last executing test programs: 13m42.813098358s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0xfe) 13m40.031653801s ago: executing program 1 (id=6): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) 13m39.424396763s ago: executing program 1 (id=8): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x560, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, 0x0, 0x0) 13m33.83962099s ago: executing program 1 (id=12): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x3000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 13m31.273608951s ago: executing program 1 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0xd0) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014"], 0xfce) 13m25.099870268s ago: executing program 1 (id=18): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das6402\x00', [0x4f23, 0x5, 0xe, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x6c3, 0x8000000, 0x2ec0]}) 13m9.784394504s ago: executing program 32 (id=18): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das6402\x00', [0x4f23, 0x5, 0xe, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x6c3, 0x8000000, 0x2ec0]}) 8m59.679482283s ago: executing program 2 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) fanotify_init(0x20, 0x40400) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 8m57.24854632s ago: executing program 2 (id=494): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e3ca6413280c8ed285a22df77662868f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="95f26f9412a7"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 8m57.043630971s ago: executing program 2 (id=495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$MSR(0x0, 0xffffffffffff8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) 8m55.655965432s ago: executing program 2 (id=496): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) socket(0x10, 0x2, 0xb6) r2 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4606, &(0x7f0000000080)={0x2}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) 8m53.234825358s ago: executing program 2 (id=499): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x1000000000005) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c28, 0x1, 0x1, 0xfffffffc, 0x2, 0xff, 0x3, 0x10001, 0x7ffd, 0x101, 0x2, 0x1, 0x200004, 0x3ff, 0x6, 0x9, 0x600, 0x1a445, 0x3, 0xb6, 0x10000089, 0xfd, 0x200, 0x0, 0x2810d, 0x8, 0x4, 0x8, 0x8, 0x10000, 0xfffffff4]}) 8m51.132072392s ago: executing program 2 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 8m35.819602508s ago: executing program 33 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 7m17.140737414s ago: executing program 0 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000003140)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)="47c30a146572fc59452b6a872236943e323fff8a64857b8d78f95a7ed1f1edd63304d0fcd9820715665dbb2f958823e19f5b", 0x32}, {0x0}, {&(0x7f0000000580)="b08d8af63c4a45", 0x7}], 0x3, &(0x7f0000000540), 0x0, 0x10000}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000700)="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", 0x1000}], 0x1, 0x0, 0x0, 0x4040001}}], 0x2, 0x200c0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 7m16.018812597s ago: executing program 0 (id=694): syz_usb_connect(0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)={0x90000001}) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000074dcf3e8ca00", @ANYRES16=r7, @ANYBLOB="31832abd70000200000019000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x1000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {0xffffffffffffffff, 0x0}}, './file0\x00'}) getgroups(0x7, &(0x7f0000000080)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00]) setresgid(0xee01, r9, r10) 7m12.510839304s ago: executing program 0 (id=696): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x1, 0x202000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x7) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000080)=0x3ff) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x4) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r7}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r2, 0x0, 0x0) 7m11.855997011s ago: executing program 0 (id=699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r1, 0x8b22, &(0x7f0000000040)) 7m11.554711751s ago: executing program 0 (id=700): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x00I\x00_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 7m9.438890226s ago: executing program 0 (id=701): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6m54.275385787s ago: executing program 34 (id=701): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m48.023824896s ago: executing program 3 (id=1108): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x7, 0x1, @value=0x100c}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xf, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x47504a50}) 3m47.739925505s ago: executing program 3 (id=1111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) listen(r3, 0x0) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = syz_open_dev$media(0x0, 0x0, 0x80) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r1, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f00000034c0)={0x2020}, 0xcac) 3m46.711110089s ago: executing program 3 (id=1112): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x1) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) 3m45.90805166s ago: executing program 3 (id=1117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) 3m45.765098375s ago: executing program 3 (id=1119): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newaddr={0x40, 0x14, 0x100, 0x70bd27, 0x25dfdbfb, {0x2, 0x20, 0x68, 0xfe}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x101}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x4400) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x404c881, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @local}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4040005) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ufs\x00', 0x2208004, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 3m43.901752245s ago: executing program 3 (id=1122): socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m28.693127581s ago: executing program 35 (id=1122): socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 12.866743542s ago: executing program 7 (id=1560): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)='./file2\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001806fffe80000000000000000000000000000afe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000308020000ecbe41e5d8020f8a667c95e9fe1ee91cdc359cca6b84d05760920a68d52ddb0a4b6a8a57a929f7191cd3204a4d1f7a93248851fd233eb7848c56dc57261e8493d4422e7d51ab87129cc798198de5bfeff221c4143e423aa2475f"], 0x0) syz_usb_connect(0x4, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a01"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000080)="0bc3", 0x2}, {&(0x7f0000003300)="fcfe", 0x2}], 0x2) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 10.901060122s ago: executing program 5 (id=1564): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbb000000010000000800315b8d03c9b1e5e39f166cee8e7d22ef4500005c000000000011907800000e2200489078030000000200000009d499508e870165703dfe60f4204fa83adecec7875884cf3d479ac5db0f24bd2f84ed701acd295208ec3e8d8e30f9f592e5af2200"/122], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x13, 0x40012100, 0x0) 8.354049361s ago: executing program 6 (id=1570): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) 8.353965471s ago: executing program 4 (id=1571): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000380), 0x28001, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000080)) 8.293114697s ago: executing program 7 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd20, 0xfffffffc, {0x4}}, 0x14}}, 0x0) 8.155958491s ago: executing program 4 (id=1573): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b52, &(0x7f0000000000)={0x2, {0xc, 0x6, 0x6, 0x101, 0x100}}) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x3e, r5}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r1}) 8.112269525s ago: executing program 6 (id=1574): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000000080041007278650014003300767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000050000000000000002000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) 8.109588345s ago: executing program 7 (id=1575): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0x40000018}) epoll_pwait(r4, &(0x7f0000000600)=[{}], 0x1, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x40086602, 0x110e22fff2) 6.157385574s ago: executing program 7 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x20, r3, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.79718783s ago: executing program 6 (id=1577): fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) 5.684085832s ago: executing program 5 (id=1578): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24000013}, 0x0) 5.575735353s ago: executing program 4 (id=1579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000f40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 5.529378058s ago: executing program 5 (id=1580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x800) 5.41207239s ago: executing program 6 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.386118693s ago: executing program 4 (id=1582): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x400, 0x40206, 0x11e}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 5.331129938s ago: executing program 5 (id=1583): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) 5.228055829s ago: executing program 6 (id=1584): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x6a0, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000a00)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000ac0)=0x1, 0x616e9570) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)={@cgroup, r6, 0x7, 0x3000}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r7, 0x26, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)) epoll_create1(0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) 5.157759226s ago: executing program 4 (id=1585): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="680200001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff000101013400fb8030003280290033800400168096dbc7fe81960e9c3a467e80a501638be4c1577d2952cc91e8bfd4a452b0539cad"], 0x268}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.163862018s ago: executing program 4 (id=1586): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000000080041007278650014003300767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000050000000000000002000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) 3.163609238s ago: executing program 5 (id=1587): r0 = socket(0x10, 0x803, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 3.161856329s ago: executing program 6 (id=1588): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b52, &(0x7f0000000000)={0x2, {0xc, 0x6, 0x6, 0x101, 0x100}}) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x3e, r5}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r1}) 1.47497559s ago: executing program 5 (id=1589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000540)="0f01c966b9800000c00f326635004000000f30f0083dba200066ed663e0f0f088a660f38828800200f08f2a7670f09d9ec", 0x31}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 210.913279ms ago: executing program 7 (id=1590): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$netlink(0x10, 0x3, 0x14) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) 0s ago: executing program 7 (id=1591): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r2, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x2a401, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000200)={'pcl818\x00', [0x8001, 0xfffffff4, 0x1, 0x9f, 0x1, 0xccb, 0x8, 0x8000ab, 0xd, 0x100, 0xffffffff, 0xbefa, 0x5, 0x1, 0x6, 0x0, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x9, 0x20001e58, 0x5, 0x2, 0x3c, 0xa, 0xc, 0x104, 0xd]}) kernel console output (not intermixed with test programs): directory [ 415.337386][ T42] tipc: Disabling bearer [ 415.346618][ T42] tipc: Left network mode [ 416.008137][ T8150] Cannot find add_set index 65532 as target [ 418.733397][ T8082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.895786][ T8082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.913727][ T8082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.940894][ T8082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.209459][ T42] bridge0: port 3(gretap0) entered disabled state [ 419.284279][ T42] gretap0 (unregistering): left allmulticast mode [ 419.301050][ T42] gretap0 (unregistering): left promiscuous mode [ 419.317548][ T42] bridge0: port 3(gretap0) entered disabled state [ 419.746520][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 419.762633][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.901369][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.940051][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.947367][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.956211][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 419.969858][ T23] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.986104][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 419.992894][ T23] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 420.009682][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.032371][ T23] usb 4-1: config 0 descriptor?? [ 420.064658][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.071965][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.133437][ T42] hsr_slave_0: left promiscuous mode [ 420.143886][ T42] hsr_slave_1: left promiscuous mode [ 420.163426][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.174944][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.192061][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.202983][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.216643][ T42] bridge_slave_1: left allmulticast mode [ 420.228765][ T42] bridge_slave_1: left promiscuous mode [ 420.242410][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.255781][ T42] bridge_slave_0: left allmulticast mode [ 420.271935][ T42] bridge_slave_0: left promiscuous mode [ 420.281402][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.412304][ T42] veth1_macvtap: left promiscuous mode [ 420.419656][ T42] veth0_macvtap: left promiscuous mode [ 420.425363][ T42] veth1_vlan: left promiscuous mode [ 420.439066][ T42] veth0_vlan: left promiscuous mode [ 420.487618][ T23] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 420.922042][ T23] usb 4-1: USB disconnect, device number 12 [ 424.776195][ T5862] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 424.997350][ T5862] usb 4-1: config 1 has an invalid interface number: 140 but max is 0 [ 425.029320][ T5862] usb 4-1: config 1 has no interface number 0 [ 425.037039][ T5862] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 425.066748][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.116654][ T5862] usb 4-1: Invalid descriptor size=18. [ 425.345978][ T42] team0 (unregistering): Port device team_slave_1 removed [ 426.421358][ T42] team0 (unregistering): Port device team_slave_0 removed [ 426.790573][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.074473][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.310774][ T8245] QAT: Device 251 not found [ 428.102260][ T967] usb 4-1: USB disconnect, device number 13 [ 428.357986][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 429.235242][ T28] audit: type=1326 audit(3915593759.900:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fb8f749 code=0x7ffc0000 [ 429.292803][ T28] audit: type=1326 audit(3915593759.900:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fb8f749 code=0x7ffc0000 [ 429.330204][ T28] audit: type=1326 audit(3915593759.900:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1c4fb8f749 code=0x7ffc0000 [ 429.353449][ T28] audit: type=1326 audit(3915593759.900:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.3.573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fb8f749 code=0x0 [ 429.484854][ T967] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 429.686197][ T967] usb 1-1: Using ep0 maxpacket: 16 [ 429.694985][ T967] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.712622][ T967] usb 1-1: config 0 has no interface number 0 [ 429.725404][ T967] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 429.735203][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.770184][ T967] usb 1-1: Product: syz [ 429.774574][ T967] usb 1-1: Manufacturer: syz [ 429.781684][ T967] usb 1-1: SerialNumber: syz [ 429.794905][ T967] usb 1-1: config 0 descriptor?? [ 429.820698][ T967] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 430.773363][ T967] gspca_spca1528: reg_w err -71 [ 430.826734][ T967] spca1528: probe of 1-1:0.1 failed with error -71 [ 430.875268][ T967] usb 1-1: USB disconnect, device number 10 [ 430.969777][ T42] bond0 (unregistering): Released all slaves [ 431.714323][ T8082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.125528][ T8082] veth0_vlan: entered promiscuous mode [ 432.150808][ T8082] veth1_vlan: entered promiscuous mode [ 432.194725][ T8082] veth0_macvtap: entered promiscuous mode [ 432.212469][ T8082] veth1_macvtap: entered promiscuous mode [ 432.240928][ T8082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.256709][ T8082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.271787][ T8082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.294246][ T8082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.305776][ T8082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.317970][ T8082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.330565][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.347012][ T8082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.371704][ T8082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.389851][ T8082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.401794][ T8082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.412487][ T8082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.423392][ T8082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.435848][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.455507][ T8082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.471517][ T8082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.481906][ T8082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.491882][ T8082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.645690][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.671236][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.723591][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.738365][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.900778][ T8313] netlink: 68 bytes leftover after parsing attributes in process `syz.3.585'. [ 433.533763][ T8329] binder: 8319:8329 ioctl 4018620d 0 returned -22 [ 433.546075][ T8329] binder: 8319:8329 ioctl c0306201 0 returned -14 [ 433.557922][ T8329] binder: 8319:8329 ioctl c0306201 200000000140 returned -11 [ 434.496367][ T5843] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 434.603678][ T8340] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 434.611165][ T8340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.622954][ T8340] vhci_hcd vhci_hcd.0: Device attached [ 435.012443][ T23] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 435.225310][ T8341] vhci_hcd: connection reset by peer [ 435.430372][ T11] vhci_hcd: stop threads [ 435.540272][ T11] vhci_hcd: release socket [ 435.632075][ T11] vhci_hcd: disconnect device [ 435.985942][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 436.118975][ T5843] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 436.369676][ T5762] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 436.745290][ T5843] usb 1-1: string descriptor 0 read error: -71 [ 436.753470][ T5843] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 436.771546][ T5843] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 436.787196][ T5843] usb 1-1: config 0 descriptor?? [ 436.802023][ T5843] usb 1-1: can't set config #0, error -71 [ 436.821177][ T5843] usb 1-1: USB disconnect, device number 11 [ 436.868153][ T5762] usb 4-1: Using ep0 maxpacket: 32 [ 436.884054][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.930931][ T28] audit: type=1326 audit(3915593767.620:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.0.590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa698b8f749 code=0x0 [ 436.936820][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.007920][ T5762] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 437.033462][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.063773][ T5762] usb 4-1: config 0 descriptor?? [ 437.572865][ T5762] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 439.377127][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.593'. [ 440.614033][ T6234] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 440.686214][ T23] vhci_hcd: vhci_device speed not set [ 441.106157][ T967] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 441.724668][ T8397] loop6: detected capacity change from 0 to 7 [ 442.691804][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.721396][ T8397] Dev loop6: unable to read RDB block 7 [ 442.727464][ T8397] loop6: unable to read partition table [ 442.733327][ T8397] loop6: partition table beyond EOD, truncated [ 442.739659][ T8397] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 442.941422][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 443.026276][ T967] usb 1-1: config 8 has an invalid interface number: 203 but max is 0 [ 443.056223][ T967] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 443.074334][ T967] usb 1-1: config 8 has no interface number 0 [ 443.085776][ T967] usb 1-1: config 8 interface 203 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 443.106674][ T967] usb 1-1: config 8 interface 203 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 443.129058][ T967] usb 1-1: config 8 interface 203 has no altsetting 0 [ 443.145254][ T967] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 443.191590][ T5864] usb 4-1: USB disconnect, device number 14 [ 443.208440][ T967] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 443.232827][ T8401] netlink: 252 bytes leftover after parsing attributes in process `syz.4.599'. [ 443.250954][ T967] usb 1-1: Product: syz [ 443.284365][ T967] usb 1-1: Manufacturer: syz [ 443.307747][ T967] usb 1-1: SerialNumber: syz [ 443.729646][ T967] port100 1-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 443.744543][ T967] usb 1-1: USB disconnect, device number 12 [ 452.396551][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 452.676154][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 452.732798][ T5843] usb 6-1: unable to get BOS descriptor or descriptor too short [ 452.758161][ T5843] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 452.791874][ T5843] usb 6-1: config 0 has no interface number 0 [ 452.816278][ T5843] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 453.026470][ T5843] usb 6-1: config 0 interface 88 has no altsetting 0 [ 453.060226][ T5843] usb 6-1: string descriptor 0 read error: -22 [ 453.131589][ T8529] binder: 8522:8529 ioctl 4018620d 0 returned -22 [ 453.145620][ T8529] binder: 8522:8529 ioctl c0306201 0 returned -14 [ 453.160372][ T8529] binder: 8522:8529 ioctl c0306201 200000000140 returned -11 [ 453.542723][ T5843] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 453.801137][ T28] audit: type=1326 audit(3915593784.500:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.3.626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c4fb8f749 code=0x0 [ 453.856392][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 453.910384][ T5843] usb 6-1: config 0 descriptor?? [ 453.978170][ T5843] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input21 [ 454.613401][ T5843] usb 6-1: USB disconnect, device number 2 [ 454.893911][ T5930] udevd[5930]: Error opening device "/dev/input/event4": No such device [ 454.908586][ T5930] udevd[5930]: Unable to EVIOCGABS device "/dev/input/event4" [ 454.956701][ T5930] udevd[5930]: Unable to EVIOCGABS device "/dev/input/event4" [ 455.248257][ T8547] nbd: socks must be embedded in a SOCK_ITEM attr [ 455.301997][ T8547] block nbd0: shutting down sockets [ 457.546363][ T8577] hfs: can't find a HFS filesystem on dev nullb0 [ 458.987153][ T8596] loop5: detected capacity change from 0 to 64 [ 460.306695][ T28] audit: type=1800 audit(3915593791.010:119): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.643" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 461.224852][ T8618] veth0_to_team: entered promiscuous mode [ 466.219992][ T8656] random: crng reseeded on system resumption [ 468.016629][ T5843] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 469.079143][ T5843] usb 1-1: config index 0 descriptor too short (expected 215, got 45) [ 469.118720][ T5843] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 469.160058][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.197051][ T5843] usb 1-1: Product: syz [ 469.201291][ T5843] usb 1-1: Manufacturer: syz [ 469.370508][ T5843] usb 1-1: SerialNumber: syz [ 471.386255][ T5843] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 471.483972][ T5843] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 471.515109][ T5843] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 471.556163][ T5843] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 471.592103][ T5843] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 471.684281][ T5843] lan78xx: probe of 1-1:1.0 failed with error -71 [ 471.751822][ T5843] usb 1-1: USB disconnect, device number 13 [ 473.276163][ T6234] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 473.511138][ T6234] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 473.623130][ T6234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.684430][ T6234] usb 6-1: Product: syz [ 473.702116][ T6234] usb 6-1: Manufacturer: syz [ 473.710818][ T6234] usb 6-1: SerialNumber: syz [ 473.750341][ T6234] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 473.871954][ T5864] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 474.625268][ T5843] usb 6-1: USB disconnect, device number 3 [ 474.996532][ T5864] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 475.047270][ T5864] ath9k_htc: Failed to initialize the device [ 475.077221][ T5843] usb 6-1: ath9k_htc: USB layer deinitialized [ 475.488509][ T8757] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 475.493161][ T5843] IPVS: starting estimator thread 0... [ 475.713489][ T8759] IPVS: using max 31 ests per chain, 74400 per kthread [ 476.614303][ T8774] netlink: 144 bytes leftover after parsing attributes in process `syz.5.675'. [ 477.647726][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 478.589427][ T8796] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 481.912686][ T8813] veth1_macvtap: left promiscuous mode [ 481.918412][ T8813] macsec0: entered promiscuous mode [ 482.740082][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 488.540098][ T8868] lo speed is unknown, defaulting to 1000 [ 488.578763][ T8874] loop4: detected capacity change from 0 to 64 [ 488.680081][ T8876] warning: `syz.0.699' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 489.237353][ T28] audit: type=1800 audit(3915593819.930:120): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.698" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 500.486309][ T967] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 500.579140][ T8948] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 500.699854][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.756231][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.785546][ T967] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 500.800155][ T967] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 500.816050][ T967] usb 4-1: Manufacturer: syz [ 500.837022][ T967] usb 4-1: config 0 descriptor?? [ 500.977878][ T8959] lo speed is unknown, defaulting to 1000 [ 501.877447][ T967] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 501.898682][ T967] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 501.947123][ T967] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 502.101160][ T967] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 502.109573][ T967] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 502.122442][ T967] usb 4-1: USB disconnect, device number 15 [ 502.233197][ T8982] netlink: 300 bytes leftover after parsing attributes in process `syz.4.715'. [ 502.389587][ T8983] overlay: filesystem on ./file0 not supported as upperdir [ 504.044569][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.079909][ T8998] loop4: detected capacity change from 0 to 64 [ 504.758184][ T9002] binder: BINDER_SET_CONTEXT_MGR already set [ 504.766672][ T9002] binder: 8999:9002 ioctl 4018620d 200000000040 returned -16 [ 504.804680][ T9002] binder: 8999:9002 ioctl c0306201 200000001440 returned -11 [ 505.063773][ T9001] sch_fq: defrate 4294967295 ignored. [ 505.173596][ T28] audit: type=1800 audit(3915593835.870:121): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.719" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 505.761885][ T9012] kvm: kvm [9011]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4911 [ 505.777077][ T9012] kvm: kvm [9011]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 505.792518][ T9012] kvm: kvm [9011]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 505.804756][ T9012] kvm: kvm [9011]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 507.156087][ T9023] picdev_read: 77 callbacks suppressed [ 507.156130][ T9023] kvm: pic: non byte read [ 507.213898][ T9023] kvm: pic: non byte read [ 507.219134][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.231690][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.240215][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.251279][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.260586][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 507.268396][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.278920][ T9023] kvm: pic: non byte read [ 507.283525][ T9023] kvm: pic: non byte read [ 507.288639][ T9023] kvm: pic: non byte read [ 507.293120][ T9023] kvm: pic: non byte read [ 507.298259][ T9023] kvm: pic: non byte read [ 507.327430][ T9023] kvm: pic: non byte read [ 507.339068][ T9023] kvm: pic: non byte read [ 507.344125][ T9023] kvm: pic: non byte read [ 507.454001][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.570023][ T9024] lo speed is unknown, defaulting to 1000 [ 507.662218][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.770292][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.929034][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.436150][ T5087] Bluetooth: hci0: command tx timeout [ 509.441890][ T5843] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 509.537837][ T9024] chnl_net:caif_netlink_parms(): no params data found [ 509.720089][ T5843] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 509.861862][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.882179][ T5843] usb 5-1: Product: syz [ 509.892331][ T5843] usb 5-1: Manufacturer: syz [ 509.932101][ T5843] usb 5-1: SerialNumber: syz [ 511.237927][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 511.325048][ T9057] netlink: 300 bytes leftover after parsing attributes in process `syz.3.732'. [ 511.464907][ T9057] overlayfs: failed to get index nlink (index/00fb210001d7bac3b7740c46d4beac98103c16a3118349c11a8004000000000000, err=0) [ 511.478923][ T9057] overlayfs: orphan index entry (index/00fb210001d7bac3b7740c46d4beac98103c16a3118349c11a8004000000000000, ftype=2000, nlink=1) [ 511.507361][ T5087] Bluetooth: hci0: command tx timeout [ 514.306391][ T5087] Bluetooth: hci0: command tx timeout [ 514.436466][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 514.459552][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 514.485323][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 514.577538][ T5843] lan78xx: probe of 5-1:1.0 failed with error -71 [ 514.676655][ T5843] usb 5-1: USB disconnect, device number 5 [ 514.979370][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.002807][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.043568][ T9024] bridge_slave_0: entered allmulticast mode [ 515.059105][ T9024] bridge_slave_0: entered promiscuous mode [ 515.188081][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.261307][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.313573][ T9024] bridge_slave_1: entered allmulticast mode [ 515.344046][ T9024] bridge_slave_1: entered promiscuous mode [ 515.606123][ T9024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.723390][ T9024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.358280][ T5087] Bluetooth: hci0: command tx timeout [ 516.961776][ T9095] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 517.998874][ T9024] team0: Port device team_slave_0 added [ 518.143233][ T9024] team0: Port device team_slave_1 added [ 518.473242][ T59] bond0: (slave wlan1): Releasing backup interface [ 518.864614][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.906148][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.125659][ T9024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.268475][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.302087][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.396250][ T9024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.092983][ T9118] netlink: 300 bytes leftover after parsing attributes in process `syz.5.740'. [ 520.225106][ T9120] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 520.884373][ T59] hsr_slave_0: left promiscuous mode [ 521.198182][ T9129] fuse: Bad value for 'rootmode' [ 522.006196][ T59] hsr_slave_1: left promiscuous mode [ 522.094565][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.102870][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.112499][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.133457][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.164837][ T59] bridge_slave_1: left allmulticast mode [ 522.174524][ T9134] block nbd4: NBD_DISCONNECT [ 522.176782][ T5817] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 522.185765][ T59] bridge_slave_1: left promiscuous mode [ 522.194545][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.251154][ T59] bridge_slave_0: left allmulticast mode [ 522.283172][ T59] bridge_slave_0: left promiscuous mode [ 522.306878][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.976331][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 523.984224][ T5817] usb 6-1: device descriptor read/all, error -71 [ 523.994030][ T59] veth0_macvtap: left promiscuous mode [ 524.016258][ T59] veth1_vlan: left promiscuous mode [ 524.021704][ T59] veth0_vlan: left promiscuous mode [ 524.259007][ T9148] fuse: Unknown parameter 'user_i00000000000000000000' [ 528.672532][ T59] team0 (unregistering): Port device team_slave_1 removed [ 528.738903][ T59] team0 (unregistering): Port device team_slave_0 removed [ 528.802312][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.865694][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.581767][ T59] bond0 (unregistering): Released all slaves [ 529.715407][ T9024] hsr_slave_0: entered promiscuous mode [ 529.722431][ T9024] hsr_slave_1: entered promiscuous mode [ 529.730872][ T9024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.741752][ T9024] Cannot create hsr debugfs directory [ 530.534385][ T9024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 530.578952][ T9024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.609336][ T9024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.633962][ T9024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 530.882033][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.944462][ T9024] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.972145][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.979553][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.989175][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.996397][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.350458][ T9024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.824501][ T9024] veth0_vlan: entered promiscuous mode [ 531.847412][ T9024] veth1_vlan: entered promiscuous mode [ 531.914902][ T9024] veth0_macvtap: entered promiscuous mode [ 531.932121][ T9024] veth1_macvtap: entered promiscuous mode [ 531.971782][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.983038][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.993983][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.005009][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.015063][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.025860][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.038131][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.059128][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.070171][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.080789][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.091337][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.101408][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.111937][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.125596][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.144331][ T9024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.154807][ T9024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.163927][ T9024] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.173349][ T9024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.309449][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.321545][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.365837][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.375918][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.959563][ T28] audit: type=1326 audit(3915593864.670:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.6.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32538f749 code=0x7fc00000 [ 534.496139][ T5817] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 534.530604][ T9260] netlink: 300 bytes leftover after parsing attributes in process `syz.6.753'. [ 534.657368][ T9261] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 535.097490][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 535.113015][ T5817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.223562][ T5817] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 535.246153][ T5817] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.259728][ T5817] usb 6-1: config 0 interface 0 has no altsetting 0 [ 535.285723][ T5817] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 535.315712][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.349377][ T5817] usb 6-1: Product: syz [ 535.353590][ T5817] usb 6-1: Manufacturer: syz [ 535.383799][ T5817] usb 6-1: SerialNumber: syz [ 535.401040][ T5817] usb 6-1: config 0 descriptor?? [ 535.701675][ T787] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 535.914561][ T5817] usb 6-1: USB disconnect, device number 6 [ 535.946722][ T787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.986083][ T787] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 536.020728][ T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.038455][ T787] usb 7-1: config 0 descriptor?? [ 536.087167][ T787] pwc: Askey VC010 type 2 USB webcam detected. [ 536.304731][ T9258] syz.3.756 (9258): drop_caches: 2 [ 536.649493][ T787] pwc: recv_control_msg error -32 req 02 val 2b00 [ 536.733537][ T787] pwc: recv_control_msg error -32 req 02 val 2700 [ 536.766929][ T787] pwc: recv_control_msg error -32 req 02 val 2c00 [ 536.784266][ T787] pwc: recv_control_msg error -32 req 04 val 1000 [ 536.814866][ T787] pwc: recv_control_msg error -32 req 04 val 1300 [ 537.242405][ T787] pwc: recv_control_msg error -32 req 04 val 1400 [ 538.030976][ T787] pwc: recv_control_msg error -32 req 02 val 2000 [ 538.084233][ T787] pwc: recv_control_msg error -32 req 02 val 2100 [ 538.312916][ T787] pwc: recv_control_msg error -71 req 02 val 2500 [ 538.336592][ T787] pwc: recv_control_msg error -71 req 02 val 2400 [ 538.439561][ T787] pwc: recv_control_msg error -71 req 02 val 2600 [ 538.557969][ T787] pwc: recv_control_msg error -71 req 02 val 2900 [ 538.821538][ T787] pwc: recv_control_msg error -71 req 02 val 2800 [ 539.056432][ T787] pwc: recv_control_msg error -71 req 04 val 1100 [ 539.116652][ T787] pwc: recv_control_msg error -71 req 04 val 1200 [ 539.136347][ T787] pwc: Registered as video103. [ 539.181961][ T787] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 539.374355][ T787] usb 7-1: USB disconnect, device number 2 [ 539.435576][ T9311] loop3: detected capacity change from 0 to 64 [ 539.801974][ T28] audit: type=1800 audit(3915593870.500:123): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.768" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 541.631037][ T9327] loop8: detected capacity change from 0 to 7 [ 541.663069][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.672857][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.685059][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.694400][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.726040][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.735291][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.746259][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.755530][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.770381][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.779702][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.788001][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.797626][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.807511][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.816799][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.824730][ T9327] ldm_validate_partition_table(): Disk read failed. [ 541.847663][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.857070][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.865274][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.874532][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.886370][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 541.895609][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 541.911402][ T9327] Dev loop8: unable to read RDB block 0 [ 541.937108][ T9327] loop8: unable to read partition table [ 541.943113][ T9327] loop8: partition table beyond EOD, truncated [ 541.976094][ T9327] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X ) failed (rc=-5) [ 542.026209][ T787] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 542.300818][ T787] usb 5-1: config 0 has no interfaces? [ 542.366647][ T787] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 542.391419][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.406861][ T787] usb 5-1: SerialNumber: syz [ 543.237020][ T787] usb 5-1: config 0 descriptor?? [ 543.461791][ T9327] ldm_validate_partition_table(): Disk read failed. [ 543.637757][ T9327] Dev loop8: unable to read RDB block 0 [ 543.664420][ T9327] loop8: unable to read partition table [ 544.158400][ T9327] loop8: partition table beyond EOD, truncated [ 544.454629][ T5864] usb 5-1: USB disconnect, device number 6 [ 545.670046][ T9376] loop4: detected capacity change from 0 to 64 [ 545.979898][ T28] audit: type=1800 audit(3915593876.660:124): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.779" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 548.783520][ T9424] syzkaller0: entered promiscuous mode [ 548.831223][ T9424] syzkaller0: entered allmulticast mode [ 549.090322][ T5864] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 549.225895][ T9435] loop4: detected capacity change from 0 to 64 [ 549.426186][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 549.456541][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 2 [ 549.501677][ T28] audit: type=1800 audit(3915593880.170:125): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.791" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 549.616223][ T5864] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 549.635475][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 549.665448][ T5864] usb 4-1: Product: syz [ 549.692131][ T5864] usb 4-1: Manufacturer: syz [ 549.701418][ T5864] usb 4-1: SerialNumber: syz [ 549.720774][ T5864] usb 4-1: config 0 descriptor?? [ 549.730769][ T9428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 550.206468][ T5864] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 550.471716][ T5864] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.482791][ T5864] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.496587][ T5864] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.506751][ T5864] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 550.551025][ T5864] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.564834][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.573235][ T5864] usb 6-1: Product: syz [ 550.577862][ T5864] usb 6-1: Manufacturer: syz [ 550.589546][ T5864] cdc_wdm 6-1:1.0: skipping garbage [ 550.594832][ T5864] cdc_wdm 6-1:1.0: skipping garbage [ 550.602380][ T5864] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 550.820654][ T5862] usb 6-1: USB disconnect, device number 7 [ 551.840028][ T5862] usb 4-1: USB disconnect, device number 16 [ 551.952364][ T9467] syz.3.799[9467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.952517][ T9467] syz.3.799[9467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.066449][ T967] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 552.957676][ T967] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 553.008380][ T967] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 553.288799][ T967] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 553.298481][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.320141][ T9461] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 553.340397][ T967] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 553.420288][ T9483] loop5: detected capacity change from 0 to 64 [ 553.703055][ T967] usb 5-1: USB disconnect, device number 7 [ 553.748633][ T28] audit: type=1800 audit(3915593884.450:126): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.802" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 555.749984][ T9535] loop5: detected capacity change from 0 to 64 [ 556.129330][ T28] audit: type=1800 audit(3915593886.830:127): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.813" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 559.348248][ T9564] syz.4.819 (9564) used greatest stack depth: 16008 bytes left [ 560.563677][ T9578] loop6: detected capacity change from 0 to 64 [ 560.925242][ T28] audit: type=1800 audit(3915593891.630:128): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.824" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 561.046260][ T967] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 561.316839][ T967] usb 6-1: Using ep0 maxpacket: 16 [ 561.379794][ T967] usb 6-1: config 0 interface 0 has no altsetting 0 [ 561.497021][ T967] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 561.522519][ T967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.558925][ T967] usb 6-1: config 0 descriptor?? [ 563.407069][ T967] hid (null): invalid report_size 25705 [ 563.475130][ T967] usb 6-1: USB disconnect, device number 8 [ 565.138797][ T9630] loop4: detected capacity change from 0 to 64 [ 565.493437][ T28] audit: type=1800 audit(3915593896.190:129): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.834" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 565.503821][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.210042][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 567.226756][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 567.263698][ T9653] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.273687][ T9653] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.282677][ T9653] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.291426][ T9653] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.367158][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 567.399579][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 567.466125][ T5817] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 567.662033][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.279578][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.289687][ T5817] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 569.304817][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.535670][ T5817] usb 7-1: config 0 descriptor?? [ 570.050698][ T5817] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 570.069557][ T5817] cp2112 0003:10C4:EA90.000A: parse failed [ 570.075508][ T5817] cp2112: probe of 0003:10C4:EA90.000A failed with error -22 [ 570.252567][ T5817] usb 7-1: USB disconnect, device number 3 [ 575.055074][ T9678] Bluetooth: hci1: command 0x0406 tx timeout [ 575.748743][ T9707] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 575.765986][ T9707] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 575.776010][ T9707] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 575.785997][ T9707] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 575.800355][ T9707] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 577.643501][ T9718] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 577.652464][ T9718] netlink: 'syz.6.857': attribute type 2 has an invalid length. [ 577.660571][ T9718] netlink: 'syz.6.857': attribute type 2 has an invalid length. [ 577.675302][ T9718] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 577.689275][ T9718] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 578.163642][ T9727] loop3: detected capacity change from 0 to 64 [ 578.898785][ T28] audit: type=1800 audit(3915593909.410:130): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.845" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 582.817860][ T9766] loop5: detected capacity change from 0 to 64 [ 583.408505][ T28] audit: type=1800 audit(3915593914.050:131): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.861" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 585.301766][ T5087] Bluetooth: hci0: link tx timeout [ 585.311826][ T5087] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 585.356205][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 585.616124][ T9781] netlink: 'syz.5.864': attribute type 1 has an invalid length. [ 585.624865][ T9781] netlink: 'syz.5.864': attribute type 2 has an invalid length. [ 585.647242][ T9781] netlink: 'syz.5.864': attribute type 2 has an invalid length. [ 585.660540][ T9781] netlink: 'syz.5.864': attribute type 1 has an invalid length. [ 585.670232][ T9781] netlink: 'syz.5.864': attribute type 1 has an invalid length. [ 585.736944][ T5862] usb 7-1: config 0 has an invalid interface number: 166 but max is 0 [ 585.916929][ T5862] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 586.218805][ T5862] usb 7-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 586.283853][ T5862] usb 7-1: config 0 has no interface number 0 [ 586.321897][ T5862] usb 7-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.449517][ T5862] usb 7-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 586.477174][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.495181][ T5862] usb 7-1: config 0 descriptor?? [ 586.506224][ T5862] usb 7-1: can't set config #0, error -71 [ 586.517957][ T5862] usb 7-1: USB disconnect, device number 4 [ 587.376072][ T5864] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 587.399100][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 587.477662][ T9809] loop5: detected capacity change from 0 to 64 [ 588.416071][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 588.434397][ T5864] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.495384][ T5864] usb 5-1: config 0 has no interface number 0 [ 588.680131][ T5864] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 588.692143][ T5864] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 588.701884][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.727186][ T5864] usb 5-1: config 0 descriptor?? [ 589.148079][ T28] audit: type=1800 audit(3915593919.510:132): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.872" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 589.170645][ T5864] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 589.278631][ T5864] usb 5-1: USB disconnect, device number 8 [ 591.636436][ T9845] lo speed is unknown, defaulting to 1000 [ 591.646424][ T9845] lo speed is unknown, defaulting to 1000 [ 591.667745][ T9845] lo speed is unknown, defaulting to 1000 [ 592.119201][ T9845] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 592.794679][ T9845] lo speed is unknown, defaulting to 1000 [ 592.801951][ T9845] lo speed is unknown, defaulting to 1000 [ 592.808896][ T9845] lo speed is unknown, defaulting to 1000 [ 592.815667][ T9845] lo speed is unknown, defaulting to 1000 [ 593.295192][ T9854] syzkaller0: entered promiscuous mode [ 593.336361][ T9854] syzkaller0: entered allmulticast mode [ 600.629387][ T9927] loop6: detected capacity change from 0 to 64 [ 602.951305][ T9954] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 603.502993][ T9954] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 603.837651][ T9959] raw_sendmsg: syz.4.904 forgot to set AF_INET. Fix it! [ 603.996255][ T967] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 604.216115][ T967] usb 7-1: Using ep0 maxpacket: 8 [ 604.257909][ T967] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 604.287159][ T967] usb 7-1: config 179 has no interface number 0 [ 604.304938][ T967] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 604.344409][ T967] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 604.386143][ T967] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 604.431322][ T967] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 604.500522][ T967] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 604.543972][ T967] usb 7-1: config 179 interface 65 has no altsetting 0 [ 604.554612][ T967] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 604.610928][ T967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.645042][ T967] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input23 [ 604.751332][ T9974] loop3: detected capacity change from 0 to 64 [ 604.766330][ T5127] input input23: unable to receive magic message: -110 [ 604.805421][ T5127] input input23: unable to receive magic message: -32 [ 604.877240][ T5127] input input23: unable to receive magic message: -32 [ 605.409692][ T9977] fscrypt: Error allocating hmac(sha512): -2 [ 605.947696][ T5127] input input23: unable to receive magic message: -32 [ 606.076960][ T967] usb 7-1: USB disconnect, device number 5 [ 606.077012][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 606.191904][ T967] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 606.280071][ T9269] udevd[9269]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 606.665379][ T9996] pimreg: entered allmulticast mode [ 608.116345][T10010] loop3: detected capacity change from 0 to 64 [ 609.419308][ T5817] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 609.669692][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 609.720392][ T5817] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 609.736724][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 609.748027][ T5817] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 609.758081][ T5817] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 609.776136][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.805580][ T5817] usb 5-1: config 0 descriptor?? [ 610.031181][ T5817] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 610.043089][T10015] usb usb8: usbfs: process 10015 (syz.4.919) did not claim interface 0 before use [ 610.986051][ T5817] hdpvr 5-1:0.0: device init failed [ 610.991407][ T5817] hdpvr: probe of 5-1:0.0 failed with error -12 [ 611.035252][T10016] siw: device registration error -23 [ 611.132667][ T5817] usb 5-1: USB disconnect, device number 9 [ 613.399054][T10050] loop6: detected capacity change from 0 to 64 [ 613.801554][ T28] audit: type=1800 audit(3915593944.500:133): pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.930" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 617.191565][T10079] siw: device registration error -23 [ 618.085863][ T9678] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 618.914529][T10092] loop4: detected capacity change from 0 to 64 [ 619.355145][ T28] audit: type=1800 audit(3915593950.050:134): pid=10100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.942" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 620.586784][T10104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.946'. [ 622.016491][T10113] lo speed is unknown, defaulting to 1000 [ 622.023709][T10113] lo speed is unknown, defaulting to 1000 [ 623.965488][T10136] loop3: detected capacity change from 0 to 64 [ 624.398339][ T28] audit: type=1800 audit(3915593955.090:135): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.953" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 625.371231][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 626.766178][ T6234] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 626.922630][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.928262][ T5817] Process accounting resumed [ 627.002253][ T6234] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 627.087234][ T6234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.113750][ T6234] usb 4-1: config 0 descriptor?? [ 628.124318][T10170] loop5: detected capacity change from 0 to 64 [ 628.151735][ T6234] usb 4-1: Cannot set autoneg [ 628.184408][ T6234] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61 [ 628.362478][ T6234] usb 4-1: USB disconnect, device number 17 [ 628.522115][ T28] audit: type=1800 audit(3915593959.210:136): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.964" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 633.134687][T10197] loop4: detected capacity change from 0 to 64 [ 633.726502][ T28] audit: type=1800 audit(3915593964.210:137): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.973" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 634.183664][ T5864] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 634.366599][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 634.381243][ T5864] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 634.406180][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.414314][ T5864] usb 6-1: Product: syz [ 634.426397][ T5864] usb 6-1: Manufacturer: syz [ 634.431123][ T5864] usb 6-1: SerialNumber: syz [ 634.440257][ T5864] usb 6-1: config 0 descriptor?? [ 635.577795][ T5864] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 635.699182][T10216] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 637.826600][ T5864] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 638.005558][ T5864] usb 6-1: USB disconnect, device number 9 [ 639.397153][T10240] loop4: detected capacity change from 0 to 64 [ 639.756806][ T28] audit: type=1800 audit(3915593970.450:138): pid=10244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.983" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 645.968202][ T5817] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 646.597050][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.080904][T10282] fscrypt: Error allocating hmac(sha512): -2 [ 647.266081][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.296042][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 647.339153][ T5817] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 647.395526][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.457607][ T5817] usb 4-1: config 0 descriptor?? [ 647.468910][ T5817] usb 4-1: can't set config #0, error -71 [ 647.532780][ T5817] usb 4-1: USB disconnect, device number 18 [ 652.749028][T10340] sp0: Synchronizing with TNC [ 654.707126][T10352] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 655.647159][T10357] ref_ctr increment failed for inode: 0x5f7 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888024b71300 [ 661.428750][T10418] UBIFS error (pid: 10418): cannot open "(null)", error -22 [ 664.649503][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1043'. [ 667.476254][ T5862] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 667.991852][ T5862] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.031939][ T5862] usb 6-1: config 0 interface 0 has no altsetting 0 [ 668.042544][ T5862] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 668.052225][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.068252][ T5862] usb 6-1: config 0 descriptor?? [ 668.494524][ T5862] playstation 0003:054C:0BA0.000B: unknown main item tag 0x0 [ 668.535227][ T5862] playstation 0003:054C:0BA0.000B: unknown main item tag 0x0 [ 668.560264][ T5862] playstation 0003:054C:0BA0.000B: unknown main item tag 0x0 [ 668.581105][ T5862] playstation 0003:054C:0BA0.000B: unknown main item tag 0x0 [ 668.601975][ T5862] playstation 0003:054C:0BA0.000B: unknown main item tag 0x0 [ 669.237353][ T5862] playstation 0003:054C:0BA0.000B: unknown main item tag 0x0 [ 669.481202][ T5862] playstation 0003:054C:0BA0.000B: unknown main item tag 0x0 [ 669.526621][ T5862] playstation 0003:054C:0BA0.000B: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0 [ 669.807051][ T5862] playstation 0003:054C:0BA0.000B: Failed to retrieve feature with reportID 18: -71 [ 670.592792][ T5864] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 670.596598][ T5862] playstation 0003:054C:0BA0.000B: Failed to retrieve DualShock4 pairing info: -71 [ 670.630952][ T5862] playstation 0003:054C:0BA0.000B: Failed to get MAC address from DualShock4 [ 670.673857][ T5862] playstation 0003:054C:0BA0.000B: Failed to create dualshock4. [ 670.728883][ T5862] playstation: probe of 0003:054C:0BA0.000B failed with error -71 [ 670.755719][ T5862] usb 6-1: USB disconnect, device number 10 [ 670.877354][ T5864] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 670.936506][ T5864] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 670.990183][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 671.006846][ T5864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 671.018608][ T5864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 671.073247][ T5864] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 671.085659][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 671.104057][ T5864] usb 4-1: Product: syz [ 671.110887][ T5864] usb 4-1: Manufacturer: syz [ 671.278522][ T5864] cdc_wdm 4-1:1.0: skipping garbage [ 671.284806][ T5864] cdc_wdm 4-1:1.0: skipping garbage [ 671.330785][ T5864] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 671.337858][ T5864] cdc_wdm 4-1:1.0: Unknown control protocol [ 673.645288][ T5817] usb 4-1: USB disconnect, device number 19 [ 674.798640][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 674.805316][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 674.815021][T10525] vhci_hcd vhci_hcd.0: Device attached [ 674.844116][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 674.850794][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 674.875624][T10525] vhci_hcd vhci_hcd.0: Device attached [ 674.952046][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 674.958735][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 675.058570][T10533] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16) [ 675.065346][T10533] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 675.073612][T10525] vhci_hcd vhci_hcd.0: Device attached [ 675.104100][ T23] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 675.122609][T10534] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 675.129255][T10534] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 675.156237][T10533] vhci_hcd vhci_hcd.0: Device attached [ 675.217808][T10534] vhci_hcd vhci_hcd.0: Device attached [ 675.271284][T10533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 675.326535][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(15) [ 675.333242][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 675.377258][T10534] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 675.387499][T10533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 675.406895][T10525] vhci_hcd vhci_hcd.0: Device attached [ 675.497310][T10533] vhci_hcd vhci_hcd.0: port 0 already used [ 675.582350][T10535] vhci_hcd: connection closed [ 675.582593][T10537] vhci_hcd: connection closed [ 675.591021][T10539] vhci_hcd: connection closed [ 675.595866][T10531] vhci_hcd: connection closed [ 675.601741][ T3490] vhci_hcd: stop threads [ 675.613072][T10528] vhci_hcd: connection closed [ 675.616763][T10526] vhci_hcd: connection reset by peer [ 675.658893][ T3490] vhci_hcd: release socket [ 675.664118][ T3490] vhci_hcd: disconnect device [ 675.685770][ T3490] vhci_hcd: stop threads [ 675.699011][ T3490] vhci_hcd: release socket [ 675.713291][ T3490] vhci_hcd: disconnect device [ 675.751140][ T3490] vhci_hcd: stop threads [ 675.755640][ T3490] vhci_hcd: release socket [ 675.768902][ T3490] vhci_hcd: disconnect device [ 675.787270][ T3490] vhci_hcd: stop threads [ 675.803104][ T3490] vhci_hcd: release socket [ 675.818843][ T3490] vhci_hcd: disconnect device [ 675.835138][ T3490] vhci_hcd: stop threads [ 675.843800][ T3490] vhci_hcd: release socket [ 675.854146][ T3490] vhci_hcd: disconnect device [ 675.890189][ T3490] vhci_hcd: stop threads [ 675.894753][ T3490] vhci_hcd: release socket [ 675.900594][ T3490] vhci_hcd: disconnect device [ 676.640587][ T5817] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 676.876953][ T5817] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 676.909050][ T5817] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 676.933344][ T5817] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 676.946044][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.976855][T10556] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 677.005608][ T5817] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 678.187990][ T5862] usb 7-1: USB disconnect, device number 6 [ 678.516159][ T967] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 678.736597][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 678.759051][ T967] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 678.783139][ T967] usb 4-1: config 0 has no interface number 0 [ 678.821725][ T967] usb 4-1: config 0 interface 184 has no altsetting 0 [ 678.849614][ T967] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 678.876383][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.884489][ T967] usb 4-1: Product: syz [ 678.906734][ T967] usb 4-1: Manufacturer: syz [ 678.911554][ T967] usb 4-1: SerialNumber: syz [ 678.932538][ T967] usb 4-1: config 0 descriptor?? [ 678.964268][ T967] smsc75xx v1.0.0 [ 678.970924][ T5899] IPVS: starting estimator thread 0... [ 679.016803][ T5862] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 679.066930][T10578] IPVS: using max 20 ests per chain, 48000 per kthread [ 679.243384][ T5862] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 679.253699][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.282400][ T5862] usb 5-1: config 0 descriptor?? [ 679.309276][ T5862] pwc: Creative Labs Webcam Pro Ex detected. [ 679.563138][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'. [ 679.699909][T10584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.719634][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1078'. [ 679.745568][T10586] bond1: entered promiscuous mode [ 679.754671][T10586] bond1: entered allmulticast mode [ 679.871237][T10584] dummy0: entered promiscuous mode [ 679.889894][T10584] dummy0: entered allmulticast mode [ 679.914513][T10584] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 679.923051][ T5862] pwc: recv_control_msg error -71 req 02 val 2b00 [ 679.936633][ T5862] pwc: recv_control_msg error -71 req 02 val 2700 [ 679.950368][ T5862] pwc: recv_control_msg error -71 req 04 val 1600 [ 679.972423][ T5862] pwc: recv_control_msg error -71 req 02 val 2c00 [ 679.991210][ T967] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 679.992019][ T5862] pwc: recv_control_msg error -71 req 04 val 1000 [ 680.023312][ T5862] pwc: recv_control_msg error -71 req 04 val 1300 [ 680.040196][ T5862] pwc: recv_control_msg error -71 req 04 val 1400 [ 680.058921][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 680.073102][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 680.083168][ T5862] pwc: recv_control_msg error -71 req 06 val 0600 [ 680.101136][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 680.113693][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 680.167635][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 680.192872][ T967] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 680.198096][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 680.231453][ T967] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 680.251761][ T967] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 680.255292][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 680.273979][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 680.286669][ T23] vhci_hcd: vhci_device speed not set [ 680.299356][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 680.302565][ T967] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 680.321222][ T967] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 681.985164][ T967] usb 4-1: USB disconnect, device number 20 [ 682.096666][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 682.169649][ T5862] pwc: Registered as video103. [ 682.233566][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 682.339974][ T5862] usb 5-1: USB disconnect, device number 10 [ 682.477365][ T9269] udevd[9269]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 682.516705][ T9269] udevd[9269]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 683.507502][ T967] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 684.267156][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 684.442790][ T5864] usb usb44-port1: attempt power cycle [ 684.536752][ T967] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 684.544923][ T967] usb 4-1: config 0 has no interface number 0 [ 684.601032][ T967] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 684.620720][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.656176][ T967] usb 4-1: Product: syz [ 684.666512][ T967] usb 4-1: Manufacturer: syz [ 684.671189][ T967] usb 4-1: SerialNumber: syz [ 684.694386][ T967] usb 4-1: config 0 descriptor?? [ 684.713839][ T967] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 685.027725][T10613] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.238503][ T5864] usb usb44-port1: unable to enumerate USB device [ 685.451370][ T967] usb 4-1: qt2_attach - failed to power on unit: -71 [ 685.501803][ T967] quatech2: probe of 4-1:0.51 failed with error -71 [ 685.505636][T10621] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.525609][T10621] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.546739][T10621] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.570986][T10621] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.596846][T10621] geneve2: entered promiscuous mode [ 685.612568][T10621] geneve2: entered allmulticast mode [ 685.637407][ T967] usb 4-1: USB disconnect, device number 21 [ 685.697514][ T9678] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 688.508130][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.716561][ T5862] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 690.250036][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.416621][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.436844][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 690.455103][ T5862] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.470146][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.568667][ T5862] usb 5-1: config 0 descriptor?? [ 691.171750][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.202155][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.214077][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.223451][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.271029][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.303158][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.322378][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.343750][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.371324][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.389738][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.507469][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.567788][ T5862] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 691.743067][ T5862] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 692.094431][ T5862] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 692.206649][ T5862] usb 5-1: USB disconnect, device number 11 [ 692.374923][T10675] fido_id[10675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 695.447344][T10711] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1119'. [ 707.781963][T10773] tipc: Started in network mode [ 707.804999][T10773] tipc: Node identity 36b147126254, cluster identity 4711 [ 707.838276][T10773] tipc: Enabled bearer , priority 0 [ 707.848413][T10774] syzkaller0: entered promiscuous mode [ 707.853957][T10774] syzkaller0: entered allmulticast mode [ 707.945710][T10773] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 709.038732][T10779] tipc: Resetting bearer [ 709.045165][T10779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.062101][ T5864] tipc: Node number set to 1424312082 [ 709.097119][T10772] tipc: Resetting bearer [ 709.317827][T10772] tipc: Disabling bearer [ 710.591405][T10791] atomic_op ffff88805a850198 conn xmit_atomic 0000000000000000 [ 711.451263][T10796] Sensor B: ================= START STATUS ================= [ 711.459825][T10796] Sensor B: Test Pattern: 75% Colorbar [ 711.470384][T10796] Sensor B: Show Information: All [ 711.475547][T10796] Sensor B: Vertical Flip: false [ 711.481351][T10796] Sensor B: Horizontal Flip: false [ 711.491034][T10796] Sensor B: Brightness: 128 [ 711.499739][T10796] Sensor B: Contrast: 128 [ 711.504137][T10796] Sensor B: Hue: 0 [ 711.516863][T10796] Sensor B: Saturation: 128 [ 711.527105][T10796] Sensor B: ================== END STATUS ================== [ 711.686627][ T5843] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 711.898387][ T5843] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 711.919899][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.948759][ T5843] usb 5-1: config 0 descriptor?? [ 712.207540][ T5843] snd-usb-hiface: probe of 5-1:0.0 failed with error -22 [ 712.325425][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 712.357047][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 712.369346][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 712.377965][ T5864] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 712.390425][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 712.408890][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 712.439179][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.504636][ T5843] usb 5-1: USB disconnect, device number 12 [ 712.582693][T10804] lo speed is unknown, defaulting to 1000 [ 712.589326][ T5864] usb 7-1: Using ep0 maxpacket: 16 [ 712.597412][T10804] lo speed is unknown, defaulting to 1000 [ 712.604121][ T5864] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.615131][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.626962][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 712.637470][ T5864] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 712.649288][ T5864] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.669619][ T5864] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 712.683702][ T5864] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 712.692721][ T5864] usb 7-1: Manufacturer: syz [ 712.713905][ T5864] usb 7-1: config 0 descriptor?? [ 713.129946][T10813] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 713.191808][T10804] chnl_net:caif_netlink_parms(): no params data found [ 713.206657][ T5864] rc_core: IR keymap rc-hauppauge not found [ 713.212796][ T5864] Registered IR keymap rc-empty [ 713.227415][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 713.286662][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 713.576850][ T5864] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 714.029004][ T5864] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 714.329169][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.380954][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.463567][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.587896][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.619949][ T9678] Bluetooth: hci3: command tx timeout [ 714.634324][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.677458][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.746403][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.806778][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.846614][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.918863][ T5864] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 714.935735][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.944046][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.953427][T10804] bridge_slave_0: entered allmulticast mode [ 714.961735][T10804] bridge_slave_0: entered promiscuous mode [ 714.971689][ T5864] mceusb 7-1:0.0: Registered   with mce emulator interface version 1 [ 714.983562][ T5864] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 714.989417][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.003225][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.023465][ T5864] usb 7-1: USB disconnect, device number 7 [ 715.051607][T10804] bridge_slave_1: entered allmulticast mode [ 715.075611][T10804] bridge_slave_1: entered promiscuous mode [ 715.126910][ T5843] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 715.262123][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.316653][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 715.334593][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.405059][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.441010][ T5843] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 715.455254][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.551384][ T5843] usb 6-1: config 0 descriptor?? [ 716.680387][ T9678] Bluetooth: hci3: command tx timeout [ 716.717931][ T9370] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.792372][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.063543][ T9370] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.472965][ T5843] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 717.525192][T10804] team0: Port device team_slave_0 added [ 717.543184][T10804] team0: Port device team_slave_1 added [ 717.591834][ T5843] usb 6-1: USB disconnect, device number 11 [ 717.709457][T10846] fido_id[10846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 717.741902][ T9370] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.887580][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.894621][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.004224][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.115727][ T9370] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.237566][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.244601][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.291335][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.564937][T10847] delete_channel: no stack [ 718.758848][ T9678] Bluetooth: hci3: command tx timeout [ 718.770384][T10804] hsr_slave_0: entered promiscuous mode [ 718.971034][T10804] hsr_slave_1: entered promiscuous mode [ 719.015810][T10804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.038721][T10804] Cannot create hsr debugfs directory [ 720.837487][ T9678] Bluetooth: hci3: command tx timeout [ 724.397132][T10804] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 724.494727][T10804] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 724.519317][T10804] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 724.558943][T10804] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 725.097699][T10924] sp0: Synchronizing with TNC [ 725.190976][ T9370] bond0: (slave wlan1): Releasing backup interface [ 725.537757][ T9370] hsr_slave_0: left promiscuous mode [ 725.547892][ T9370] hsr_slave_1: left promiscuous mode [ 725.558704][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.567737][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.576713][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.585349][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.630866][ T9370] veth1_macvtap: left promiscuous mode [ 725.637020][ T9370] veth0_macvtap: left promiscuous mode [ 725.642920][ T9370] veth1_vlan: left promiscuous mode [ 725.648912][ T9370] veth0_vlan: left promiscuous mode [ 727.901283][ T9370] team0 (unregistering): Port device team_slave_1 removed [ 728.039664][ T9370] team0 (unregistering): Port device team_slave_0 removed [ 728.139199][ T9370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.283058][ T9370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.364325][T10960] (null): rxe_set_mtu: Set mtu to 1024 [ 730.378307][T10960] rdma_rxe: rxe_newlink: failed to add syz_tun [ 731.258876][ T9370] bond0 (unregistering): Released all slaves [ 731.480553][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.655847][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.768553][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.775830][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.819786][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.827105][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.062842][T10804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.095788][T10804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.704665][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.561796][T11051] loop2: detected capacity change from 0 to 7 [ 739.609907][T10966] Dev loop2: unable to read RDB block 7 [ 739.631237][T10966] loop2: unable to read partition table [ 739.651017][T10966] loop2: partition table beyond EOD, truncated [ 739.679636][T11051] Dev loop2: unable to read RDB block 7 [ 739.698008][T11051] loop2: unable to read partition table [ 739.715400][T11051] loop2: partition table beyond EOD, truncated [ 739.741653][T11051] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 739.823068][T10804] veth0_vlan: entered promiscuous mode [ 739.919958][T10804] veth1_vlan: entered promiscuous mode [ 740.035156][T10804] veth0_macvtap: entered promiscuous mode [ 740.092695][T10804] veth1_macvtap: entered promiscuous mode [ 740.144463][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.180142][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.206426][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.258879][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.289685][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.316059][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.368803][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.450995][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.579739][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.646684][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.705041][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.762264][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.846648][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.902943][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.971247][T10804] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.995612][T10804] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.021459][T10804] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.042122][T10804] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.427026][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.434918][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.647096][T10953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.654998][T10953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.396979][ T967] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 742.918235][ T967] usb 6-1: Using ep0 maxpacket: 32 [ 743.334601][ T967] usb 6-1: config index 0 descriptor too short (expected 4370, got 18) [ 743.355504][ T967] usb 6-1: config 0 has an invalid interface number: 131 but max is 0 [ 743.378533][ T967] usb 6-1: config 0 has no interface number 0 [ 743.384750][ T967] usb 6-1: config 0 interface 131 has no altsetting 0 [ 743.458387][ T967] usb 6-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=b2.13 [ 743.496575][ T967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.505176][ T967] usb 6-1: Product: syz [ 743.530076][ T967] usb 6-1: Manufacturer: syz [ 743.534790][ T967] usb 6-1: SerialNumber: syz [ 743.577970][ T967] usb 6-1: config 0 descriptor?? [ 743.592501][ T967] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 743.642072][ T967] dvb-usb: bulk message failed: -22 (2/0) [ 743.669979][ T967] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 743.720026][ T967] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 743.816924][ T967] usb 6-1: media controller created [ 743.894536][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 744.031514][ T967] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 744.129686][ T967] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 745.086194][ T967] rc_core: IR keymap rc-dtt200u not found [ 745.092007][ T967] Registered IR keymap rc-empty [ 745.127787][ T967] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 745.220659][ T967] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input26 [ 745.298825][ T967] dvb-usb: schedule remote query interval to 300 msecs. [ 745.308900][ T967] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 745.310310][ T9678] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 745.339558][ T9678] CPU: 0 PID: 9678 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 745.347200][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 745.357315][ T9678] Workqueue: hci1 hci_rx_work [ 745.362176][ T9678] Call Trace: [ 745.365523][ T9678] [ 745.368638][ T9678] dump_stack_lvl+0x16c/0x230 [ 745.373405][ T9678] ? show_regs_print_info+0x20/0x20 [ 745.378677][ T9678] ? load_image+0x3b0/0x3b0 [ 745.383268][ T9678] sysfs_create_dir_ns+0x256/0x280 [ 745.388446][ T9678] ? hci_rx_work+0x43a/0xd80 [ 745.393329][ T9678] ? sysfs_warn_dup+0xa0/0xa0 [ 745.398064][ T9678] ? do_raw_spin_unlock+0x121/0x230 [ 745.403347][ T9678] kobject_add_internal+0x6b8/0xc70 [ 745.408644][ T9678] kobject_add+0x156/0x220 [ 745.413123][ T9678] ? __rwlock_init+0x150/0x150 [ 745.418283][ T9678] ? kobject_init+0x1e0/0x1e0 [ 745.423006][ T9678] ? _raw_spin_unlock+0x28/0x40 [ 745.427984][ T9678] ? get_device_parent+0x366/0x390 [ 745.433163][ T9678] device_add+0x408/0xc20 [ 745.437550][ T9678] hci_conn_add_sysfs+0xd5/0x1e0 [ 745.442542][ T9678] le_conn_complete_evt+0xf36/0x1500 [ 745.447868][ T9678] ? hci_event_packet+0x4a7/0x1210 [ 745.453134][ T9678] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 745.459458][ T9678] ? __copy_skb_header+0xa7/0x550 [ 745.464547][ T9678] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 745.470246][ T9678] ? skb_pull_data+0xfb/0x200 [ 745.474953][ T9678] hci_le_conn_complete_evt+0x187/0x440 [ 745.480606][ T9678] ? hci_remote_host_features_evt+0x160/0x160 [ 745.486718][ T9678] hci_event_packet+0x795/0x1210 [ 745.491914][ T9678] ? bis_list+0x290/0x290 [ 745.496305][ T9678] ? lockdep_hardirqs_on+0x98/0x150 [ 745.501549][ T9678] ? hci_send_to_monitor+0xd7/0x4f0 [ 745.506781][ T9678] hci_rx_work+0x43a/0xd80 [ 745.511332][ T9678] ? process_scheduled_works+0x957/0x15b0 [ 745.517083][ T9678] process_scheduled_works+0xa45/0x15b0 [ 745.522712][ T9678] ? assign_work+0x400/0x400 [ 745.527350][ T9678] ? assign_work+0x39e/0x400 [ 745.531988][ T9678] worker_thread+0xa55/0xfc0 [ 745.536611][ T9678] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 745.542542][ T9678] ? _raw_spin_unlock+0x40/0x40 [ 745.547415][ T9678] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 745.553382][ T9678] kthread+0x2fa/0x390 [ 745.557491][ T9678] ? pr_cont_work+0x560/0x560 [ 745.562207][ T9678] ? kthread_blkcg+0xd0/0xd0 [ 745.566818][ T9678] ret_from_fork+0x48/0x80 [ 745.571275][ T9678] ? kthread_blkcg+0xd0/0xd0 [ 745.575904][ T9678] ret_from_fork_asm+0x11/0x20 [ 745.580735][ T9678] [ 745.583808][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.592048][ T9678] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 745.609458][ T9678] Bluetooth: hci1: failed to register connection device [ 745.634630][ T6234] dvb-usb: bulk message failed: -22 (1/0) [ 745.667378][ T967] usb 6-1: USB disconnect, device number 12 [ 745.753771][ T6234] dvb-usb: error -22 while querying for an remote control event. [ 746.023786][ T967] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 747.045352][T11146] atomic_op ffff888023cde198 conn xmit_atomic 0000000000000000 [ 749.803910][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.033969][T11169] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 750.062353][ T5843] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 750.111577][T11169] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 750.137644][T11169] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 750.157615][T11169] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 750.186724][T11169] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 750.216666][T11169] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 750.248173][T11169] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 750.288107][T11169] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 750.307989][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.356247][ T5843] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 750.388291][ T5843] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 750.416783][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.448462][ T5843] usb 6-1: config 0 descriptor?? [ 750.475728][ T5843] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 750.492803][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 750.515120][ T5843] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 750.572121][ T5843] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 750.603746][ T5843] usb 6-1: media controller created [ 750.648359][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.713406][T11166] dvb-usb: bulk message failed: -22 (2/0) [ 751.134367][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 751.321105][T11185] ceph: No mds server is up or the cluster is laggy [ 751.363169][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 751.371563][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 751.377628][ T5843] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 751.403525][ T5843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 751.509482][ T5843] dvb-usb: schedule remote query interval to 150 msecs. [ 751.556018][ T5843] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 751.666161][ T5843] usb 6-1: USB disconnect, device number 13 [ 751.872181][ T5843] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 754.197000][ T5843] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 754.436782][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 754.449417][ T5843] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 754.486296][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.499065][ T5843] usb 5-1: Product: syz [ 754.503309][ T5843] usb 5-1: Manufacturer: syz [ 754.514266][ T5843] usb 5-1: SerialNumber: syz [ 754.537006][ T5843] usb 5-1: config 0 descriptor?? [ 754.770783][ T5843] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 756.874380][ T5843] gspca_sunplus: reg_w_riv err -110 [ 756.899605][ T5843] sunplus: probe of 5-1:0.0 failed with error -110 [ 757.158554][ T5843] usb 5-1: USB disconnect, device number 13 [ 757.275151][T11257] Cannot find add_set index 65532 as target [ 763.756793][ T967] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 764.051848][ T967] usb 7-1: Using ep0 maxpacket: 8 [ 764.143586][ T967] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 764.187131][ T967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.195244][ T967] usb 7-1: Product: syz [ 764.205709][ T967] usb 7-1: Manufacturer: syz [ 764.211532][ T967] usb 7-1: SerialNumber: syz [ 764.268947][ T967] usb 7-1: config 0 descriptor?? [ 764.307143][ T967] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 764.506439][ T5843] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 764.706109][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 764.733274][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.759934][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.776325][ T5843] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 764.797034][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.857170][ T5843] usb 5-1: config 0 descriptor?? [ 764.873047][ T5843] hub 5-1:0.0: USB hub found [ 765.080547][ T5843] hub 5-1:0.0: 1 port detected [ 766.341637][ T5817] hub 5-1:0.0: activate --> -90 [ 766.565701][ T967] gspca_sonixj: reg_r err -71 [ 766.571284][ T967] sonixj: probe of 7-1:0.0 failed with error -71 [ 766.623047][ T967] usb 7-1: USB disconnect, device number 8 [ 767.562633][T11376] lo speed is unknown, defaulting to 1000 [ 767.587964][T11376] lo speed is unknown, defaulting to 1000 [ 768.651369][ T5843] usb 5-1-port1: config error [ 768.666724][ T5843] usb 5-1-port1: cannot disable (err = -71) [ 768.675570][ T5843] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 768.688567][ T5864] usb 5-1: USB disconnect, device number 14 [ 768.716480][ T5843] usb 5-1-port1: connect-debounce failed [ 778.203466][ T9678] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 778.945834][T11496] support for cryptoloop has been removed. Use dm-crypt instead. [ 782.537500][T11521] lo speed is unknown, defaulting to 1000 [ 782.570889][T11521] lo speed is unknown, defaulting to 1000 [ 783.522714][ T9678] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 783.534374][ T9678] Bluetooth: hci1: Injecting HCI hardware error event [ 783.549851][ T5087] Bluetooth: hci1: hardware error 0x00 [ 784.379548][ T9678] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 784.686387][T11542] bio_check_eod: 182 callbacks suppressed [ 784.686417][T11542] syz.6.1301: attempt to access beyond end of device [ 784.686417][T11542] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 784.732598][T11542] syz.6.1301: attempt to access beyond end of device [ 784.732598][T11542] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 784.754070][T11542] Mount JFS Failure: -5 [ 785.265441][ T9678] Bluetooth: hci4: Malformed HCI Event [ 786.436354][T11555] lo speed is unknown, defaulting to 1000 [ 786.460095][T11555] lo speed is unknown, defaulting to 1000 [ 786.879266][ T9678] Bluetooth: hci0: command 0x0406 tx timeout [ 786.891043][ T5087] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 787.673360][T11561] IPVS: stopping master sync thread 11562 ... [ 787.676033][T11562] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 792.305357][T11612] syz.4.1315: attempt to access beyond end of device [ 792.305357][T11612] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 792.322884][T11612] syz.4.1315: attempt to access beyond end of device [ 792.322884][T11612] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 792.376104][T11612] Mount JFS Failure: -5 [ 797.879057][T11654] Bluetooth: MGMT ver 1.22 [ 798.501529][T11660] syz.7.1326: attempt to access beyond end of device [ 798.501529][T11660] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 798.523861][T11660] syz.7.1326: attempt to access beyond end of device [ 798.523861][T11660] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 798.612576][T11660] Mount JFS Failure: -5 [ 798.758921][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 799.068090][T11671] netlink: 'syz.7.1330': attribute type 1 has an invalid length. [ 799.182814][T11671] bond1: entered promiscuous mode [ 799.188607][T11671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.235286][T11671] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 799.282476][T11671] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 799.320533][T11671] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 805.178126][ T5862] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 805.311791][T11743] comedi: No check for data length of config insn id 65535 is implemented [ 805.336081][T11743] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 805.356445][T11743] comedi: Assuming n=15 is correct [ 805.390262][ T5862] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 805.405969][ T5862] usb 7-1: config 1 has no interface number 0 [ 805.413396][ T5862] usb 7-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 805.457675][ T5862] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.517771][ T5862] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 805.546107][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.564527][ T5862] usb 7-1: Product: syz [ 805.574674][ T5862] usb 7-1: Manufacturer: syz [ 805.584089][ T5862] usb 7-1: SerialNumber: syz [ 805.597658][ T5864] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 805.688310][T11732] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 805.698437][ T5862] usb 7-1: Expected 3 endpoints, found: 2 [ 805.866780][ T5899] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 805.914391][ T5864] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 805.931188][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.940761][ T5864] usb 5-1: Product: syz [ 805.945010][ T5864] usb 5-1: Manufacturer: syz [ 805.953898][ T5864] usb 5-1: SerialNumber: syz [ 805.965306][ T5864] usb 5-1: config 0 descriptor?? [ 806.067331][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 806.081236][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.136850][ T5899] usb 6-1: config 0 descriptor?? [ 806.153926][ T5899] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 806.197020][ T5843] usb 5-1: USB disconnect, device number 15 [ 807.706046][T11782] nvme_fabrics: unknown parameter or missing value '{' in ctrl creation request [ 808.633738][ T5899] usb 6-1: USB disconnect, device number 14 [ 808.853038][ T5864] usb 7-1: USB disconnect, device number 9 [ 809.853739][T11796] mkiss: ax0: crc mode is auto. [ 811.243830][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.556383][ T9217] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 811.749473][ T9217] usb 7-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x43, skipping [ 811.766351][ T9217] usb 7-1: config 0 interface 0 has no altsetting 0 [ 811.783423][ T9217] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 811.816543][ T9217] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 811.828339][ T9217] usb 7-1: Product: syz [ 811.832565][ T9217] usb 7-1: Manufacturer: syz [ 811.864375][ T9217] usb 7-1: SerialNumber: syz [ 811.948842][ T9217] usb 7-1: config 0 descriptor?? [ 812.503490][T11845] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 812.553068][ T9217] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 812.647215][T10966] udevd[10966]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.673517][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1370'. [ 812.742844][ T9217] usb 7-1: USB disconnect, device number 10 [ 814.797889][T11882] input: syz1 as /devices/virtual/input/input30 [ 818.063672][T11907] nvme_fabrics: unknown parameter or missing value '{' in ctrl creation request [ 820.764008][T11926] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 821.088222][T11930] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 821.706128][T11935] nvme_fabrics: unknown parameter or missing value '{' in ctrl creation request [ 822.928846][T11930] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 823.513783][T11931] bond1: (slave gretap1): making interface the new active one [ 823.616425][T11931] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 823.688151][T11926] macvlan2: entered promiscuous mode [ 823.696149][T11926] macvlan2: entered allmulticast mode [ 823.727171][T11926] bond1: entered promiscuous mode [ 823.735932][T11926] gretap1: entered promiscuous mode [ 823.751337][T11926] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 823.801900][T11926] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 823.848016][T11926] bond1: left promiscuous mode [ 823.852869][T11926] gretap1: left promiscuous mode [ 828.885999][ T5843] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 829.117442][ T5843] usb 5-1: config index 0 descriptor too short (expected 215, got 45) [ 829.139514][ T5843] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 829.165933][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.183977][ T5843] usb 5-1: Product: syz [ 829.219976][ T5843] usb 5-1: Manufacturer: syz [ 829.224654][ T5843] usb 5-1: SerialNumber: syz [ 833.055327][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 833.103369][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 833.170874][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 833.227779][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 833.258593][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 833.341425][ T5843] lan78xx: probe of 5-1:1.0 failed with error -71 [ 833.393233][ T5843] usb 5-1: USB disconnect, device number 16 [ 835.425954][T11345] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 835.626674][T11345] usb 7-1: Using ep0 maxpacket: 8 [ 835.651564][T11345] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 835.712699][T11345] usb 7-1: config 3 has no interface number 0 [ 835.738822][T11345] usb 7-1: config 3 interface 45 has no altsetting 0 [ 835.793480][T11345] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 835.825570][T11345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.856433][T11345] usb 7-1: Product: syz [ 835.860936][T11345] usb 7-1: Manufacturer: syz [ 835.895983][T11345] usb 7-1: SerialNumber: syz [ 836.281018][T11345] usb 7-1: USB disconnect, device number 11 [ 836.322358][T10966] udevd[10966]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.413426][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1418'. [ 841.777822][ T5862] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 843.780651][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 843.791869][ T5862] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 843.806398][ T5862] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 843.819008][ T5862] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 843.848130][ T5862] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 843.894255][ T5862] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.965526][ T5862] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 844.003546][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.248756][ T5862] usb 6-1: GET_CAPABILITIES returned 0 [ 844.262872][ T5862] usbtmc 6-1:16.0: can't read capabilities [ 844.545650][T12090] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 845.206419][ T5862] usb 6-1: USB disconnect, device number 15 [ 845.277830][T12074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1436'. [ 846.255204][T12101] syz.4.1444: attempt to access beyond end of device [ 846.255204][T12101] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 846.484274][T12101] qnx6: unable to read the first superblock [ 846.502012][T12101] syz.4.1444: attempt to access beyond end of device [ 846.502012][T12101] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 846.516052][T12101] qnx6: unable to read the first superblock [ 846.522806][T12101] qnx6: unable to read the first superblock [ 848.823284][ T9217] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 849.018598][ T9217] usb 6-1: config index 0 descriptor too short (expected 215, got 45) [ 849.050935][ T9217] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 849.082396][ T9217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.098574][ T9217] usb 6-1: Product: syz [ 849.112691][ T9217] usb 6-1: Manufacturer: syz [ 849.123373][ T9217] usb 6-1: SerialNumber: syz [ 851.399685][T12146] trusted_key: encrypted_key: insufficient parameters specified [ 851.697102][ T9217] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 851.781865][ T9217] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 851.837927][ T9217] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 852.877146][ T9217] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 852.908759][ T9217] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 852.997666][ T9217] lan78xx: probe of 6-1:1.0 failed with error -71 [ 853.052460][ T9217] usb 6-1: USB disconnect, device number 16 [ 854.156789][ T6234] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 854.346641][ T6234] usb 6-1: Using ep0 maxpacket: 32 [ 854.362739][ T6234] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 854.374875][ T6234] usb 6-1: config 0 has no interface number 0 [ 854.389186][ T6234] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 854.412880][ T6234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.430662][ T6234] usb 6-1: Product: syz [ 854.435296][ T6234] usb 6-1: Manufacturer: syz [ 854.461454][ T6234] usb 6-1: SerialNumber: syz [ 854.480838][ T6234] usb 6-1: config 0 descriptor?? [ 854.497669][ T6234] smsc95xx v2.0.0 [ 854.925469][ T6234] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 854.941474][ T6234] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 855.153615][ T6234] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 855.172627][ T6234] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 855.227885][ T6234] usb 6-1: USB disconnect, device number 17 [ 856.335439][T12171] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.358445][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.127930][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1471'. [ 859.170786][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1471'. [ 860.188452][T12190] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.197806][T12190] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.206780][T12190] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.215575][T12190] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.301280][T12193] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.344905][T12193] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.756003][ T5843] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 867.439388][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 867.541036][ T5843] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 867.558354][ T5843] usb 5-1: config 0 has no interface number 0 [ 867.564619][ T5843] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 867.587195][ T5843] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 867.599716][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.608095][ T5843] usb 5-1: Product: syz [ 867.620184][ T5843] usb 5-1: Manufacturer: syz [ 867.624844][ T5843] usb 5-1: SerialNumber: syz [ 867.797316][ T5843] usb 5-1: config 0 descriptor?? [ 868.328055][T12231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 869.678078][ T5843] asix: probe of 5-1:0.188 failed with error -71 [ 869.710840][ T5843] usb 5-1: USB disconnect, device number 17 [ 869.775958][ T9217] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 869.824839][ T28] audit: type=1326 audit(3915594200.520:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12256 comm="syz.4.1490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba43b8f749 code=0x0 [ 870.021428][ T9217] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.052652][ T9217] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 870.076456][ T9217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.122188][ T9217] usb 7-1: config 0 descriptor?? [ 870.139871][ T9217] pwc: Askey VC010 type 2 USB webcam detected. [ 870.551910][ T9217] pwc: recv_control_msg error -32 req 02 val 2b00 [ 870.785162][ T9217] pwc: recv_control_msg error -32 req 02 val 2c00 [ 870.807826][ T9217] pwc: recv_control_msg error -71 req 04 val 1000 [ 870.828864][ T9217] pwc: recv_control_msg error -71 req 04 val 1300 [ 870.845788][ T9217] pwc: recv_control_msg error -71 req 04 val 1400 [ 870.868212][ T9217] pwc: recv_control_msg error -71 req 02 val 2000 [ 870.890720][ T9217] pwc: recv_control_msg error -71 req 02 val 2100 [ 870.909347][ T9217] pwc: recv_control_msg error -71 req 04 val 1500 [ 870.929918][ T9217] pwc: recv_control_msg error -71 req 02 val 2500 [ 870.940135][ T9217] pwc: recv_control_msg error -71 req 02 val 2400 [ 870.959349][ T9217] pwc: recv_control_msg error -71 req 02 val 2600 [ 870.974182][ T9217] pwc: recv_control_msg error -71 req 02 val 2900 [ 870.985986][ T9217] pwc: recv_control_msg error -71 req 02 val 2800 [ 870.996520][ T9217] pwc: recv_control_msg error -71 req 04 val 1100 [ 871.007863][ T9217] pwc: recv_control_msg error -71 req 04 val 1200 [ 871.053003][ T9217] pwc: Registered as video103. [ 871.079288][ T9217] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31 [ 871.126439][ T9217] usb 7-1: USB disconnect, device number 12 [ 872.615679][T12282] ntfs3: nullb0: Primary boot signature is not NTFS. [ 872.632440][T12282] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 872.658781][ T5864] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 872.694342][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.217341][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 873.239675][ T5864] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.280292][ T5864] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.309407][ T5864] usb 6-1: config 0 interface 0 has no altsetting 0 [ 873.329456][T12287] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.330361][ T5864] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 873.352799][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.005219][ T5864] usb 6-1: config 0 descriptor?? [ 875.446585][ T5864] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 875.454565][ T5864] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 875.462959][ T5864] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 875.471641][ T5864] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 875.479876][ T5864] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 875.986723][T12302] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 876.198719][ T5864] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 876.430412][ T5864] usb 6-1: USB disconnect, device number 18 [ 876.702350][T12315] fido_id[12315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 880.593439][ T28] audit: type=1804 audit(3915594210.150:140): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1505" name="bus" dev="ramfs" ino=31825 res=1 errno=0 [ 881.384394][T12339] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.356125][ T5843] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 888.586247][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 888.602676][ T5843] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 888.626086][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.682979][ T5843] usb 5-1: config 0 descriptor?? [ 889.141414][ T5843] uclogic 0003:145F:0212.000F: interface is invalid, ignoring [ 889.727988][T11345] usb 5-1: USB disconnect, device number 18 [ 892.426831][ T5864] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 892.646596][ T5864] usb 7-1: Using ep0 maxpacket: 16 [ 892.776668][ T5864] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 892.829204][ T5864] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.850262][ T5864] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 892.868979][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.893396][ T5864] usb 7-1: Product: syz [ 892.906514][ T5864] usb 7-1: Manufacturer: syz [ 892.911186][ T5864] usb 7-1: SerialNumber: syz [ 892.935241][ T5864] usb 7-1: config 0 descriptor?? [ 893.205927][ T9217] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 893.439050][ T9217] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 893.465907][ T9217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 54, changing to 9 [ 893.495898][ T9217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8237, setting to 1024 [ 893.543652][ T9217] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 893.560654][ T9217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.590890][ T9217] usb 5-1: Product: syz [ 893.608586][ T9217] usb 5-1: Manufacturer: syz [ 893.613251][ T9217] usb 5-1: SerialNumber: syz [ 893.654404][ T9217] usb 5-1: config 0 descriptor?? [ 894.046651][ T967] usb 5-1: USB disconnect, device number 19 [ 894.461918][T12413] netlink: 'syz.5.1524': attribute type 2 has an invalid length. [ 894.570598][T12415] lo speed is unknown, defaulting to 1000 [ 894.578093][T12415] lo speed is unknown, defaulting to 1000 [ 895.043503][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 895.075762][ T5864] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input32 [ 895.089414][ T967] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 895.123945][ T5864] imon:send_packet: packet tx failed (-71) [ 895.148930][ T5864] imon 7-1:0.0: panel buttons/knobs setup failed [ 895.276547][ T967] usb 5-1: Using ep0 maxpacket: 8 [ 895.284353][ T967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.292575][ T5864] rc_core: IR keymap rc-imon-pad not found [ 895.301045][ T967] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 895.317590][ T5864] Registered IR keymap rc-empty [ 895.336660][ T5864] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 895.367592][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.417423][ T5864] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 895.428995][ T967] usb 5-1: config 0 descriptor?? [ 895.448960][ T5864] imon:send_packet: packet tx failed (-71) [ 895.534991][T12431] No such timeout policy "syz1" [ 896.452378][ T5864] imon 7-1:0.0: remote input dev register failed [ 898.607687][ T967] usbhid 5-1:0.0: can't add hid device: -71 [ 898.613777][ T967] usbhid: probe of 5-1:0.0 failed with error -71 [ 898.636862][ T5864] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 898.690444][ T967] usb 5-1: USB disconnect, device number 20 [ 898.885645][ T5864] imon 7-1:0.0: unable to initialize intf0, err 0 [ 898.899832][ T5864] imon:imon_probe: failed to initialize context! [ 898.914837][ T5864] imon 7-1:0.0: unable to register, err -19 [ 898.964959][ T5864] usb 7-1: USB disconnect, device number 13 [ 899.596899][ T5864] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 899.786951][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 899.812473][ T5864] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 899.827433][ T5864] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 899.839550][ T5864] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 899.851017][ T5864] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 899.871156][ T5864] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 899.884892][ T5864] usb 6-1: config 1 interface 0 has no altsetting 0 [ 899.945544][ T5864] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 899.986946][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.022962][ T5864] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 900.321276][ T5864] scsi host1: usb-storage 6-1:1.0 [ 900.396493][ T9217] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 900.489798][ T5862] usb 6-1: USB disconnect, device number 19 [ 900.642790][ T9217] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 900.654816][ T9217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.697218][ T9217] usb 5-1: config 0 descriptor?? [ 901.363778][T12465] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1540'. [ 903.046484][ T5864] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 903.196254][ T5862] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 903.246480][ T5864] usb 7-1: Using ep0 maxpacket: 8 [ 903.267325][ T5864] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 903.277740][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.285788][ T5864] usb 7-1: Product: syz [ 903.291400][ T5864] usb 7-1: Manufacturer: syz [ 903.301188][ T5864] usb 7-1: SerialNumber: syz [ 903.327477][ T5864] usb 7-1: config 0 descriptor?? [ 903.345633][ T5864] gspca_main: sq905-2.14.0 probing 2770:9120 [ 903.406644][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 903.432947][ T5862] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 903.445578][ T5862] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 903.466130][ T5862] usb 6-1: config 179 has no interface number 0 [ 903.472557][ T5862] usb 6-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 903.494419][ T5862] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 903.504312][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.740380][ T6234] usb 6-1: USB disconnect, device number 20 [ 903.759869][ T9217] usb 5-1: Cannot set autoneg [ 903.769502][ T9217] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 903.781946][ T5864] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 903.793717][ T9217] usb 5-1: USB disconnect, device number 21 [ 903.801146][ T5864] sq905: probe of 7-1:0.0 failed with error -71 [ 903.827140][ T5864] usb 7-1: USB disconnect, device number 14 [ 905.086791][T12497] No such timeout policy "syz1" [ 906.853747][T12516] (null): rxe_set_mtu: Set mtu to 256 [ 906.864119][T12516] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 906.924944][T12516] vxfs: WRONG superblock magic 00000000 at 1 [ 906.959162][T12516] vxfs: WRONG superblock magic 00000000 at 8 [ 906.965536][T12516] vxfs: can't find superblock. [ 907.459371][T12522] netlink: 372 bytes leftover after parsing attributes in process `syz.5.1559'. [ 908.143339][T12539] lo speed is unknown, defaulting to 1000 [ 908.151425][T12539] lo speed is unknown, defaulting to 1000 [ 908.184025][T12539] lo speed is unknown, defaulting to 1000 [ 908.788844][T12539] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 908.820058][T12539] lo speed is unknown, defaulting to 1000 [ 908.828207][T12539] lo speed is unknown, defaulting to 1000 [ 908.835003][T12539] lo speed is unknown, defaulting to 1000 [ 908.842336][T12539] lo speed is unknown, defaulting to 1000 [ 910.097956][T12555] No such timeout policy "syz1" [ 914.395389][T12581] (null): rxe_set_mtu: Set mtu to 256 [ 914.401910][T12581] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 914.412197][T12581] vxfs: WRONG superblock magic 00000000 at 1 [ 914.419156][T12581] vxfs: WRONG superblock magic 00000000 at 8 [ 914.425187][T12581] vxfs: can't find superblock. [ 916.984321][T12608] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1585'. [ 919.280864][T12616] (null): rxe_set_mtu: Set mtu to 256 [ 919.291369][T12616] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 919.301537][T12616] vxfs: WRONG superblock magic 00000000 at 1 [ 919.308462][T12616] vxfs: WRONG superblock magic 00000000 at 8 [ 919.314501][T12616] vxfs: can't find superblock. [ 920.886181][T12627] comedi comedi0: pcl818: I/O port conflict (0x8001,16) [ 920.896119][T12627] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 920.907900][T12627] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 920.916337][T12627] CPU: 0 PID: 12627 Comm: syz.7.1591 Not tainted syzkaller #0 [ 920.923814][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.933898][T12627] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 920.939535][T12627] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 920.959366][T12627] RSP: 0018:ffffc9000b4d7a18 EFLAGS: 00010206 [ 920.965474][T12627] RAX: 0000000000000005 RBX: ffff88805b1b0a80 RCX: 0000000000080000 [ 920.973475][T12627] RDX: ffffc90014a01000 RSI: 0000000000006513 RDI: 0000000000006514 [ 920.981648][T12627] RBP: 0000000000000001 R08: ffff88814c82292f R09: 1ffff11029904525 [ 920.989673][T12627] R10: dffffc0000000000 R11: ffffed1029904526 R12: 0000000000000028 [ 920.997694][T12627] R13: dffffc0000000000 R14: ffff88814c822800 R15: dffffc0000000000 [ 921.005691][T12627] FS: 00007ff73cfdb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 921.014655][T12627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 921.021282][T12627] CR2: 000000110c3d8a3d CR3: 0000000023acb000 CR4: 00000000003506f0 [ 921.029379][T12627] Call Trace: [ 921.032685][T12627] [ 921.035652][T12627] pcl818_detach+0x66/0xd0 [ 921.040130][T12627] comedi_device_detach_locked+0x172/0x710 [ 921.046061][T12627] comedi_device_attach+0x5cd/0x710 [ 921.051380][T12627] comedi_unlocked_ioctl+0x606/0xfe0 [ 921.056722][T12627] ? tomoyo_path_number_perm+0x477/0x590 [ 921.062403][T12627] ? comedi_poll+0x8c0/0x8c0 [ 921.067177][T12627] ? __fget_files+0x28/0x4d0 [ 921.071849][T12627] ? bpf_lsm_file_ioctl+0x9/0x10 [ 921.076840][T12627] ? security_file_ioctl+0x80/0xa0 [ 921.082002][T12627] ? comedi_poll+0x8c0/0x8c0 [ 921.086649][T12627] __se_sys_ioctl+0xfd/0x170 [ 921.091286][T12627] do_syscall_64+0x55/0xb0 [ 921.095743][T12627] ? clear_bhb_loop+0x40/0x90 [ 921.100468][T12627] ? clear_bhb_loop+0x40/0x90 [ 921.105185][T12627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.111154][T12627] RIP: 0033:0x7ff73c18f749 [ 921.115679][T12627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.135325][T12627] RSP: 002b:00007ff73cfdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.143782][T12627] RAX: ffffffffffffffda RBX: 00007ff73c3e6180 RCX: 00007ff73c18f749 [ 921.151808][T12627] RDX: 0000200000000200 RSI: 0000000040946400 RDI: 000000000000000a [ 921.159825][T12627] RBP: 00007ff73c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 921.167840][T12627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.175850][T12627] R13: 00007ff73c3e6218 R14: 00007ff73c3e6180 R15: 00007fff030f9228 [ 921.183889][T12627] [ 921.186933][T12627] Modules linked in: [ 921.192442][T12627] ---[ end trace 0000000000000000 ]--- [ 921.198233][T12627] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 921.204126][T12627] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 921.224055][T12627] RSP: 0018:ffffc9000b4d7a18 EFLAGS: 00010206 [ 921.230600][T12627] RAX: 0000000000000005 RBX: ffff88805b1b0a80 RCX: 0000000000080000 [ 921.238887][T12627] RDX: ffffc90014a01000 RSI: 0000000000006513 RDI: 0000000000006514 [ 921.247249][T12627] RBP: 0000000000000001 R08: ffff88814c82292f R09: 1ffff11029904525 [ 921.255508][T12627] R10: dffffc0000000000 R11: ffffed1029904526 R12: 0000000000000028 [ 921.263712][T12627] R13: dffffc0000000000 R14: ffff88814c822800 R15: dffffc0000000000 [ 921.272808][T12627] FS: 00007ff73cfdb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 921.282087][T12627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 921.289410][T12627] CR2: 000000110c3d8a3d CR3: 0000000023acb000 CR4: 00000000003506f0 [ 921.316443][T12627] Kernel panic - not syncing: Fatal exception [ 921.323232][T12627] Kernel Offset: disabled [ 921.327576][T12627] Rebooting in 86400 seconds..