835.534905][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 835.534940][T10310] netlink: 'syz.0.867': attribute type 5 has an invalid length. [ 835.534957][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.867'. [ 835.761700][T10310] geneve2: entered promiscuous mode [ 835.761733][T10310] geneve2: entered allmulticast mode [ 835.765175][T10245] chnl_net:caif_netlink_parms(): no params data found [ 835.819622][ T38] audit: type=1326 audit(1758693853.004:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.0.867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1cf05eec9 code=0x0 [ 836.076389][ T6208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 836.164261][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 836.203161][ T6208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 836.204296][ T1460] bridge_slave_1: left allmulticast mode [ 836.204325][ T1460] bridge_slave_1: left promiscuous mode [ 836.204635][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.294233][ T1460] bridge_slave_0: left allmulticast mode [ 836.294268][ T1460] bridge_slave_0: left promiscuous mode [ 836.294565][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.389002][ T1460] bridge_slave_1: left allmulticast mode [ 836.389028][ T1460] bridge_slave_1: left promiscuous mode [ 836.389231][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.468497][ T1460] bridge_slave_0: left allmulticast mode [ 836.468534][ T1460] bridge_slave_0: left promiscuous mode [ 836.468828][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.553419][ T1460] bridge_slave_1: left allmulticast mode [ 836.553455][ T1460] bridge_slave_1: left promiscuous mode [ 836.553720][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.631767][ T1460] bridge_slave_0: left allmulticast mode [ 836.631803][ T1460] bridge_slave_0: left promiscuous mode [ 836.632107][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.284242][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.414337][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.513149][ T1460] bond0 (unregistering): Released all slaves [ 837.772888][ T5927] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 837.833474][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.922508][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 837.925260][ T5927] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 837.925289][ T5927] usb 1-1: config 0 has no interface number 0 [ 837.925364][ T5927] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 837.925391][ T5927] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 837.925419][ T5927] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 837.925444][ T5927] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.926642][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.929204][ T5927] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 837.929232][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.929253][ T5927] usb 1-1: Product: syz [ 837.929269][ T5927] usb 1-1: Manufacturer: syz [ 837.929283][ T5927] usb 1-1: SerialNumber: syz [ 837.941109][ T5927] usb 1-1: config 0 descriptor?? [ 837.991108][ T5927] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 838.117489][ T1460] bond0 (unregistering): Released all slaves [ 838.414581][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.493289][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.576815][ T1460] bond0 (unregistering): Released all slaves [ 839.032624][ T6208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 839.251885][ T6208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 840.077254][ T1460] hsr_slave_0: left promiscuous mode [ 840.112583][ T1460] hsr_slave_1: left promiscuous mode [ 840.113715][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.146473][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.312692][ T1460] hsr_slave_0: left promiscuous mode [ 840.332447][ T1460] hsr_slave_1: left promiscuous mode [ 840.333906][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.383332][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.561763][ T1460] hsr_slave_0: left promiscuous mode [ 840.604286][ T6660] usb 1-1: USB disconnect, device number 33 [ 840.639744][ T1460] hsr_slave_1: left promiscuous mode [ 840.640730][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.673791][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.963467][T10335] netlink: 'syz.0.875': attribute type 10 has an invalid length. [ 843.533519][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 843.683459][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 845.140910][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 845.305082][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 846.863355][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 847.033339][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 847.906691][T10335] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 847.909328][T10341] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 848.056506][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 848.057378][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.057619][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.057848][T10245] bridge_slave_0: entered allmulticast mode [ 848.060911][T10245] bridge_slave_0: entered promiscuous mode [ 848.374698][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.374892][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.375172][T10245] bridge_slave_1: entered allmulticast mode [ 848.378429][T10245] bridge_slave_1: entered promiscuous mode [ 848.472593][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 848.632854][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 848.638857][ T9] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 848.638887][ T9] usb 1-1: config 0 has no interface number 0 [ 848.638938][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 848.638967][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 848.638994][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 848.639020][ T9] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.642222][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 848.642254][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.712428][ T9] usb 1-1: Product: syz [ 848.712452][ T9] usb 1-1: Manufacturer: syz [ 848.712467][ T9] usb 1-1: SerialNumber: syz [ 848.791309][ T9] usb 1-1: config 0 descriptor?? [ 848.807773][ T9] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 849.252082][T10245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.291773][T10245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.742038][T10245] team0: Port device team_slave_0 added [ 849.766376][T10245] team0: Port device team_slave_1 added [ 850.188189][T10245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.188206][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.188230][T10245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.190596][T10245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.190611][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.190635][T10245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.111409][T10245] hsr_slave_0: entered promiscuous mode [ 851.122228][T10245] hsr_slave_1: entered promiscuous mode [ 851.131995][T10245] debugfs: 'hsr0' already exists in 'hsr' [ 851.132017][T10245] Cannot create hsr debugfs directory [ 851.263693][ T5927] usb 1-1: USB disconnect, device number 34 [ 852.182412][T10207] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 852.297746][T10207] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 852.415826][T10207] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 853.691768][T10207] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 854.547864][T10394] netlink: 'syz.4.887': attribute type 10 has an invalid length. [ 854.663067][T10402] netlink: 'syz.4.887': attribute type 10 has an invalid length. [ 854.663091][T10402] netlink: 2 bytes leftover after parsing attributes in process `syz.4.887'. [ 854.989835][T10394] team0: left allmulticast mode [ 854.989862][T10394] team_slave_0: left allmulticast mode [ 854.989888][T10394] team_slave_1: left allmulticast mode [ 854.989919][T10394] team0: left promiscuous mode [ 854.989932][T10394] team_slave_0: left promiscuous mode [ 854.990182][T10394] team_slave_1: left promiscuous mode [ 854.990729][T10394] bridge0: port 3(team0) entered disabled state [ 855.056145][T10394] batman_adv: batadv0: Adding interface: team0 [ 855.056162][T10394] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.056197][T10394] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 855.112623][T10402] team0: entered promiscuous mode [ 855.112649][T10402] team_slave_0: entered promiscuous mode [ 855.112915][T10402] team_slave_1: entered promiscuous mode [ 855.114610][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.114979][T10402] batman_adv: batadv0: Interface activated: team0 [ 855.115022][T10402] batman_adv: batadv0: Interface deactivated: team0 [ 855.115046][T10402] batman_adv: batadv0: Removing interface: team0 [ 855.193674][T10402] bridge0: port 3(team0) entered blocking state [ 855.193956][T10402] bridge0: port 3(team0) entered disabled state [ 855.194154][T10402] team0: entered allmulticast mode [ 855.194171][T10402] team_slave_0: entered allmulticast mode [ 855.194194][T10402] team_slave_1: entered allmulticast mode [ 855.562800][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 855.782518][T10199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 855.926163][T10199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 856.075191][T10199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 856.513517][T10199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 856.943054][T10245] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 856.962583][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 856.991761][T10245] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 857.260786][T10245] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 857.295710][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 857.302187][ T9] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 857.302217][ T9] usb 1-1: config 0 has no interface number 0 [ 857.316056][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 857.316091][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 857.316119][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 857.316147][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 857.316171][ T9] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.381814][T10245] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 857.396930][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 857.396961][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.396976][ T9] usb 1-1: Product: syz [ 857.396986][ T9] usb 1-1: Manufacturer: syz [ 857.396996][ T9] usb 1-1: SerialNumber: syz [ 857.401128][ T9] usb 1-1: config 0 descriptor?? [ 857.730205][ T9] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 857.988468][ T6660] usb 1-1: USB disconnect, device number 35 [ 858.430502][T10207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.763874][T10207] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.848759][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.851154][ T1492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.911975][T10199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.965927][ T1492] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.966774][ T1492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.060062][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 860.065676][T10199] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.283014][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.283550][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.363224][T10245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.413368][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.413518][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.596228][T10245] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.842749][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.842855][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.976701][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.976834][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.825450][T10207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.150279][T10199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.920772][T10460] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 862.920789][T10460] netlink: 224 bytes leftover after parsing attributes in process `syz.0.897'. [ 863.017415][T10458] ALSA: mixer_oss: invalid OSS volume '' [ 863.155500][T10245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.599806][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.901545][ C1] vkms_vblank_simulate: vblank timer overrun [ 864.294352][T10207] veth0_vlan: entered promiscuous mode [ 864.458993][T10207] veth1_vlan: entered promiscuous mode [ 864.958310][T10199] veth0_vlan: entered promiscuous mode [ 864.968016][T10207] veth0_macvtap: entered promiscuous mode [ 865.025333][T10207] veth1_macvtap: entered promiscuous mode [ 865.113392][ T45] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 865.206832][T10199] veth1_vlan: entered promiscuous mode [ 865.313569][ T45] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 865.315846][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.315907][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.315938][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.317573][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.317633][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.317661][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.319245][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.319303][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.319333][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.320867][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.320926][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.320955][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.333025][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.333099][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.333134][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.513185][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.513247][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.513276][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.585982][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.586048][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.586080][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.822956][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.823030][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.823060][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 865.859672][ T45] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 865.859696][ T45] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 865.859712][ T45] usb 1-1: Product: syz [ 865.859722][ T45] usb 1-1: Manufacturer: syz [ 865.859733][ T45] usb 1-1: SerialNumber: syz [ 865.906585][T10207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.946973][ T45] usb 1-1: config 0 descriptor?? [ 866.131185][ T45] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 866.194822][T10207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.387697][T10245] veth0_vlan: entered promiscuous mode [ 866.447803][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.449524][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.498963][ T67] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.515295][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.591336][T10245] veth1_vlan: entered promiscuous mode [ 866.645634][T10199] veth0_macvtap: entered promiscuous mode [ 866.816626][T10199] veth1_macvtap: entered promiscuous mode [ 867.546835][T10199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.843293][ T6660] usb 1-1: USB disconnect, device number 36 [ 867.873528][ T6660] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 867.884499][T10199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.896286][T10245] veth0_macvtap: entered promiscuous mode [ 867.935890][ T1492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.935912][ T1492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.083008][T10245] veth1_macvtap: entered promiscuous mode [ 868.094528][ T6208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.112490][ T6208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.124801][ T6208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.171607][ T6208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.409037][ T8860] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 868.430624][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.430647][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.536653][ T8860] usb 1-1: device descriptor read/64, error -71 [ 869.021517][T10532] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 869.021536][T10532] netlink: 224 bytes leftover after parsing attributes in process `syz.4.905'. [ 869.056473][T10245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.117788][ T8860] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 869.144023][T10531] ALSA: mixer_oss: invalid OSS volume '' [ 869.233983][T10245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.265353][ T8860] usb 1-1: device descriptor read/64, error -71 [ 869.315625][ T3578] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.354078][ T3578] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.373808][ T8860] usb usb1-port1: attempt power cycle [ 869.395651][ T3578] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.401193][ T3578] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.872435][ T8860] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 869.893614][ T8860] usb 1-1: device descriptor read/8, error -71 [ 870.142478][ T8860] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 870.163471][ T8860] usb 1-1: device descriptor read/8, error -71 [ 870.294873][ T8860] usb usb1-port1: unable to enumerate USB device [ 870.353835][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.353856][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.771012][ T1460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.771035][ T1460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.960400][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.960423][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.863856][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.863879][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.800568][ T6660] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 873.023785][ T6660] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 873.100994][ T6660] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.101045][ T6660] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.101065][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.140738][ T6660] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.140801][ T6660] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.140830][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.180317][ T6660] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.180362][ T6660] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.180381][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.195428][ T6660] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.195499][ T6660] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.195532][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.250920][ T6660] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.250964][ T6660] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.250983][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.255889][ T6660] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.255957][ T6660] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.255988][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.287387][ T6660] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.287461][ T6660] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.287495][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.290788][ T6660] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.290860][ T6660] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 873.290910][ T6660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 873.312742][ T6660] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 873.312767][ T6660] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 873.312782][ T6660] usb 1-1: Product: syz [ 873.312792][ T6660] usb 1-1: Manufacturer: syz [ 873.312803][ T6660] usb 1-1: SerialNumber: syz [ 873.325958][ T6660] usb 1-1: config 0 descriptor?? [ 873.550596][ T6660] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 875.492718][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.229172][ T6660] usb 1-1: USB disconnect, device number 41 [ 876.865299][ T6660] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 876.894392][T10597] netlink: 'syz.5.913': attribute type 1 has an invalid length. [ 876.894409][T10597] netlink: 224 bytes leftover after parsing attributes in process `syz.5.913'. [ 877.007192][T10596] ALSA: mixer_oss: invalid OSS volume '' [ 877.524520][T10607] bridge_slave_0: left allmulticast mode [ 877.524556][T10607] bridge_slave_0: left promiscuous mode [ 877.524834][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.225392][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.914'. [ 878.668088][T10607] bridge_slave_1: left allmulticast mode [ 878.668133][T10607] bridge_slave_1: left promiscuous mode [ 878.668317][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.168744][T10607] bond0: (slave bond_slave_0): Releasing backup interface [ 880.404669][T10632] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 880.474337][T10607] bond0: (slave bond_slave_1): Releasing backup interface [ 880.606457][T10607] team0: Port device team_slave_0 removed [ 880.644022][T10607] team0: Port device team_slave_1 removed [ 880.644823][T10607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.644844][T10607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.701711][T10607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.701737][T10607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.750741][T10611] team0: Mode changed to "loadbalance" [ 880.932451][ T8860] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 881.072495][ T8860] usb 1-1: device descriptor read/64, error -71 [ 881.446187][ T8860] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 881.632733][ T8860] usb 1-1: device descriptor read/64, error -71 [ 881.718277][ T5904] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 881.752993][ T8860] usb usb1-port1: attempt power cycle [ 881.995920][ T5904] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 881.995952][ T5904] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.995974][ T5904] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 881.996034][ T5904] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.001652][ T5904] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 882.001686][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 882.001708][ T5904] usb 7-1: Product: syz [ 882.001723][ T5904] usb 7-1: Manufacturer: syz [ 882.102594][ T8860] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 882.105710][ T5904] cdc_wdm 7-1:1.0: skipping garbage [ 882.105733][ T5904] cdc_wdm 7-1:1.0: skipping garbage [ 882.115523][ T45] libceph: connect (1)[c::]:6789 error -101 [ 882.116504][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 882.157001][ T8860] usb 1-1: device descriptor read/8, error -71 [ 882.169960][ T5904] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 882.170006][ T5904] cdc_wdm 7-1:1.0: Unknown control protocol [ 882.568615][T10646] ceph: No mds server is up or the cluster is laggy [ 883.632859][ T45] libceph: connect (1)[c::]:6789 error -101 [ 883.633089][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 883.682895][ T10] usb 7-1: USB disconnect, device number 2 [ 883.869322][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.127457][ T45] libceph: connect (1)[c::]:6789 error -101 [ 884.127617][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 884.241782][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 884.538068][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 884.538100][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.538120][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 884.538177][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.554979][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 884.555003][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 884.555018][ T10] usb 7-1: Product: syz [ 884.555027][ T10] usb 7-1: Manufacturer: syz [ 884.635955][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 884.636171][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 884.668327][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 884.668343][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 884.711029][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 884.711053][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 884.891739][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.026570][ T6660] usb 7-1: USB disconnect, device number 3 [ 885.098563][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 885.353378][ T5904] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 885.354861][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 885.354917][ T5904] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 885.354945][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.356601][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 885.356661][ T5904] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 885.356690][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.358135][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 885.358193][ T5904] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 885.358221][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.367331][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 885.367404][ T5904] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 885.367436][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.369191][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 885.369253][ T5904] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 885.369286][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.371930][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 885.371998][ T5904] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 885.372030][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.378935][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 885.379010][ T5904] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 885.379041][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.381429][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 885.381502][ T5904] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 885.381537][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.391303][ T5904] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 885.391341][ T5904] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 885.391366][ T5904] usb 6-1: Product: syz [ 885.391385][ T5904] usb 6-1: Manufacturer: syz [ 885.391403][ T5904] usb 6-1: SerialNumber: syz [ 885.438438][ T5904] usb 6-1: config 0 descriptor?? [ 885.588068][ T5904] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 886.100694][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.694899][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.741611][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.876965][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.152608][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.392601][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.572704][ C0] vkms_vblank_simulate: vblank timer overrun [ 887.922616][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.244608][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.304356][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.437337][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.562536][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.107273][T10567] usb 6-1: USB disconnect, device number 2 [ 889.124384][T10567] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 892.453061][ T5904] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 892.835540][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.842665][ T5904] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 892.842691][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.842708][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 892.842756][ T5904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.847946][ T5904] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 892.847978][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 892.847999][ T5904] usb 1-1: Product: syz [ 892.848014][ T5904] usb 1-1: Manufacturer: syz [ 893.003510][T10712] /dev/nullb0: Can't open blockdev [ 893.773081][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.794006][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 893.794029][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 893.822303][ T5904] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 893.822326][ T5904] cdc_wdm 1-1:1.0: Unknown control protocol [ 894.014812][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.148014][ T5904] usb 1-1: USB disconnect, device number 46 [ 894.661653][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.818037][T10723] /dev/nullb0: Can't open blockdev [ 895.478945][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.645906][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.850312][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.852850][ T5904] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 897.879839][ T38] audit: type=1800 audit(1758693915.064:94): pid=10760 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.940" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 898.222401][ T6660] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 898.466996][ T6660] usb 1-1: Using ep0 maxpacket: 8 [ 898.469013][ T6660] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 898.469033][ T6660] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 898.470337][ T6660] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 898.470354][ T6660] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 898.471436][ T6660] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 898.471453][ T6660] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 898.569123][ T6660] usb 1-1: string descriptor 0 read error: -22 [ 898.569352][ T6660] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 898.569371][ T6660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.599357][ T6660] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 898.599396][ T6660] usb 1-1: no configuration chosen from 3 choices [ 900.139442][T10771] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 901.113147][ T5925] usb 1-1: USB disconnect, device number 48 [ 903.442155][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.672464][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 907.832721][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 907.835528][ T10] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 907.835558][ T10] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 907.837209][ T10] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 907.837236][ T10] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 907.838694][ T10] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 907.838719][ T10] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 907.946387][ T10] usb 1-1: string descriptor 0 read error: -22 [ 907.946545][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 907.946570][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.978078][ T10] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 907.978099][ T10] usb 1-1: no configuration chosen from 3 choices [ 908.130391][ T38] audit: type=1800 audit(1758693925.314:95): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.961" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 909.870418][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.968'. [ 910.070238][T10878] netlink: 'syz.4.969': attribute type 10 has an invalid length. [ 910.223960][T10879] netlink: 'syz.4.969': attribute type 10 has an invalid length. [ 910.224113][T10879] netlink: 2 bytes leftover after parsing attributes in process `syz.4.969'. [ 910.279542][T10878] team0: left allmulticast mode [ 910.279567][T10878] team_slave_0: left allmulticast mode [ 910.279588][T10878] team_slave_1: left allmulticast mode [ 910.279612][T10878] team0: left promiscuous mode [ 910.279623][T10878] team_slave_0: left promiscuous mode [ 910.279860][T10878] team_slave_1: left promiscuous mode [ 910.285475][T10878] bridge0: port 3(team0) entered disabled state [ 910.589715][ T5904] usb 1-1: USB disconnect, device number 49 [ 910.807739][T10878] batman_adv: batadv0: Adding interface: team0 [ 910.807760][T10878] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.807792][T10878] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 910.974696][T10879] team0: entered promiscuous mode [ 910.974715][T10879] team_slave_0: entered promiscuous mode [ 910.974912][T10879] team_slave_1: entered promiscuous mode [ 910.975924][T10879] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.976173][T10879] batman_adv: batadv0: Interface activated: team0 [ 910.976202][T10879] batman_adv: batadv0: Interface deactivated: team0 [ 910.976218][T10879] batman_adv: batadv0: Removing interface: team0 [ 911.273484][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.354838][T10879] bridge0: port 3(team0) entered blocking state [ 911.355046][T10879] bridge0: port 3(team0) entered disabled state [ 911.355294][T10879] team0: entered allmulticast mode [ 911.355312][T10879] team_slave_0: entered allmulticast mode [ 911.355335][T10879] team_slave_1: entered allmulticast mode [ 914.381308][T10567] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 914.565808][T10567] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 914.565840][T10567] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.565861][T10567] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 914.568484][T10567] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.584276][T10567] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 914.584301][T10567] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 914.584315][T10567] usb 8-1: Product: syz [ 914.584325][T10567] usb 8-1: Manufacturer: syz [ 914.704094][T10567] cdc_wdm 8-1:1.0: skipping garbage [ 914.704112][T10567] cdc_wdm 8-1:1.0: skipping garbage [ 914.732608][T10567] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 914.732633][T10567] cdc_wdm 8-1:1.0: Unknown control protocol [ 914.971283][ T10] usb 8-1: USB disconnect, device number 2 [ 915.532446][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 915.697512][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 915.697545][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.697565][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 915.697639][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.699596][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 915.699618][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 915.699632][ T10] usb 8-1: Product: syz [ 915.699642][ T10] usb 8-1: Manufacturer: syz [ 915.835106][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 915.835129][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 915.838539][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 915.838562][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 916.796542][T10922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.801238][T10922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.095809][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.095903][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.098211][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.098232][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.098458][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.098472][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.098682][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.098695][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.098890][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.098903][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.099103][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.099116][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.099329][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.099342][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.099551][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.099564][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.099765][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.099780][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.099978][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 917.099990][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 917.430867][ T5904] usb 8-1: USB disconnect, device number 3 [ 917.430951][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 918.800173][ T5904] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 919.881473][ T5904] usb 8-1: Using ep0 maxpacket: 8 [ 919.894607][ T5904] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 919.894649][ T5904] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 919.895991][ T5904] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 919.896032][ T5904] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 919.910374][T10947] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 919.913050][ T5904] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 919.913125][ T5904] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 919.952648][ T5904] usb 8-1: string descriptor 0 read error: -22 [ 919.952809][ T5904] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 919.952835][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.169955][ T5904] adutux 8-1:168.0: interrupt endpoints not found [ 920.276776][ T5904] usb 8-1: USB disconnect, device number 4 [ 921.112534][ T5904] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 921.276470][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.982'. [ 921.309798][ T5904] usb 8-1: Using ep0 maxpacket: 8 [ 921.313327][ T5904] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 921.313396][ T5904] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 921.335094][ T5904] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 921.335173][ T5904] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 921.473079][ T5904] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 921.473145][ T5904] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 921.476857][ T5904] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 921.476901][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.476918][ T5904] usb 8-1: Product: syz [ 921.476929][ T5904] usb 8-1: Manufacturer: syz [ 921.476939][ T5904] usb 8-1: SerialNumber: syz [ 922.715536][ T5904] usb 8-1: can't set config #168, error -71 [ 922.756759][ T5904] usb 8-1: USB disconnect, device number 5 [ 926.678103][ T5925] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 926.849815][ T5925] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 926.849837][ T5925] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.849850][ T5925] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 926.849886][ T5925] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.883091][ T5925] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 926.883120][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 926.883139][ T5925] usb 8-1: Product: syz [ 926.883154][ T5925] usb 8-1: Manufacturer: syz [ 927.024296][ T5925] cdc_wdm 8-1:1.0: skipping garbage [ 927.024316][ T5925] cdc_wdm 8-1:1.0: skipping garbage [ 927.026740][ T5925] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 927.026752][ T5925] cdc_wdm 8-1:1.0: Unknown control protocol [ 927.291306][ T5904] usb 8-1: USB disconnect, device number 6 [ 927.822697][ T5904] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 928.010845][ C1] vkms_vblank_simulate: vblank timer overrun [ 928.453555][ C1] vkms_vblank_simulate: vblank timer overrun [ 928.945970][ C1] vkms_vblank_simulate: vblank timer overrun [ 928.958598][ T5904] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 928.958618][ T5904] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.958631][ T5904] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 928.958666][ T5904] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.960346][ T5904] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 928.960365][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 928.960380][ T5904] usb 8-1: Product: syz [ 928.960390][ T5904] usb 8-1: Manufacturer: syz [ 929.066110][T11022] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 929.112685][ T5904] cdc_wdm 8-1:1.0: skipping garbage [ 929.112724][ T5904] cdc_wdm 8-1:1.0: skipping garbage [ 929.143960][ T5904] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 929.143984][ T5904] cdc_wdm 8-1:1.0: Unknown control protocol [ 929.314931][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.347455][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.817269][ C1] wdm_int_callback: 1262 callbacks suppressed [ 929.817297][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.817316][ C1] wdm_int_callback: 1262 callbacks suppressed [ 929.817333][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.817580][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.817600][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.817863][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.817884][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.818122][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.818144][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.818562][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.818590][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.818832][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.818856][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.819166][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.819189][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.819505][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.819528][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.819787][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.819809][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.820091][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 929.820113][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 929.820260][ T5904] usb 8-1: USB disconnect, device number 7 [ 929.820346][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 930.037186][T11035] 9pnet_virtio: no channels available for device syz [ 932.440767][T11042] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 932.792716][ T5925] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 932.942528][ T5925] usb 8-1: Using ep0 maxpacket: 8 [ 932.944633][ T5925] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 932.944682][ T5925] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 932.945872][ T5925] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 932.945910][ T5925] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 932.947038][ T5925] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 932.947073][ T5925] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 932.950387][ T5925] usb 8-1: string descriptor 0 read error: -22 [ 932.950507][ T5925] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 932.950532][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.106857][ T5925] adutux 8-1:168.0: interrupt endpoints not found [ 933.336088][T10953] usb 8-1: USB disconnect, device number 8 [ 933.941331][T10953] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 934.366183][T10953] usb 8-1: Using ep0 maxpacket: 8 [ 934.401403][T10953] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 934.401465][T10953] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 934.417901][T10953] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 934.417973][T10953] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 934.422020][T10953] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 934.422079][T10953] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 934.429812][T10953] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 934.429840][T10953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.429859][T10953] usb 8-1: Product: syz [ 934.429873][T10953] usb 8-1: Manufacturer: syz [ 934.429887][T10953] usb 8-1: SerialNumber: syz [ 934.756231][T10953] adutux 8-1:168.0: interrupt endpoints not found [ 934.872824][T10953] usb 8-1: USB disconnect, device number 9 [ 935.602530][ T38] audit: type=1800 audit(1758693952.784:96): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.996" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 935.917256][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1002'. [ 936.612722][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.385233][T11108] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 939.389270][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.422467][ T5904] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 939.594894][ T5904] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 939.594924][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.594944][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 939.595014][ T5904] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.597476][ T5904] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 939.597501][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 939.597520][ T5904] usb 6-1: Product: syz [ 939.597534][ T5904] usb 6-1: Manufacturer: syz [ 939.630278][ T5904] cdc_wdm 6-1:1.0: skipping garbage [ 939.630302][ T5904] cdc_wdm 6-1:1.0: skipping garbage [ 939.772008][ T5904] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 939.772034][ T5904] cdc_wdm 6-1:1.0: Unknown control protocol [ 939.920835][ T5904] usb 6-1: USB disconnect, device number 3 [ 940.080923][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.442958][ T5904] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 940.606240][ T5904] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 940.606260][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.606272][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 940.606306][ T5904] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.607749][ T5904] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 940.607766][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 940.607779][ T5904] usb 6-1: Product: syz [ 940.607787][ T5904] usb 6-1: Manufacturer: syz [ 940.636182][ T5904] cdc_wdm 6-1:1.0: skipping garbage [ 940.636205][ T5904] cdc_wdm 6-1:1.0: skipping garbage [ 940.647731][ T5904] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 940.647756][ T5904] cdc_wdm 6-1:1.0: Unknown control protocol [ 941.397747][ C1] vkms_vblank_simulate: vblank timer overrun [ 941.448258][ C0] wdm_int_callback: 1 callbacks suppressed [ 941.448286][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.448305][ C0] wdm_int_callback: 1 callbacks suppressed [ 941.448321][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.448554][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.448575][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.448832][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.448853][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.449115][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.449137][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.449390][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.449408][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.449627][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.449644][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.449865][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.449884][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.450151][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.450171][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.450405][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.450421][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.450694][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 941.450710][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 941.463729][ T5904] usb 6-1: USB disconnect, device number 4 [ 941.463767][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 943.090965][ C1] vkms_vblank_simulate: vblank timer overrun [ 943.241344][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.098791][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.116799][T11135] Bluetooth: hci6: command 0x0406 tx timeout [ 944.116838][T11135] Bluetooth: hci4: command 0x0406 tx timeout [ 944.168255][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.341559][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.784858][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 945.087338][T11180] netlink: 384 bytes leftover after parsing attributes in process `syz.5.1018'. [ 948.852606][ T45] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 949.025095][ T45] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 949.025126][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.025146][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 949.025199][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.084466][ T45] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 949.084489][ T45] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 949.084503][ T45] usb 1-1: Product: syz [ 949.084514][ T45] usb 1-1: Manufacturer: syz [ 949.164581][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 949.164597][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 949.170665][ T45] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 949.170685][ T45] cdc_wdm 1-1:1.0: Unknown control protocol [ 949.366921][ T45] usb 1-1: USB disconnect, device number 50 [ 950.532385][ T45] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 950.688923][ T45] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 950.688953][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.688971][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 950.689022][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.691785][ T45] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 950.691813][ T45] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 950.691835][ T45] usb 1-1: Product: syz [ 950.691850][ T45] usb 1-1: Manufacturer: syz [ 950.914355][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 950.914377][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 950.933350][ T45] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 950.933371][ T45] cdc_wdm 1-1:1.0: Unknown control protocol [ 951.628985][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.001614][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.696743][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.888008][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.517457][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.522408][ T45] usb 1-1: USB disconnect, device number 51 [ 955.016692][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.301864][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.500524][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.661685][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.915416][T11265] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 955.917864][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.186135][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.241763][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.480812][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.582447][ T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 956.776438][ T10] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 956.776473][ T10] usb 6-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 956.776499][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 956.780708][ T10] usb 6-1: string descriptor 0 read error: -22 [ 956.780895][ T10] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.40 [ 956.780920][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.789235][T11270] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 957.063135][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 957.063276][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 957.111044][ T10] usb 6-1: USB disconnect, device number 5 [ 957.337067][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.646215][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.905404][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.305433][T11293] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 965.596827][T11339] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 966.483738][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.208052][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.121268][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.173972][ T5904] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 972.181084][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.329585][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.457876][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.507528][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.564857][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.643460][T11391] netlink: 'syz.6.1062': attribute type 1 has an invalid length. [ 972.643475][T11391] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1062'. [ 972.725342][T11390] ALSA: mixer_oss: invalid OSS volume '' [ 972.764792][ T5904] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 972.764818][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.764835][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 972.764874][ T5904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.766614][ T5904] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 972.766632][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 972.766645][ T5904] usb 1-1: Product: syz [ 972.766653][ T5904] usb 1-1: Manufacturer: syz [ 972.855570][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 972.855583][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 972.866330][ T5904] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 972.866344][ T5904] cdc_wdm 1-1:1.0: Unknown control protocol [ 973.072598][T10567] usb 1-1: USB disconnect, device number 52 [ 973.562924][T10567] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 974.239416][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.938929][T11406] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 976.920995][T10567] usb 1-1: device descriptor read/all, error -71 [ 978.630812][T11444] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 978.630847][T11444] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1074'. [ 978.704017][T11443] ALSA: mixer_oss: invalid OSS volume '' [ 985.022446][T10567] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 985.190554][T10567] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 985.190583][T10567] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.190602][T10567] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 985.190653][T10567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.235159][T10567] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 985.235188][T10567] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 985.235208][T10567] usb 6-1: Product: syz [ 985.235222][T10567] usb 6-1: Manufacturer: syz [ 986.406960][T10567] cdc_wdm 6-1:1.0: skipping garbage [ 986.406983][T10567] cdc_wdm 6-1:1.0: skipping garbage [ 986.458297][T11474] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 986.484884][T10567] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 986.484908][T10567] cdc_wdm 6-1:1.0: Unknown control protocol [ 986.531925][T10567] usb 6-1: USB disconnect, device number 6 [ 986.983778][T10567] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 987.735578][T11490] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 988.124981][T10567] usb 6-1: device descriptor read/all, error -71 [ 989.059084][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.189455][T11505] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 989.189472][T11505] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1088'. [ 989.357353][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 989.402038][T10567] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 989.507943][T11503] ALSA: mixer_oss: invalid OSS volume '' [ 989.694496][T10567] usb 6-1: Using ep0 maxpacket: 8 [ 989.783642][T10567] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 989.783707][T10567] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 989.783737][T10567] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.795910][T10567] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 989.795979][T10567] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 989.796012][T10567] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.804689][T10567] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 989.804759][T10567] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 989.804792][T10567] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.835575][T10567] usb 6-1: string descriptor 0 read error: -22 [ 989.835769][T10567] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 989.835797][T10567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.968491][T10567] adutux 6-1:168.0: interrupt endpoints not found [ 990.139701][T10567] usb 6-1: USB disconnect, device number 8 [ 991.202621][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.473313][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.793606][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.823524][T11520] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 993.146909][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.283731][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.600183][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.715033][T11550] ubi31: attaching mtd0 [ 995.716972][T11550] ubi31: scanning is finished [ 995.772570][T10566] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 995.945105][T10566] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 995.945141][T10566] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.945162][T10566] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 995.945222][T10566] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.948028][T10566] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 995.948058][T10566] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 995.948080][T10566] usb 1-1: Product: syz [ 995.948095][T10566] usb 1-1: Manufacturer: syz [ 996.044608][T10566] cdc_wdm 1-1:1.0: skipping garbage [ 996.044630][T10566] cdc_wdm 1-1:1.0: skipping garbage [ 996.047322][T10566] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 996.047341][T10566] cdc_wdm 1-1:1.0: Unknown control protocol [ 996.315846][ T45] usb 1-1: USB disconnect, device number 55 [ 996.326213][T11550] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 997.081409][T11562] netlink: 'syz.6.1101': attribute type 1 has an invalid length. [ 997.081426][T11562] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1101'. [ 997.142826][T11561] ALSA: mixer_oss: invalid OSS volume '' [ 997.222555][ T45] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 997.375740][ T45] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 997.375763][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.375776][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 997.375824][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.378110][ T45] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 997.378130][ T45] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 997.378143][ T45] usb 1-1: Product: syz [ 997.378152][ T45] usb 1-1: Manufacturer: syz [ 997.392493][T10566] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 997.418735][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 997.418760][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 997.442117][ T45] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 997.442140][ T45] cdc_wdm 1-1:1.0: Unknown control protocol [ 997.602631][T10566] usb 6-1: Using ep0 maxpacket: 8 [ 997.608282][T10566] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 997.608342][T10566] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 997.608372][T10566] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.652329][T10566] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 997.653441][T10566] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 997.653463][T10566] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.655430][T10566] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 997.655506][T10566] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 997.655527][T10566] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.732981][T10566] usb 6-1: string descriptor 0 read error: -22 [ 997.733150][T10566] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 997.733176][T10566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.742162][T10566] adutux 6-1:168.0: interrupt endpoints not found [ 998.059642][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.062004][T10566] usb 6-1: USB disconnect, device number 9 [ 998.567773][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.732117][T11575] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1105'. [ 999.087577][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.102378][T11575] 9pnet_virtio: no channels available for device syz [ 999.175949][ C0] wdm_int_callback: 24 callbacks suppressed [ 999.175973][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.175987][ C0] wdm_int_callback: 24 callbacks suppressed [ 999.175997][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.180061][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.180086][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.180339][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.180363][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.180601][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.180623][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.182587][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.182610][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.182863][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.182884][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.183136][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.183156][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.183369][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.183382][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.183579][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.183592][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.183811][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 999.183824][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 999.370733][ T6006] usb 1-1: USB disconnect, device number 56 [ 999.370947][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1001.345559][T11587] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1002.960292][T11606] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1005.823302][ T992] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1005.973475][ T992] usb 8-1: Using ep0 maxpacket: 8 [ 1005.975457][ T992] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.975497][ T992] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1005.975517][ T992] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1005.976586][ T992] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.976634][ T992] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1005.976652][ T992] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1005.977672][ T992] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.977707][ T992] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1005.977726][ T992] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1005.980790][ T992] usb 8-1: string descriptor 0 read error: -22 [ 1005.980893][ T992] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1005.980910][ T992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.135100][ T992] adutux 8-1:168.0: interrupt endpoints not found [ 1006.349386][T11639] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1119'. [ 1006.369862][T10953] usb 8-1: USB disconnect, device number 10 [ 1006.859033][T11645] 9pnet_virtio: no channels available for device syz [ 1012.232468][ T6006] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1012.261516][T11690] overlayfs: failed to resolve './file0': -2 [ 1012.392506][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'. [ 1012.413785][ T6006] usb 1-1: Using ep0 maxpacket: 32 [ 1012.426479][ T6006] usb 1-1: config 0 has no interfaces? [ 1012.426517][ T6006] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1012.426542][ T6006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.501769][ T6006] usb 1-1: config 0 descriptor?? [ 1013.952363][ T992] usb 1-1: USB disconnect, device number 57 [ 1014.206412][T11703] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1133'. [ 1015.891948][T11704] 9pnet_virtio: no channels available for device syz [ 1016.342430][T10567] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1016.504355][T10567] usb 8-1: Using ep0 maxpacket: 8 [ 1016.695150][T10567] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1016.695210][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1016.695237][T10567] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1016.695261][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1016.695284][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1016.793503][T10567] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1016.793561][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1016.793581][T10567] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1016.793598][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1016.793615][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1016.848038][T10567] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1016.848091][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1016.848112][T10567] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1016.848130][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1016.848149][T10567] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1021.456850][T10567] usb 8-1: string descriptor 0 read error: -71 [ 1021.456969][T10567] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1021.456986][T10567] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.525269][T10567] usb 8-1: can't set config #168, error -71 [ 1021.587593][T10567] usb 8-1: USB disconnect, device number 11 [ 1021.644147][T11729] overlayfs: failed to resolve './file0': -2 [ 1021.944688][ T38] audit: type=1326 audit(1758694039.134:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de06eeec9 code=0x7ffc0000 [ 1021.944898][ T38] audit: type=1326 audit(1758694039.134:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de06eeec9 code=0x7ffc0000 [ 1021.971063][ T38] audit: type=1326 audit(1758694039.154:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3de068af79 code=0x7ffc0000 [ 1021.971133][ T38] audit: type=1326 audit(1758694039.154:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3de068af79 code=0x7ffc0000 [ 1021.971203][ T38] audit: type=1326 audit(1758694039.154:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3de068af79 code=0x7ffc0000 [ 1021.971256][ T38] audit: type=1326 audit(1758694039.154:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3de068af79 code=0x7ffc0000 [ 1022.102454][ T38] audit: type=1326 audit(1758694039.274:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3de068af79 code=0x7ffc0000 [ 1022.104291][ T38] audit: type=1326 audit(1758694039.294:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3de068af79 code=0x7ffc0000 [ 1022.106656][ T38] audit: type=1326 audit(1758694039.294:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3de068af79 code=0x7ffc0000 [ 1022.108779][ T38] audit: type=1326 audit(1758694039.294:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11732 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3de068af79 code=0x7ffc0000 [ 1022.342356][T10567] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1022.492391][T10567] usb 6-1: Using ep0 maxpacket: 32 [ 1022.555738][T10567] usb 6-1: config 0 has no interfaces? [ 1022.555779][T10567] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1022.555805][T10567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.755780][T10567] usb 6-1: config 0 descriptor?? [ 1024.040588][T10567] usb 6-1: USB disconnect, device number 10 [ 1027.206386][T10567] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1027.372401][T10567] usb 1-1: Using ep0 maxpacket: 8 [ 1027.375318][T10567] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1027.375379][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1027.375409][T10567] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1027.375434][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1027.375462][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1027.377009][T10567] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1027.377089][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1027.377118][T10567] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1027.377159][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1027.377184][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1027.482505][T10567] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1027.482550][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1027.482569][T10567] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1027.482586][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1027.482628][T10567] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1027.495830][T10567] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1027.495856][T10567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.495871][T10567] usb 1-1: Product: syz [ 1027.495881][T10567] usb 1-1: Manufacturer: syz [ 1027.495892][T10567] usb 1-1: SerialNumber: syz [ 1027.658859][T11779] overlayfs: failed to resolve './file0': -2 [ 1029.189283][T10567] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1029.620675][T10567] usb 1-1: USB disconnect, device number 58 [ 1032.796641][T11808] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1164'. [ 1033.162251][T11810] 9pnet_virtio: no channels available for device syz [ 1033.227517][ T38] kauditd_printk_skb: 123 callbacks suppressed [ 1033.227537][ T38] audit: type=1326 audit(1758694050.414:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.227886][ T38] audit: type=1326 audit(1758694050.414:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.362515][ T38] audit: type=1326 audit(1758694050.534:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.362575][ T38] audit: type=1326 audit(1758694050.544:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.362624][ T38] audit: type=1326 audit(1758694050.544:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.367758][ T38] audit: type=1326 audit(1758694050.554:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.367820][ T38] audit: type=1326 audit(1758694050.554:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.367869][ T38] audit: type=1326 audit(1758694050.554:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.531254][ T38] audit: type=1326 audit(1758694050.714:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.531314][ T38] audit: type=1326 audit(1758694050.714:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11811 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cf05eec9 code=0x7ffc0000 [ 1033.922076][T11818] overlayfs: failed to resolve './file0': -2 [ 1034.985663][T11825] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1041.039490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.626452][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.770706][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.932933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.896923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.118699][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.260847][T11870] overlayfs: failed to resolve './file0': -2 [ 1043.536443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.835883][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.004196][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.243782][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.842399][T11878] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1044.844039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1045.260418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.007774][T11912] overlayfs: failed to resolve './file0': -2 [ 1048.605667][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.618802][ T6006] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1048.760319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.922254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.353382][T11918] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1049.354785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.576643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.582081][ T6006] usb 6-1: Using ep0 maxpacket: 8 [ 1049.601455][ T6006] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1049.601483][ T6006] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.601504][ T6006] usb 6-1: config 0 has no interface number 0 [ 1049.601558][ T6006] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1049.601582][ T6006] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.601626][ T6006] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1049.601652][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.710420][ T6006] usb 6-1: config 0 descriptor?? [ 1049.722547][ T6006] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1049.957214][ T6006] usb 6-1: USB disconnect, device number 11 [ 1051.382803][ C1] vkms_vblank_simulate: vblank timer overrun [ 1051.963227][ T6006] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1052.152386][ T6006] usb 6-1: Using ep0 maxpacket: 8 [ 1052.156944][ T6006] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1052.157003][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1052.157032][ T6006] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.157059][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.157086][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1052.162828][ T6006] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1052.162885][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1052.162915][ T6006] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.162942][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.162970][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1052.164394][ T6006] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1052.164460][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1052.164488][ T6006] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.164515][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.164543][ T6006] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1052.167435][ T6006] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1052.167463][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.167482][ T6006] usb 6-1: Product: syz [ 1052.167493][ T6006] usb 6-1: Manufacturer: syz [ 1052.167503][ T6006] usb 6-1: SerialNumber: syz [ 1052.667145][ T6006] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1052.711352][ T6006] usb 6-1: USB disconnect, device number 12 [ 1054.584189][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 1054.603443][T11956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1206'. [ 1055.442534][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.243865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.535335][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1056.644679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.702345][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1056.704350][ T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1056.704368][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.704381][ T9] usb 8-1: config 0 has no interface number 0 [ 1056.704414][ T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1056.704429][ T9] usb 8-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1056.704459][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1056.704475][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.833994][ T9] usb 8-1: config 0 descriptor?? [ 1056.860556][ T9] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1057.921380][ T9] usb 8-1: USB disconnect, device number 12 [ 1058.538845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.674349][ T6006] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1059.640408][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.802554][ T6006] usb 1-1: Using ep0 maxpacket: 8 [ 1059.839361][ T6006] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1059.839426][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1059.839456][ T6006] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1059.839484][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1059.839552][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1059.840781][ T6006] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1059.840847][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1059.840875][ T6006] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1059.840893][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1059.840912][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1059.952483][ T6006] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1059.952552][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1059.952581][ T6006] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1059.952607][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1059.952634][ T6006] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1060.248995][ T6006] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1060.249032][ T6006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.249054][ T6006] usb 1-1: Product: syz [ 1060.249069][ T6006] usb 1-1: Manufacturer: syz [ 1060.249084][ T6006] usb 1-1: SerialNumber: syz [ 1063.609654][ T6006] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1063.652935][ T6006] usb 1-1: USB disconnect, device number 59 [ 1065.402750][T12023] CIFS mount error: No usable UNC path provided in device string! [ 1065.402750][T12023] [ 1065.402799][T12023] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1067.789483][T12037] CIFS mount error: No usable UNC path provided in device string! [ 1067.789483][T12037] [ 1067.789508][T12037] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1067.792579][T12037] binder: 12032:12037 ioctl c0046209 9999999999999999 returned -22 [ 1067.852765][ T45] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1068.012601][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 1068.015560][ T45] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1068.015588][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.015608][ T45] usb 1-1: config 0 has no interface number 0 [ 1068.015660][ T45] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1068.015683][ T45] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.015741][ T45] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1068.015766][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.021502][ T45] usb 1-1: config 0 descriptor?? [ 1068.777399][ T45] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1068.839757][ T45] usb 1-1: USB disconnect, device number 60 [ 1069.591007][T12045] 9pnet_fd: Insufficient options for proto=fd [ 1069.678994][T12044] netlink: 'syz.7.1231': attribute type 11 has an invalid length. [ 1069.679020][T12044] netlink: 'syz.7.1231': attribute type 10 has an invalid length. [ 1069.679035][T12044] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1231'. [ 1070.252547][T10566] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1070.362867][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 1070.422371][T10566] usb 1-1: Using ep0 maxpacket: 8 [ 1070.425637][T10566] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1070.425693][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1070.425736][T10566] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.425763][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1070.425791][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1070.428296][T10566] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1070.428380][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1070.428410][T10566] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.428438][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1070.428466][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1070.430266][T10566] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1070.430325][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1070.430354][T10566] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.430381][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1070.430409][T10566] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1070.448216][T10566] usb 1-1: string descriptor 0 read error: -22 [ 1070.448378][T10566] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1070.448402][T10566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.874920][ T5848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1070.874965][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1070.875003][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1070.875017][ T5848] Workqueue: hci3 hci_rx_work [ 1070.875053][ T5848] Call Trace: [ 1070.875061][ T5848] [ 1070.875070][ T5848] dump_stack_lvl+0x189/0x250 [ 1070.875125][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.875159][ T5848] ? __pfx__printk+0x10/0x10 [ 1070.875193][ T5848] ? kernfs_path_from_node+0x2c/0x280 [ 1070.875216][ T5848] ? kernfs_path_from_node+0x243/0x280 [ 1070.875236][ T5848] ? kernfs_path_from_node+0x2c/0x280 [ 1070.875262][ T5848] sysfs_create_dir_ns+0x259/0x280 [ 1070.875296][ T5848] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1070.875324][ T5848] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1070.875344][ T5848] ? rt_spin_unlock+0x65/0x80 [ 1070.875378][ T5848] kobject_add_internal+0x5a5/0xb50 [ 1070.875409][ T5848] kobject_add+0x155/0x220 [ 1070.875435][ T5848] ? __pfx_kobject_add+0x10/0x10 [ 1070.875464][ T5848] ? get_device_parent+0x370/0x3a0 [ 1070.875489][ T5848] device_add+0x408/0xb50 [ 1070.875514][ T5848] hci_conn_add_sysfs+0xd5/0x1e0 [ 1070.875540][ T5848] le_conn_complete_evt+0xc3a/0x1220 [ 1070.875583][ T5848] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1070.875614][ T5848] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1070.875645][ T5848] ? lockdep_hardirqs_on+0x9c/0x150 [ 1070.875682][ T5848] ? skb_pull_data+0xfb/0x200 [ 1070.875711][ T5848] hci_le_conn_complete_evt+0x187/0x450 [ 1070.875747][ T5848] hci_event_packet+0x78f/0x1200 [ 1070.875775][ T5848] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1070.875814][ T5848] ? __pfx_hci_event_packet+0x10/0x10 [ 1070.875838][ T5848] ? __pfx_migrate_enable+0x10/0x10 [ 1070.875873][ T5848] ? hci_send_to_monitor+0xe2/0x570 [ 1070.875908][ T5848] hci_rx_work+0x46a/0xe80 [ 1070.875943][ T5848] ? process_scheduled_works+0x9ef/0x17b0 [ 1070.875982][ T5848] process_scheduled_works+0xade/0x17b0 [ 1070.876064][ T5848] ? __pfx_process_scheduled_works+0x10/0x10 [ 1070.876112][ T5848] worker_thread+0x8a0/0xda0 [ 1070.876172][ T5848] kthread+0x70e/0x8a0 [ 1070.876228][ T5848] ? __pfx_worker_thread+0x10/0x10 [ 1070.876256][ T5848] ? __pfx_kthread+0x10/0x10 [ 1070.876298][ T5848] ? __pfx_kthread+0x10/0x10 [ 1070.876333][ T5848] ret_from_fork+0x436/0x7d0 [ 1070.876366][ T5848] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.876403][ T5848] ? __switch_to_asm+0x39/0x70 [ 1070.876423][ T5848] ? __switch_to_asm+0x33/0x70 [ 1070.876443][ T5848] ? __pfx_kthread+0x10/0x10 [ 1070.876479][ T5848] ret_from_fork_asm+0x1a/0x30 [ 1070.876520][ T5848] [ 1070.876684][ T5848] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1070.876729][ T5848] Bluetooth: hci3: failed to register connection device [ 1071.515372][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.843382][T10566] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1072.020709][T12062] CIFS mount error: No usable UNC path provided in device string! [ 1072.020709][T12062] [ 1072.020759][T12062] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1072.624177][T10566] usb 1-1: USB disconnect, device number 61 [ 1073.132530][ T6006] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1073.442399][ T6006] usb 7-1: Using ep0 maxpacket: 8 [ 1073.444644][ T6006] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1073.444663][ T6006] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.444676][ T6006] usb 7-1: config 0 has no interface number 0 [ 1073.444706][ T6006] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1073.444733][ T6006] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1073.444749][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.537409][ T6006] usb 7-1: config 0 descriptor?? [ 1073.578457][ T6006] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1073.914851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1074.135318][ T9] usb 7-1: USB disconnect, device number 4 [ 1074.243977][ C1] vkms_vblank_simulate: vblank timer overrun [ 1074.683677][ C1] vkms_vblank_simulate: vblank timer overrun [ 1075.598525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.702448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.010409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.685187][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.727623][ T8218] Bluetooth: hci3: command 0x0406 tx timeout [ 1078.282605][ T5835] ================================================================== [ 1078.282629][ T5835] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040 [ 1078.282672][ T5835] Read of size 8 at addr ffff8880288a9500 by task kworker/u9:2/5835 [ 1078.282692][ T5835] [ 1078.282705][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.282731][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1078.282747][ T5835] Workqueue: hci1 hci_rx_work [ 1078.282775][ T5835] Call Trace: [ 1078.282782][ T5835] [ 1078.282792][ T5835] dump_stack_lvl+0x189/0x250 [ 1078.282825][ T5835] ? __kasan_check_byte+0x12/0x40 [ 1078.282856][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1078.282889][ T5835] ? lock_release+0x4b/0x3e0 [ 1078.282922][ T5835] ? __virt_addr_valid+0x4a5/0x5c0 [ 1078.282944][ T5835] print_report+0xca/0x240 [ 1078.282972][ T5835] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1078.283005][ T5835] kasan_report+0x118/0x150 [ 1078.283035][ T5835] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1078.283074][ T5835] l2cap_connect_cfm+0x6e4/0x1040 [ 1078.283114][ T5835] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1078.283160][ T5835] ? mutex_lock_nested+0x154/0x1d0 [ 1078.283187][ T5835] ? hci_connect_cfm+0x2c/0x140 [ 1078.283215][ T5835] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1078.283249][ T5835] hci_connect_cfm+0x92/0x140 [ 1078.283280][ T5835] le_conn_complete_evt+0xcd3/0x1220 [ 1078.283319][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1078.283352][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1078.283385][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 1078.283420][ T5835] ? skb_pull_data+0xfb/0x200 [ 1078.283447][ T5835] hci_le_conn_complete_evt+0x187/0x450 [ 1078.283482][ T5835] hci_event_packet+0x78f/0x1200 [ 1078.283510][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1078.283541][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 1078.283565][ T5835] ? __pfx_migrate_enable+0x10/0x10 [ 1078.283597][ T5835] ? hci_send_to_monitor+0xe2/0x570 [ 1078.283631][ T5835] hci_rx_work+0x46a/0xe80 [ 1078.283662][ T5835] ? process_scheduled_works+0x9ef/0x17b0 [ 1078.283690][ T5835] process_scheduled_works+0xade/0x17b0 [ 1078.283734][ T5835] ? __pfx_process_scheduled_works+0x10/0x10 [ 1078.283772][ T5835] worker_thread+0x8a0/0xda0 [ 1078.283815][ T5835] kthread+0x70e/0x8a0 [ 1078.283849][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 1078.283876][ T5835] ? __pfx_kthread+0x10/0x10 [ 1078.283912][ T5835] ? __pfx_kthread+0x10/0x10 [ 1078.283944][ T5835] ret_from_fork+0x436/0x7d0 [ 1078.283973][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.284005][ T5835] ? __switch_to_asm+0x39/0x70 [ 1078.284026][ T5835] ? __switch_to_asm+0x33/0x70 [ 1078.284045][ T5835] ? __pfx_kthread+0x10/0x10 [ 1078.284078][ T5835] ret_from_fork_asm+0x1a/0x30 [ 1078.284108][ T5835] [ 1078.284117][ T5835] [ 1078.284122][ T5835] Allocated by task 5835: [ 1078.284132][ T5835] kasan_save_track+0x3e/0x80 [ 1078.284162][ T5835] __kasan_kmalloc+0x93/0xb0 [ 1078.284186][ T5835] __kmalloc_cache_noprof+0x1a8/0x320 [ 1078.284214][ T5835] l2cap_chan_create+0x50/0x780 [ 1078.284235][ T5835] l2cap_sock_new_connection_cb+0x182/0x2b0 [ 1078.284257][ T5835] l2cap_connect_cfm+0x377/0x1040 [ 1078.284287][ T5835] hci_connect_cfm+0x92/0x140 [ 1078.284313][ T5835] le_conn_complete_evt+0xcd3/0x1220 [ 1078.284342][ T5835] hci_le_conn_complete_evt+0x187/0x450 [ 1078.284370][ T5835] hci_event_packet+0x78f/0x1200 [ 1078.284392][ T5835] hci_rx_work+0x46a/0xe80 [ 1078.284414][ T5835] process_scheduled_works+0xade/0x17b0 [ 1078.284437][ T5835] worker_thread+0x8a0/0xda0 [ 1078.284462][ T5835] kthread+0x70e/0x8a0 [ 1078.284490][ T5835] ret_from_fork+0x436/0x7d0 [ 1078.284515][ T5835] ret_from_fork_asm+0x1a/0x30 [ 1078.284533][ T5835] [ 1078.284538][ T5835] Freed by task 12102: [ 1078.284547][ T5835] kasan_save_track+0x3e/0x80 [ 1078.284569][ T5835] kasan_save_free_info+0x46/0x50 [ 1078.284587][ T5835] __kasan_slab_free+0x5b/0x80 [ 1078.284611][ T5835] kfree+0x195/0x550 [ 1078.284634][ T5835] l2cap_sock_cleanup_listen+0xea/0x3e0 [ 1078.284654][ T5835] l2cap_sock_release+0x6a/0x230 [ 1078.284672][ T5835] sock_close+0xc3/0x240 [ 1078.284693][ T5835] __fput+0x458/0xa80 [ 1078.284710][ T5835] task_work_run+0x1d4/0x260 [ 1078.284728][ T5835] do_exit+0x6b5/0x2300 [ 1078.284745][ T5835] do_group_exit+0x21c/0x2d0 [ 1078.284762][ T5835] get_signal+0x125e/0x1310 [ 1078.284785][ T5835] arch_do_signal_or_restart+0x9a/0x750 [ 1078.284808][ T5835] exit_to_user_mode_loop+0x75/0x110 [ 1078.284835][ T5835] do_syscall_64+0x2bd/0x3b0 [ 1078.284853][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.284873][ T5835] [ 1078.284878][ T5835] The buggy address belongs to the object at ffff8880288a9000 [ 1078.284878][ T5835] which belongs to the cache kmalloc-2k of size 2048 [ 1078.284896][ T5835] The buggy address is located 1280 bytes inside of [ 1078.284896][ T5835] freed 2048-byte region [ffff8880288a9000, ffff8880288a9800) [ 1078.284920][ T5835] [ 1078.284925][ T5835] The buggy address belongs to the physical page: [ 1078.284943][ T5835] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x288a8 [ 1078.284968][ T5835] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1078.284987][ T5835] flags: 0x80000000000040(head|node=0|zone=1) [ 1078.285010][ T5835] page_type: f5(slab) [ 1078.285030][ T5835] raw: 0080000000000040 ffff888019842000 ffffea0000f13600 dead000000000002 [ 1078.285048][ T5835] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1078.285069][ T5835] head: 0080000000000040 ffff888019842000 ffffea0000f13600 dead000000000002 [ 1078.285087][ T5835] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1078.285106][ T5835] head: 0080000000000003 ffffea0000a22a01 00000000ffffffff 00000000ffffffff [ 1078.285124][ T5835] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1078.285135][ T5835] page dumped because: kasan: bad access detected [ 1078.285155][ T5835] page_owner tracks the page as allocated [ 1078.285164][ T5835] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1460, tgid 1460 (kworker/u8:8), ts 102158218792, free_ts 102011951497 [ 1078.285202][ T5835] post_alloc_hook+0x240/0x2a0 [ 1078.285232][ T5835] get_page_from_freelist+0x2119/0x21b0 [ 1078.285252][ T5835] __alloc_frozen_pages_noprof+0x181/0x370 [ 1078.285273][ T5835] alloc_pages_mpol+0xd1/0x380 [ 1078.285299][ T5835] allocate_slab+0x8a/0x370 [ 1078.285319][ T5835] ___slab_alloc+0x8d1/0xdc0 [ 1078.285334][ T5835] __kmalloc_node_track_caller_noprof+0x14c/0x450 [ 1078.285363][ T5835] kmalloc_reserve+0x136/0x290 [ 1078.285392][ T5835] __alloc_skb+0x142/0x2d0 [ 1078.285421][ T5835] inet6_ifinfo_notify+0x70/0x120 [ 1078.285442][ T5835] addrconf_notify+0xc4e/0x1010 [ 1078.285466][ T5835] notifier_call_chain+0x1b3/0x3e0 [ 1078.285491][ T5835] netif_state_change+0x284/0x3a0 [ 1078.285517][ T5835] linkwatch_do_dev+0x117/0x170 [ 1078.285536][ T5835] __linkwatch_run_queue+0x56d/0x7e0 [ 1078.285556][ T5835] linkwatch_event+0x4c/0x60 [ 1078.285575][ T5835] page last free pid 5836 tgid 5836 stack trace: [ 1078.285587][ T5835] __free_frozen_pages+0xb59/0xce0 [ 1078.285617][ T5835] __put_partials+0x159/0x1a0 [ 1078.285634][ T5835] __slab_free+0x2b3/0x390 [ 1078.285653][ T5835] qlist_free_all+0x97/0x140 [ 1078.285674][ T5835] kasan_quarantine_reduce+0x148/0x160 [ 1078.285698][ T5835] __kasan_slab_alloc+0x22/0x80 [ 1078.285722][ T5835] __kmalloc_node_noprof+0x1b0/0x460 [ 1078.285749][ T5835] qdisc_alloc+0x9c/0xac0 [ 1078.285774][ T5835] qdisc_create_dflt+0x8e/0x4e0 [ 1078.285800][ T5835] dev_activate+0x378/0x1150 [ 1078.285826][ T5835] __dev_open+0x69c/0x880 [ 1078.285850][ T5835] __dev_change_flags+0x1ea/0x6d0 [ 1078.285879][ T5835] netif_change_flags+0x88/0x1a0 [ 1078.285911][ T5835] do_setlink+0xc55/0x41c0 [ 1078.285939][ T5835] rtnl_newlink+0x160b/0x1c70 [ 1078.285966][ T5835] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1078.285993][ T5835] [ 1078.285998][ T5835] Memory state around the buggy address: [ 1078.286009][ T5835] ffff8880288a9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.286024][ T5835] ffff8880288a9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.286039][ T5835] >ffff8880288a9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.286050][ T5835] ^ [ 1078.286060][ T5835] ffff8880288a9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.286075][ T5835] ffff8880288a9600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.286086][ T5835] ================================================================== [ 1078.286107][ T5835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1078.286124][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.286154][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1078.286170][ T5835] Workqueue: hci1 hci_rx_work [ 1078.286196][ T5835] Call Trace: [ 1078.286205][ T5835] [ 1078.286213][ T5835] dump_stack_lvl+0x99/0x250 [ 1078.286245][ T5835] ? __asan_memcpy+0x40/0x70 [ 1078.286268][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1078.286302][ T5835] ? __pfx__printk+0x10/0x10 [ 1078.286331][ T5835] vpanic+0x281/0x750 [ 1078.286362][ T5835] ? __pfx_print_hex_dump+0x10/0x10 [ 1078.286394][ T5835] ? __pfx_vpanic+0x10/0x10 [ 1078.286433][ T5835] panic+0xb9/0xc0 [ 1078.286463][ T5835] ? __pfx_panic+0x10/0x10 [ 1078.286492][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1078.286528][ T5835] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1078.286565][ T5835] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1078.286598][ T5835] check_panic_on_warn+0x89/0xb0 [ 1078.286620][ T5835] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1078.286652][ T5835] end_report+0x78/0x160 [ 1078.286680][ T5835] kasan_report+0x129/0x150 [ 1078.286709][ T5835] ? l2cap_connect_cfm+0x6e4/0x1040 [ 1078.286747][ T5835] l2cap_connect_cfm+0x6e4/0x1040 [ 1078.286787][ T5835] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1078.286822][ T5835] ? mutex_lock_nested+0x154/0x1d0 [ 1078.286847][ T5835] ? hci_connect_cfm+0x2c/0x140 [ 1078.286876][ T5835] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1078.286912][ T5835] hci_connect_cfm+0x92/0x140 [ 1078.286943][ T5835] le_conn_complete_evt+0xcd3/0x1220 [ 1078.286981][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1078.287013][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1078.287048][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 1078.287082][ T5835] ? skb_pull_data+0xfb/0x200 [ 1078.287109][ T5835] hci_le_conn_complete_evt+0x187/0x450 [ 1078.287144][ T5835] hci_event_packet+0x78f/0x1200 [ 1078.287190][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1078.287220][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 1078.287245][ T5835] ? __pfx_migrate_enable+0x10/0x10 [ 1078.287273][ T5835] ? hci_send_to_monitor+0xe2/0x570 [ 1078.287305][ T5835] hci_rx_work+0x46a/0xe80 [ 1078.287333][ T5835] ? process_scheduled_works+0x9ef/0x17b0 [ 1078.287360][ T5835] process_scheduled_works+0xade/0x17b0 [ 1078.287400][ T5835] ? __pfx_process_scheduled_works+0x10/0x10 [ 1078.287436][ T5835] worker_thread+0x8a0/0xda0 [ 1078.287476][ T5835] kthread+0x70e/0x8a0 [ 1078.287509][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 1078.287535][ T5835] ? __pfx_kthread+0x10/0x10 [ 1078.287568][ T5835] ? __pfx_kthread+0x10/0x10 [ 1078.287599][ T5835] ret_from_fork+0x436/0x7d0 [ 1078.287628][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.287658][ T5835] ? __switch_to_asm+0x39/0x70 [ 1078.287677][ T5835] ? __switch_to_asm+0x33/0x70 [ 1078.287697][ T5835] ? __pfx_kthread+0x10/0x10 [ 1078.287728][ T5835] ret_from_fork_asm+0x1a/0x30 [ 1078.287757][ T5835] [ 1078.287919][ T5835] Kernel Offset: disabled