last executing test programs: 22m37.874708799s ago: executing program 3 (id=43): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) 22m36.85379153s ago: executing program 3 (id=49): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 22m34.629273919s ago: executing program 3 (id=55): socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 22m33.462833978s ago: executing program 3 (id=62): pipe(&(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 22m33.109584032s ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 22m32.065177875s ago: executing program 3 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 22m16.868137739s ago: executing program 32 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 19m49.171157843s ago: executing program 2 (id=551): capset(0x0, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x569}) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x1a1283) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000100), &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x55d0, 0x3000, 0x0, 0xfffffffa}) exit(0xffff) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, &(0x7f0000000280), 0x0) timer_create(0x0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000000}) 19m43.136974691s ago: executing program 2 (id=563): socketpair$unix(0x1, 0x3, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) 19m41.682262806s ago: executing program 2 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="5a384a217a2d82c5ec7bde148b403544b4bdb579f3e3fbf170a3469a03b7ba2a91da2bb5fefdfb5ee8c9a765bd0aa2e8b8b401f3b58de521f3e6db76caf7b9ea41905fac2631a75e5d2e09e06515ff14b80da52516075f57e7407448ffbd076beeb37ba4a5553141482cafea7fcf5fb2b03efdf1b49c8c8170587ce2a60a85024c7adbc4b334ecb3167e533aa35d2741012c718c73d8650095eed7a7569fa74c352893ad1a22c5a77af8f2e7970aed14104738b5cd78bf4f9227f55d2ffb78093c957d1bff072137969865ccfca5afbe63fe8f1a6684bb1eaecbf9172186d97535ff934b122eb8e8262e97bd6fad21d3a14a3786585270769d87b6477cfe0740555c6da4d5e600ae4d5af479dc1ffef196e1332ad95c1c58bc9d1cdac91ef22c1c8f32008601d4fe42493b4cf49166688aa5ed31c4b0dd072f6e4209d418914c3df34c2bbf7726603ffa60954980a1de421eb16f23729f3d9c822089d1f5ed131be61fae0e87ed82495a55162fef5ec693639d3772513e0e1dd42f674da3c9e7dd19bcacd8c68f39e7c51b3b021b1c88b3044a33b28781c3b945b720000587415401aa2187cf293f6e1f0877262954823a45e40630d06b6bb31d1fabd80fbdbcf9ebc9b8dd416dbc156eae3bd7926994196f9fa280c6642db7906dcfc4f5aacfe58f7798742b134e98faf62d2dddd2503240ed38d50809662fcb3f6086b01aa8fc52d0eaf04d3d2a36beaee875fc3d2cb2b97496ac90ea79d279ab0cc8a442df0859765930d95bd82f8282144d1d8dd8eab0285c7743b776421010d7b74acf7bcc6c6e9d38713de9c99df8ac8469590b23ae358de52a6f2d7e00286675b4e2fc168d3f2b9ca6388cb87b97acc90639a1d1d16013910a795d2590f559ceea19f0a0be189c346eaf27d8c53aed71ef8c819cdf0d7239bde7831fc23be532bc065d1812b070655ae6dff2c3261d35ff1a404ef927c028e726107fe26808352e944335b6e9895c6112b49862089e7b37c16efbf7dd7d5569c2dd14915154465c94b50ff43452d66c797bac0acb102cec36acfc561beb71d92ba83d6fa24ccdd5290779c5ee075b9baf835f21b2d76a74c42af035079e62b09ccf512b1cdde4ed0679c230d4739ecec880123845a8b17762a5dd9873dcdeebf809a42899a49b2693c2d87efb3b8a2f2bdda5dacd8084d91d71c603f2c7f0a9e8db7080e575aa8baaae6791530b74e6d9bd887379058673a579de4ab71988b8fef429d45560cabc32553103d1e7156608bba760dde9ea3452a4958ef0dc4d1176de951ace0e05033cc974e80bcde9601e267d80578565d49a497cc981d4e304978262124cf712231335266ea736481669706bd5f997f793f428a7d3ee5bda9b702f88c8c95541441f9f88b7a3b643e4a3aaa32fcc537063e447ba5928e7da583033c1642acc16b42d8baea677a2ba9a189ac745e6c8762257644c5dcc1ed8c60663a17ecd8be62830bd16b9eee4dfcf6cb13d0067f36f4d811fe961d2553a02fb7f117f07099d5c4747345531e807f13a90049a56c7816d76c503c5b7d04394955ba8e53a54309e811ac396ede3142dd41f9a1f695b72e8b75d68db27ff9c5e5fac36337f41aac853add254a4e8f2e3912d77ace9a27e58951d055a5f492accdd4bccb7379533b9b01f10042c294e8afb407c8dc752785f0e6078aa76f0f8598d9c26a6e6cd3948d1b1d6bcf51d7a1b9050fef9be16fe4bc4e40686813940c1748e00602ec782118395e7c07022ca8ac248f5c3b53a45cec6bb7f962add742b68c36cde15ff0f76c1fc596bca8d42c03722f6e78260cb30f47c84d567a089e1ab987c304e1bf70b668d1a35e72980ea7b9ec5a91c49c2a8962bb5f337434ea2ad80438f55ae50040390141eb4a9c2b47ea88adc9034f6d308449e4f40a2c1339a77ffa6e7239dab74f08bf1cc126bf318f47d5bbca4c9f4c9724fca344f93b0fc264ab7fc4d487861798e3d4fc5ce64de71e47bdb31b90d6e3046463082d3eaed3556115084c9111b6d9b0195ea7856aa83259a37bc6e512b762203cb1cd337666bc0620272de220e76f1cbb6ead7d1161610a0ac6c41dec1affb8ed57dd67910ba24545a89d230a1f6e8d86d979f497d1beede4918fbd4b61923d89dbd3440685863c4d1bb3d81973ba48a63133d9251e643c4647ad4aac03dc6db40ad92da439a3543df9483df651aea2c0bafb7f351166d75c746afeb330d610891c1c4f01a04668eff5e8ee2481ee358aa7b28f14c50b010e2c511354cbdea3c058f01f2e83f0db5a8a6e8235eb6eb15f2fb3dd9cd62bce66e5e46f50fc14e5710a4d97256ba724ae7a3cdfab2df2c3eaf131fff623a26b2aa6c9bca974bdb61938ac8cae4f0f1ec85788d0054a386772e38740d7bf1d0acd9d2f140d71e3353d2d97e0eb153685fef685bf06bee0c10e6df49a757018a29bd745a9680775219cb5248367e4c4990e25735948c94039f76c86168a687660ef7d8e2684ea650472198637c944ad226737dd2abf3c71d4f01eb482f80e5e62a16491a4ce110e51a7b5b6dcb2f788d2a929dc3a55b97f9bbf9bac9232a4193f359dde048c46ca16c654c712b8152779b3c495733801bcdd12b5b4b87380fc71cc9442c549dc7b40d351ea690b4b92ec510f23cd232a528b4ca474f3915df278f1574d6dda0e38c52b67cdce8724a920a026569ac8229f73580908e54111b638f93a94c632667d36381fdb6cc7fa6c97c60fb719e5aab698f0a553f47726ecd81207b4c9545f3f3c719ef6c0e847b97b8d0767d66306210ff653ecc97032eaf2504b85d2562bbb94160799046cda1b8877706ecbc100eb4a1de99b727a863c825c19b64a3c5d2db34224ab34e9efc99b792c0eafdd5eaa8e5319aee0effb9e40ae3e1cefd2216cae96cd423ae9b4048e89cf56c28c2d3dc9b05522d84e13f193a96d37c85545625ce39cf33d9de4f96ed7d2c0e813eac440f030595ef467030c1b3381e0e4ca4f36a8e5f9cb4e09bd398d707c5c38f4252182173b1f877f87e933fe59cfc10f88169625c2293d34a22062399543cf88a1097026d6f2effdfc05a50b1519dbae43289f64580a85978aa63ed218c958209c07ddfa9ee021c30b6ac427230bd5b45e86f1e0c47278680237527099fab4c3009e5c356c93a7041610616166b8c287eba20a43eb02351767996c9d1b20f058ff969547f79f381f45463f412d08407eb6f472ca7639c17994f4d9d4e9cb9464b4a096c96582e406ea972898400c11b083d7abfb0a8a0616819d4723fd23aec2e26b1c8b57c7ab0256a055df78beca014eca7ee4d88acd12bd0fb91cc68081958f69c969a37da61445d8dc65f945c288ff465a7678129391997a33e86e412d56af4f556d68f1c9ac6c6eae2f153a7d4755ccd748f3ee17104221030038bf79309b37a232b804cd5673e7ce403e118a899f776e37499f180777bfca4a8e4d2b987b55de542cdb9b8209473a719762a5d3717f69c8539a3bc4bf5c79e7e45626384f9b2b76e465c06ad0f39eafde6408ed883bf629f3f3c84024c636c7fc3eeb61fb33bb03393c23eb5050d401535d877d8f37a660b4bf9994b71b55e65b02a30717b799d6beed60ae51a70c9eae4e1ac391363f9d9a5dda9d82679e906ea31242b08a2b88b48abcf108d1d8ccf6435f5a66f862a59fb4a1c68ade20b4ab39bfb54b6cb41a675310f99509197f56f2ddbf58c18e749e9d5d7fafcf04db05c6a46d0752500957580e31e247a850c8306299f5360ca7a852a5de2ae63df4f1a167ab010621fa21320218a3eb9e3ad88e04eb9d8ed4a57055e9c6b55bba9f28520c5eca8fa7b7863df61b1382f35c2b63076acf244bc81f6ad558bb96c7b6ddd066caf5039694e7db19b3ade35ac3b7b555ae4ed5c0fd90219a729b433d23f39deca9f70852dd1ce3e1b445c9d14be1d7dd3e8a9aa8031dcec3ae918f22eccabb7e23856d223550d672950f7b3278e230c7019e19a86e59275562e5b427968953011b51fd6bac313151f0adf3d90559312afde4cace169ae9a2148a756ef3fdf69c4ef0fc406a44c7d3f70cca1f5dccfbb876a9ce272a4428dcb5fe7eedf34aeb67925fef9af40782944806d85744d727873844a34d6a836d6e9fcf296ba5747703550501b1546f43650c8e80c5a6a3bba2b6657ffafa84ee54bf186d0854cb6a23844566e87823266a3f9f81b1b3e4fadafb9524f61fda29df9f85577b51ad58c9b6ba2491b4c9e91731b769b5ecf14b17bc87cc4c8a82feeb6be4a0f3837330f5e0e5f11888f26d781e5a69837b457e278c21553fac6c34fb597410045f991d60488468eec4dea940dcf5dc00ba5f608effa2ef3575df8c9b31e1796326df0879169cb9808cc4199236667453f5fa9240995748176f9ff98186b6e4cbd53444a32631afddf752bed4f2755e76c24185742b76976cf519de5c8b0262a07a506002d02e43a4d617b4d72e6cfb0d8c4155aef8d89f8d3541d21026bfa578c5f7e97a47b2603bf1f5405e776197f661e8d3c16a4d77b741191119efdaaf4560d06370fe13199a525da5e7e9b821ec5f5799297c45c3eb8715809619fe945cc78a8967e24df52e5d67e85bc1d73db843921fe2beecb6cc3a076fb73227e55eb78e58f618c2a9c66dcc85079f4772ebcc11781c936fba9698deec242d6a14f8bbcd51cce20bc91cc5ea62400eec677c3fc2a0883f7cd030fe3fb3f20c63bd82de9ab62b73f339741d50f94049153c3d1adc24b6b7fc6db720ae6e9c3d8993a85793e73c4791ba25344381bdd7508830adad11732db0e9a2ebc6266d7681984b318dcfa8f99898dcbddb9c635bf634db92bb277190e9c6b1fe0d7d27ccd2848196ef427100f6343bce66a3c2ce1a88aac1f722e75f128086c6eb9764e8fcd08bf4688512b2669dd1fc18ed0816b9f9fd026c88da2acc4a43ee8b2a5bd6689625273abf3b796be0c7e319a9c89cf255e933ff11b1ac859b5fb1bad6781afb42d33cba9564f7c0ae1b3b7d6c6c45b2ed8c0273310f5b98bda44b5c11341ffc5fc7a72634fc620a5832c9cf491bb3bf2bd8edb6a84d521701e8e6ffb9f1d55657b919988c5732540e84fae746e5a966299a7429a262b3403fb3f70c4c5524ea18cfb04bd2159cb914e6a98e267ce6971d0efdc5bb636d9cd15681693edb21f764e7c9bb0d5a07869fae818506f353428252aaa20cbf4bd8ce1ebc4a76ce54c5595bba9b244e0e4a7a537607afa38e41368a8c293fdbd8490d93dbb7f82a89a2d65def069a49290ee087d985c099da3763a2dd79dcb09959c392ebda65680a895a745d726f59086e61106b90900000016622668ce9a80418e91609c529c088326b1bd12d6959741cc19d44f2095dd9b2f1b4cc007c0fb26f77ff244c875c46f4f85e6c65e43f2275331001e1440afc31d8af2f404fb14235e5ef484a55631a581be353672e8a9b47455f50cf4b8bd9030e9b4b298b4b43e920389c5aae890d9ec4d128dd1fcb256d06ad807c03dbac97d5d4d128687585574fbdc595b253e70b9fc8dc4f92ad7f36a9a730e3b94db7897394ba7a334cd6d7b79dee3577035700c560ed50cd70a2855ceb7fa58abfe381027437df41ec4a7bf19b01d4a3dd2d11e98e1e6365777d826e41e75d75df7b11e383faf089c7fa02b1cc4dffe3371b7282a5209d22d6593226716e784db16e3f54ed2f84e3f042df105f2dd8bb2f2b3d530d01a90deaae4854a78cad97e7eb00ed3d12f414c86bf4938878ec66f24aba4ee61d41133e66503174081144ae0630f1fabae5400f0b6cc9119b3c4d1a7382570fe9de7bc91d32fdc8f8f212f25560414fe27528db1026a6f71a373766771bd63b45d09e730be1f46bb608c6e43bfb1ac74469ec6b63e3114209a1b023d7fc6f7d0b0624ca7fed9a197d0ea1760302d47d8f749cf4b4711f9096fae58e941f428d3d46c17590d55cb275352b207970ab498a9fc380c0e23943e7bbfaafa9fc50b2b019f4ee955f52ab2938518a643a20e753d9d6c3144ed8ffbb2638a7d6dff9ad3f085a815e99b1334144e33679add52d473d4c7eaf1740e2bbd5469286b78b1f8853d2e24abd329666cd8c496051b7df363184d633abdc206f84d8119ab15ecc43bd4d3dc75c7c7d0e49764139be5d1c6ffa01ac8829e32d5e6d795f2760b55f6d2a4e487d6c8d24a4fd84f5ebd9b4cd8cd3868fe20658f79e22c29b34c07c127d4bde9cf7d1c3fbf92395012968c0923bc1e040d283d128a84d651de93459773d28990ee096f313334dacac65b09b8ecd5ab776f065ccd253c261bbce2ef637e4be0f384bf9d0705fe276be81a2aa8db6b882055ec11df91d13be28bf3e51c4269a6af8edc79fc9cffb97a7477fd121eb188f7a35e50d1830db8c388604030d26e67745f9cdf609d36463f0214a74b4277245215916379f78c8584a474f1eb28e14bdfef3fc02c09846952a23993bc2eeda301d6e4c58346b0a9ab96b59dfd6429bb90258a1fdc38de55443237e3559cccd7547307918ba6cf18091b3bc538da982c05adebeab41a59c2ee78e8c5dd4d4411a91179dcbaafd602ca0333ee6c6668abe24c836bdd5a5261aadac11fd8f1682044a819b6a3cd85015efcb685eede35ef046a11407e939fcfb7b4edb3f046c7d27947ba9a89e4f7068103ebcb0855d4923c4b9ee3ec5d476c4b72c1f6ed8ad1d991f6ef2f0eaa78758fdca67ede06e552b9df7532cc3f1d407fa23d9f5962e0305cedbff19a96b801f6f93a6fcec281fd30f57cffe8a26e2419f4b6a819281b3eb3bc7195e8cf4b8f3080f73c7b1fae8e7e606b5c8bcc493f8c1cae298995241957ee13d4fea8c92e63f16744bebdce3b8c57cb0f7716ccc950ef38c3133a0296ecd512191b8e9b68d3b232d2b7462174ed3d0f1bc6a0f5027fa4f88e99abaf6017f722f916726ec3eb59f19abd628b733654e4a24227889a99d01fb1e1cf7fb60f1d0a4671d5a7d47b56efaee313c53bfcb970e0878865e914f9e1884bee7f4fb787084315656b34c22dbf42aac3ebac5a500f8ce5d9bc47653f9e37a4d58e3c905db02e5ccf89701f9879831ec147baa80f122eeea1e3c9872669b0a29a24ea60e21d87bd51156f1e13e7d5132cec711f665df124cf7182c75103f35ba36ef96d36524a2525c88ae1fbe4192664080fc2735a789ae7f7b7774aaa9f18e6a8cfe46b714aed5d082ccb8001ca6bf33bd3a833681071fe6143a2daef7a637046c5dfeaa89d9285cf9052b02f699681a276f688b473b751d4da6be75a7d142e6b74897ea18812532579a7f495e4b77af68f5057b74e039adbc16624ecaec8aa058c491a1968e9f3d133304e6e1c150b8b10db993ce67e502bec06b239454ab0eb19af034afb8756a06e0550be1a63e31a85fda372bc5d6f2759adabf29d90eed494bed32cca3cbcdb874a982e0a9e0d81708814c88d88ae30344ae1b7527486e18c63c1c5b6fc74a241c63eab588ed78a295471229b1b5c20cc230bc6d81cdbff66b8d901e6d61cd5f385b31d0b492f36ab440b193fa86c9114fca2f2d1a4f73d9a05b1a26822135c86941ec989a6fd3962af599d3e8a0b9d87cf08205a2d4c2498c1682402a629ff583cdd4abd3ce46e76bb5cea903f01a9e88408584991b2bf5633671d9c4303e1045a6224d59dc3bdead4f4db2c555c92b296551d1f79db944d7e632bb6f6ccc93fb3cd69ab6b97e592e41529917fb5bc21226912815717a277e5edb3577519b8fe9f3885f08c6b24d957be1e119b7d592012fedf58c51344317c209d882fcc3212b39f45b0001b620ae8a3756ff1c5567557694a10da1ec3918d935a3a632f82ab8a3a909b663ac2de45d4a24c3e625eb73ba7c6f6460e2742b05cb438008691e2fae34e709b078759b7c766e7c093633b3224ebc2e1d76bc708f439760f31ddb1ac76251093ecb2e6a917e0910a06dde3acfdce6c24cae79944cce15a8fa07abc9ab6de33861abd43ff1e5948d217acc7aa3fd1a561abdddbad0ea60fb5088c8be468227fae9ac182c98de0b8833aba584f05023cbc4593a155463fc98a5e895d3297208913b4af3c81e7749db4580f6b19a247cc1cb15dc57d8cb2bc164f450fd252d2a903fa8e99ff99616ba949f323e6f9b69a1ff7e0ae57f9473164c1f60014a8e296d3bca29488346ea0220b8d9937a04d0e5a06a8ac25020c5e63c3f887c3c586601b652f9e2bc97ad88a8f1b895ec380da4b525472e290cf29a3ded06308fac229da619325e5221912a828e03e8ded81df5f709b452ce392a3a39c1aadd4612f8acf6247f4dcd082c1253f65279364c99a97757816a86ecddc05ad48a32158565d44aef33c0a6768fcb7af6c9ec8618efa0e8680761d00052f65a80a327bc74a1ad5975621e6c74e4e7b471c882ed63ac777eb34c6346cf603cbdfc14e76198fa83af5a742fbf385c9d528e6586653f24ed5374d70a4a5ea1ac7b4b04b49635f84b18a281921671df2bdc037ca182b9b645bc250c2001c36a46e8a4e4e850acf535edde1b4a233269d8ef7738d5532c75c71670921f8b4ea656ceb4a4066a04bb8a540988cc14e938b141fe51bf0d647de78bedd148cde21eff2428ebac2e4b40c466f2bac3100a16ba6fcffe361e752873c1e92104582ab48dedb3b93ddd29d81fac27b84e9a2538468f91172171e710aa992f3d488360be5f1a8ebf06223ff30d55953beea4abb0b3f6364834be74e9c6b6cf1a498bea069834892678217d12a0196df373e84e7c5c3c8e33d5666892bf2405f5f16203d5d8058f9c9ff54e7cdb429d2dddd14fd0009a9c36e4c4585b373228eec0fdc4d156950e4810f44867968937b4c8efeeebc32737b5a8a1a09c0308e65d528c877d3fa494b1c323baa49fe1c451a4fe1d4badf29e39d5387478b99f17f37fbe2fcb0fb1855a62476bcda1121a38a086c529fbe7b5764e2ae6c686a02051619740baada5a2fb76dc37f4ad80757dcaded49cb38e56674b4797ed403261d83a57832062c9dfc138c447d2543dfb21b44b423ce536b7472342ae0f788a36ea087f500b6476181d5379d7e8d70d8311e9e020f95750d314ab4e2fd4b8229cb354eba745eea10c66c7d0d1128fdfe91d6c7b1d0489264861f5404f6319a9ddc0b1bd0288b62dd76b79f86f0588e3a353b3098e1629de6808c2dc8ee7e432d3f7a4cabf102ad524ce4c6a3a2c962675e985378d904c4d6efade29e3f95ffe80a984d932e53643da5f622d535de5887b04c9c7616f31a16d279f26c02213532e3798645e4a09aa0785ab6e330818140347a2a80abd1d8e271bbf916c492125e914830f28619536ec7a1c842331ef2921b267e3666c96a122447e30928db0d29c958f9e492b8568734eb7f84ccddb1e5dbc0b6cc16c1fda02a524654a0ef8d4d01aad02f1a8fba9dacdb1380e38637203030ef1a8115d62c7c72ac7f7bf74b4decbefdc0f101d804c7f42e68ee44bbaed6fc36f0251b5ae9f42853d0954e46900fd75972f9af23cdf864f2f285f0f31521c5ad6e549084734f8dd510919aeb820ebd723b7ed30a89d6e2af2df8c4d796eb29c508b7306512d698cc153f0d35540bf757f3e25d4c573e71c4b4c8402bde20481d3459f11b477bfc5dab01281fb8e6c76cdad4974c14e0d2cdd93ab64b0810c18e8346ee495d0fc49f3b97a3a40f2d445777951521bd638000808f2c258daa20461eaeb98ccfc952bcd10364ac586843eef5096113b62e57828e5326f752431839cd9e71e13a248873c61065cf311cd6a3b37c12d952474fc8022fb11031d8091622ced80b12018f8a80e84d883c3749a5fac55c6f05e4ea352bc954fea3299aab478c2ae73e787c6dad3df26bd9317c7569f752b956fd806dd1f6d82df9ac538b7c404d1b97402c8ed3e90e9462b6a8bbae259cf20648872b549e01721da0adc082d0f4e03cd38ac5ad787beea3cc3ae43966a1402c7e54a5dd3d3d0cc62ad3a8283b74c2d3779375bae563de07ea3b1945c0bbce91fe1a824e04906255f4165f4e3d727ecca00e9abc587de38b825c6c7f86f4409642d6684205f90a03a880bd317c5aec106a461f3f158f152f26f7b4747213f631c5eb27f2b05ceb5da505ba05e82478e53021c484b08859dbccca5e1e6e38115995db6ba34891a604ab46574f8455f44a0e40658d944110a27908fc9d3b2147d2b3cad2bd9edae0a463b5800cc32f6f944cc7f35e06d67dc7fb227e3dffe2b11c29f8003a8aefd7469ae7488b2af5f3e4a843d40ec183262fa37d82a50cfbebc77253ac7259212fc492a6c33cc4fbc86e78f506a74be94e5edb9e6eb283a9f8a83101f3b3f13429c4a0032a0954c18b3455d2243a2c84ce1c9e8345a2d75f42ba376985fbabd979ffcd97aa6ed6452f1e1fd42a13e8f01271136652de2148fb54af4f3b93813014cfb5476423b0ec06172e0eeba8503a4e16faff749f8fc9b12a822ffae780416d3678432c0d658d5a712d2397291acf14d12412df8e9c353858b7fefbfe3bfb90699c5a4ea50cb895211e35170247eca1d44803beed64a61357cb0fc1f5babacfbac2c027ab56c7f010246f9bd5214b3349e751ab8a6dd7e69eebcf564684fe29c1e035f01caee11cd6a49dbe11a05920f41d3d9ac59d03483a33714603c0d1b5fe38ba9f517d170ded57fcd394bfe25e660e38a089993301ad58ae20cffb4a8d78f987e5fadc6be770249eae31a65c0d5b40156c225c0e1889b5c3a41b13597d7b6f290086f0f2f682e7c63c6f0a3f3b2fa88846cf0ac84b78a54a29c8155a0db21ed3e823d20284cedf75fdb40f6fd3e1099981cbc5f119846bd4ec29e55d0178e9a227b013519c28bdf8e9e04b5e4957719188ecc9331f598bb0719cb97c2408e884601c011b01d86652ba537c1f8713c608dad4994d4ed7f786771cfc51f0495406353b4850b77e9dea4fd684cfeaf6b2763499be4df9b6fb4c624b320da8d84ea25793aee5bd16bfaf5406cfded9f58c3f535f54c03bb1b20f4106a2465dcc3a758c1f1a924e567b99feda45d0742f073558db72c4eac0b729ba726fa086c21b8f4464b908c84e744c0c27a67911889b77c5e5dd8e87106825d939207da3a74289a197174ff2c1cd89d1659f398821f8f2cf0c81dbba69d6933896913904ced56cc50acbd337c36dacf175b264b9e9518d856ccccaaab6d0d329eee8383474e434a2d68c51256f57900e18adb4799ffc2f45fe0f550cd49242f494b9c45e16ef1c005e31f8523f2eb6c4598ccbed376f3a638264fc6fb128a2e63c8490ee3c5b2b2c8ac19f647de6e22ec7574a67ea49c9a5c404fa7b39ad98d2d017f2056239df839a2719be27d993767c1b46decdea2e31f4c8e73d7514bbae8f026048754fdae46017eae25ae6ca1288f3441aa6d0f962f1c62eea19663c8fb895148b36ef2ee1afa363d50f3053ffdcbda2e96e13c619b13b9fa6b31dca929126cf3bf1be8c9374c6fa652bae273679924172c1e4dd4e3f9a5f892532138d91375438c1dc98434d238ec81166aa28f878ef9f130676f55e3ecc808f718e7cedbf40dcb270368762d8", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 19m40.247047492s ago: executing program 2 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 19m38.752599204s ago: executing program 2 (id=576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 19m34.936418308s ago: executing program 2 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 19m34.120466954s ago: executing program 33 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 19m33.148053999s ago: executing program 1 (id=599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 19m31.891421667s ago: executing program 1 (id=600): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003904000000000000200000000000", @ANYRES32=r3, @ANYBLOB="01980000000000001c0012800b00010062726964676500000c00028005002a0001"], 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x48000, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 19m31.342465872s ago: executing program 1 (id=605): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b) r1 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ptrace$setregset(0x4205, r1, 0x200, 0x0) 19m28.156278185s ago: executing program 1 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2067012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0xc000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 19m27.42342406s ago: executing program 1 (id=613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 19m25.261378865s ago: executing program 1 (id=618): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 19m13.512550666s ago: executing program 5 (id=637): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000440)={0x0, 0x5352, 0x8, 0x2000, 0xfffffffd}, &(0x7f0000ffe000), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 19m12.124642166s ago: executing program 5 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) 19m10.497158372s ago: executing program 5 (id=640): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000680)={0x1, &(0x7f00000005c0)=[{0xaf53, 0x0, 0x80, 0x3}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8, 0x7fffffff}, {0x200003c, 0x19e7a6a8}], 0xee01}, 0x18, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, 0x0, 0x0, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 19m10.188247224s ago: executing program 34 (id=618): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 19m9.498615651s ago: executing program 5 (id=644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000380)='wg2\x00', 0x3) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) 19m9.070723536s ago: executing program 5 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 19m7.385194988s ago: executing program 5 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffc, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) 18m52.167464625s ago: executing program 35 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffc, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) 4m29.397410678s ago: executing program 0 (id=2250): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) 4m29.212891543s ago: executing program 0 (id=2254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4m27.211158159s ago: executing program 0 (id=2259): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140000001e000101000000000000000007"], 0x14}], 0x1}, 0x0) 4m26.550753205s ago: executing program 0 (id=2263): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m26.261266297s ago: executing program 0 (id=2267): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010102}}, 0x1e) 4m23.584579726s ago: executing program 0 (id=2288): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x5, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="9e881807001a", 0x0, 0x0, 0x12, 0x0, 0x0}) 4m23.085086554s ago: executing program 36 (id=2288): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x5, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="9e881807001a", 0x0, 0x0, 0x12, 0x0, 0x0}) 1m22.28501146s ago: executing program 6 (id=3414): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1m20.030377634s ago: executing program 6 (id=3425): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r1 = fanotify_init(0x2, 0x1000) fanotify_mark(r1, 0x541, 0x4000002b, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 1m19.471844295s ago: executing program 7 (id=3428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x60343, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m19.438172706s ago: executing program 6 (id=3429): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x6, 0x4) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000001a40)) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 1m18.850232912s ago: executing program 6 (id=3433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffd, @empty, 0x2}, 0x1c) 1m18.473161642s ago: executing program 6 (id=3434): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x5, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1m17.636948819s ago: executing program 6 (id=3438): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) 1m17.376225409s ago: executing program 7 (id=3439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1m7.699471636s ago: executing program 7 (id=3444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0x0, 0x40000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1m7.309293322s ago: executing program 7 (id=3446): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2000, 0x0) 1m6.786457631s ago: executing program 7 (id=3449): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) 1m6.320030441s ago: executing program 7 (id=3452): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040810) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1m2.757840393s ago: executing program 9 (id=3462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0b00be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m2.273013099s ago: executing program 37 (id=3438): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) 1m1.037966315s ago: executing program 4 (id=3466): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000500)="00a654f794c8a97555e43e252f35e903afb67fa5075d7e96332bb9a8fd0224ffbd04833254af50240c3bde4e39e6bde9fe95deea9ceb171864045c1b903260253d68034856edf461110ebd4440fedb2d44fca62efcf3c239adf8f877f2db55d10a8e97483516fe0cea9dfa598d5b85c0b3c98d3e9dd9e77376a2d3caa2db0407c831df4fdc91", 0x86}], 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b5128ed271c679583d00", 0x3f, 0x7}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/150, 0x96}], 0x1) 1m0.090638459s ago: executing program 9 (id=3468): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 58.514364s ago: executing program 4 (id=3469): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 57.324077422s ago: executing program 9 (id=3470): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000000db, 0x20044804) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 54.014901074s ago: executing program 9 (id=3473): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x8000) sendmsg$nl_xfrm(r0, 0x0, 0x0) 52.951203957s ago: executing program 4 (id=3475): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="ddea382fe5537f3d2fb49c4812b017ff934a2ddcd24d5fd5c81691cc5aa3bf511c976eb4bf242154d6ce2d659ded56e5fcb9e30482f646f74754697e6c295d2c3aa749d9b7b6f726a240a036ea41b65d694c35b3b88482fbdec4e1f8c3fb21f9547dd2c030532e185f9d066b194f2967a99fbf1b7c1e28e80cef223bb83cf08e0e7fd422472a6c2e3cc84af917f9f263607277cded34d075d922fc94097a778dfdede31ca69a7842431ccfebd0cac561e165816fe998d19761ef45bf43200b9fff2f808b8455cd8c4a1334a581442dd4b4f1797bd573b0c1b9e69b69b8fdb6348bfd9d0046219d10e89b25d0a386286dbcddfde1592f9d638a90676cc7ee1d90fe427a8294896bb71718f0f5611ae7780f6e428e537ca207fd75be51e1f497ca0c46b0de9455902f19da63a6dc42e180b07135ee29e32d8126116e0760c261adb57b7940494d3d22e411f58259bb55d39216215e5a9307fa53615ffc3366ddf04f6d162a2dc4b95ae7ace91bbabb975f270960a0aa0d84226ac0cee09ca53e64a20ce93f25171d9bac6a924bd88c2d0cec7e98b623cbe3273775c287a4df4e788b5b6d31239fcbc7e9c395e116a46c5ed3b5ce1d8f00e9319419e7c1c9727211398688f2ff6f1ef98da7e2e12f4c7b5446a4c2c38dad1d72b9b27b8a02d730bbca9865fdc3ee266ade9389a22c239bf4f7794dd2a007d947a2e7c23fbfb2cf187db4fc9216e692ff1d229dd230d780b5f8826d703b525e98b14e6968bdcb135fc562c1249885276451f508293da724968c92e9332564da27289460e9b5f8841d797cec69ad050d29f265d54ff713339ff94474dead800bdd4441ad970786b532becb4507b2dad036aeefaa71ad4a66713b7c4ae9788d998171787843be7a0cb3f695bd1fc4cb615af198266ccef28a3a1d85116c366c0f64ef16e8fe7535b968b436574f6c1af28667d7acadc85b3db8c4c00f26b6a59ba98bcabc59dd389dc0dba675fe71bd1948cf9b850011f3da1bb1f9a1041027572be9afe39b1e20db89d41bc609edf9db5a3b03ab9284f43b912d426653329364008cdb27921da3b198e2da95f46c194a1d6471d2930a8514b17efe24e52ae87ef3ee62e2e1f23b7680e4790ef1c509dfa8ace6f4eaaceaa0c8513ede96984847e04bed5fc026f4dbb0942a932f54c375c2c24e640370dd6540fb775e46994b6897b959d19c3d15a431e274c70868193822f634370eb2effec4a1005a998454e1ceac6d418b66441572b7eb5bde3e09bcb35cd51f54859ffbbd242c84e603f14c876c5f9f862f309f3fb597c55bb9738ef476e59842baca084c7ed594b2e2741546e7c6d4e014a64b8c26dbea3cea6f00825674e577147597c5c93c461f0cf5e083099d7b21a64f577c289a39c71c2dc304967bfbbb274b2cc7076cd1ead5d02012cffe8a5072d26dc6ec9b748af2fd5b4dc322bd3e378901844db0f824f5564bdf374b339c067d964e3706f1245448e20b9ad144122e6d90bd24a73c9b9ee37c985b2770f6c2dda56b61b63ba185beb32674d4908be4c2e9d329e2fc34372e0b18a9858d24b63ff5e3f5f709752d2b4a86ba572c0273beca9db44fe5025ac6b2e971609cf4dac54fc3276325f31fabb933c4b4967f338bdba205a01f81431830e447bcbed44c09bd743a119631eb101a3eed41ae979a62cf99842a7673dbc551d235237ca0c870fdc618c4dd478db3abc4369138812b7a18860970c463ca84f172fbceb7a3f121298e5b875b0bea6d50d11c2f0a49133189740239076f332b92b31a7e7a70f0e1b4e0fe5fbb3e05c75688ea7cac53abaf8a3186fbc12a308ea7e618807b9a76d549dd2bc3af69e20f9e1a7abc4c4490e0994847d90b014cac74cbbb7e6c623209f764d8eab02a957a3db89b07baf4ebfd6ed2adc7096e35eabe40019c67ad2f955acbaebfd7694d814c708a7c1898a9caf174e219dd335eab1e39e99c391e3dea3eaf16c240aa0c396f5ed0664b49df7a8da00205f9bd3c668c05212375bd730f3b6fcd98d07445b8dbf332acbf2fb2b249b8eb98582f7c54a8d498bfddecac3e93b10d4b32de8d14e747076c312e90c7359fc7725e619c6f815731771d9ec540edcf72644e036c86384d471b233c43ecdf4ebadf6d5efd37f5bc31bbb53979b2703f0cc794c0e2c11f0898b3c1353bf92d32b693129eb31a0d3e4fbe5cc1f9f73bb00d7138ac9a3110fd5afdf790100e9a131972e2bb5ec292a7b8f5ddf293e75cc1e281a0272f0fb00a47b63994ae5ed1fed1aad586fbb68d0db726572cc758c35b6d2152fc6b90378262beda9e36311aa87ca6e3cdbf996084bbbd191f154018297ad33d317c40b6b90b2dae688ccea76256535edf8d88d2cb86405d0e2685e5ef573ea77f7cef8c01d9b1af5a7f5ce36552cacd07a351d08579c0d1766fa8963fb0f50e855ac7db622cc5c151aa76db4801f24d8da53ffe59a7a3610bf4df8b5c02ec667d0d55a2450cc8f65129a1e3f27091e6911c9d6b800a06ef70460061195f5111596f1776e2fee053509b494bf569823b70853394552c145489a539c045f794da9f525edf43cf8740873c127e4521d1d402318ca30ccc12a1e9b2399cf59a757dcd29af93aed6c23ff0231d5c5efae9f0d352c2c3cb89c2272a75623fcf5d8de8da4d523e7789637903dc528a4a562f4c828b13764f03de595174800e466b2c0fc5dc5eb3db400801a9ffae88600286d589def10c72377790e1728332804d077ef35acb416dd24135480b945892b761acdc693a308e9d415edef0da28912529341b88f0c15a0292587a40601c79588d286c307901c4ff66e3ff3ce926f20b429d5ac7159dcebff2ec418682808d62fca9a2e49a5ac46882866a606510b18b41062b4af7909e2cc935a22390b94db1b8808eae17ec0ea2dccc008e2ffa59409c61c8846d7a9bc15e43e451dad887b855f6760ed3b511bbed2606c829e2f0aa6fd4408969d9ea27ef4fe4d6918757d408d47a041f6cc46a8cfbb9a3945d68268faad29572cb5b7f4af76323a395f663702b9cf55b908e36e62473fb170398bb8fdbe7b39c11d14dfb6e695f0e9328b84ee86e886f056bd11efa95915c6f6be1a3ad04998efb5429710c3f404381032a228d79a9e7d9f8942a6dfca1cff0c5b4095d186da1bd924c78e0940f0a83a43808f6f4b4e9747c181bb16dba5989974d96bfa5ade7320cf2aece6fcde44b7c4669222be299e0240f1c0113c66b71d7cb097b2591709b347517dc06c743cb627c5848a97c1b7d095efd40a44ab9cf6a42c03ddb55897a19d3632d77776a77fc4c8d2a070782c6223f236a38c4dc37da731ed304ccb119c2d9b23e4fa7ac1b52829001f0ddf5e9e4f1176095e437aae7a8e66243927a026aa4bedd9602ee89c6eb62ff300529c7f770d3d49d9ce4e98d8b3d0f7efad49f6015766e6085795d246990920c7356a8dde4eee420a3fc032e9d361b111e1b1edc2d100e1eb3edba6a55d17700c75c5a8516509b81a27f13df9113fddacbe85f635b0d2e494f2c1a46f5018be92be4f1c070a5c954141d50efd048ced35268c5b4851ac5b01c43ba8c1d22209d96ba596a83828f40f3ff649883c45c7cf62307b26544650ca71efe283877e6e560c1ff3876d4f6cce0efd5f08cb074d19a3d767f9bb7788004663328f86b2d6e54564d797fb7626a609d5c823ee9e8f11ca55085152c64f0ba446a99d61dc0b79e26758144601c9fb5b75da79489bc4be86e9315ad26b983269d845c9f2974105a7f89a44671be6bc6fd48c9634c2a849e80c58955b4b82577746ba1e281b41d51b0e65a4d3b7c368a676a07933ed11c754d41d0cd33d2bbb12a53d83772b120318ae0896829c9b1b31055e1fa00a40d7392b8d9cf0eb4bf253776764fbdb0f2365c7696498080296152c4d5d6d0e83e853db63fbcdf0f2962a846093db9b6564257d396d280af560c8bae9c30ca27ba2c920e83db8fc1cf8474038fbb103e0664d01c9bddd34106dc97e4b331969054871e544bb0566905d764940ef983a429bb0eba8e9b4c2533da8efd80bfb710da5587623f284d272f4eab19a3ec6015ca8bfcca60a2163f2a5c2b1c35a3524352273a5beb992066e4e3811ad900dc3238666678f213eecb033df508c71cdd05c999d4985d0774e936d63ef994578d53320664a204acbfec7c01ae4fdfc0b68580cf6a72c00d8c8b24e3a5baec97952fae115e3132e72ec9b7f25b12fbbe99b5439a33f4854745c0cba03dd74043fa30a9363a8928aca3ab50a30ec501b45f3baac7d5bc8c0db7e106a2bf762e6669dd5c952e1a9a2da0ffb22666d7e43f59cad572603301a6e19e6343c7f6036ea7cbee16871724d37711634f985495a3b8eb0aeec33377a90b1d9033f6ded9b4bc7fbb3879dfc5f17aaa7e2328536556c856f69180c33fa860fd4176951b1aa3e055a795aff1e6c2b78e1a2fb3449d6748dc0cee93af2fa40723e7495b5354ad8a38a3142772d1bf90ed47d3b871a78a74adcd76dce513aa8c6ed069701e0032494b5a20e74e17146ade49d333c0377e3f7f70d857eab73011b0a6c16b4825fc816d24a644ecb620292c41db414d4e7554e0181da574df59a1b1ef5577b8b12532aa10c324d73bf706b186c8e9063b8d6e7ecf29fcc3dfdd64c823c40fafa882687c8c5aae2f0ac889ee6b6d0dc60a6d378553a9d7fee8cd005bb1dd793f0e56f079fc5f53e99c2b7093527399a9f00312b43e81cf60e7338836369bc60fa45253ab2166655a7cf72a347fe2f7ccb5aa9dfb04f8eeb89ba400a40d266931901e0d1f984e651696bf58b709cd24314be5cb9a823aa332cd768387128f3343ffaea64f41dc0a2f8c02e60dff7e2d0e85eb3ddec0c2697223272995c4ab67c66b2a2e9d68db306a8160cfbf495e67f1ddb74324a0e1832776653c992df5edd6ad98930a0b6ca2b78dcd6f3c0cd2dda1ec783fd4955e023086d7860e0fc2f61b4d2ba88c477e959888cd24a4efe45d3ed48f2afc44e55b81dfafe03c88c4c27e5ec8e0a18533cc00709ec9e1cad214ee705e08e84bf7cd6e3c9753aed11028fa5e9f9ce596b1db09e61696b84e0cef75fea80c34132f54d830e2eb3b338f4bdaedea34bceb790af70d8aded8da4460c7c3038dfe73f623f16734d830d73e5926321e87fa91321388e63ca3b2ca73fd4e70e9e9e291f98266bc775ebbfbd1c427a0f2b1bab10952c8064488e7d7aae4c8e7b89ab03d050f82d9971f7641f65d07c3426af91639a12e639ed2a7b8edfecd1d3480252ee99e7013e25e1135de798294bd0deab950d36ae92ef357c9e03a8b3ef575a0f99f1cd15c94f156856725324f76b0e3e8bcd1d3f016c4cde1c8349da5c2d875032464a943153cf40e5f025d711eda841d2b337396498d2a0fbb85f9fc9e485079dd1e8331824f6fa2361a39ebf1cb2c8f90e4838e66c39489135e7670b280b5023c26ba6387c8850dc6c5a19a31521df737078fcf379472041c9686675b6903e6e73dead47253019deaf4084a2b801a5921262db9f123449ee404649369a3daa36831fc56e798548f44b30ca46162e542e5e21f922c0ab02e947ab42bb3a7ef3b806a39fb8e7bbe839db9881a3b64bc17a35f8c7a03cc9f5938c313b1613d6ff205f13dd26343dfcd221e8feb2a53197493ff34306b9968df5910c4685f5890255c82a0e06db506e6fc243a39e445b67c04cfa8d442a2f0d5b376ab1d8d5571a6512ef5fb19ab8978498f9fc8d45f4151338fe50912d485537651e015b4427a66a052aad9d2e2ba1ffd92329290a854bd1c95ab51a0be5b4180d806b22bc5608a91c06a5b1574d257802eaba1183fc83398d5af88872bb76a6b059930c52e960253b9e63eb0731c36c69af44f48fdee37b2e8ad889e531ed3b1d964675214cc11269063c50d9ff554c6df6304304f3a8c7f721712ec9fe7617fb9b1b5b195761496bd13017d683e3f796e679f5f6f9368457877c4da665503e4657d8ca739d7b33a94c6c05333a4ddb25ff631385bcea2058ed87975160d52cb708f79d40de512f6fabcac8e269439a381b0b7191a099a772588e568548cb1cac50bf2d49583bb8b87a840f4b9e3e733ba3aed87866caa47809293cdc064777716acd348fa8e2bf0a4a2c768240963ccf8e59e239ffbcb390a3bd8cd29ac9b5a88d0280730a2f3daeef14042f743c367b2277d630fae1c5b65b08020e2569a8b1ed36d7a8e42ec974118c4c47c3a176dc976b70a494bc236c74f2fccda83d8bcc09792979977cb5636192fd70ef654eeebc455327fa35cf5aa1eca88a22908b33c4f1684e55277b339d59eda72adad262053e207ce8dae1c268d4a96ef6d5bd600d6c30863567ba52f4ce917db043ff7ecafa80cc292f9d9684eb7e497d289e216f25fd512ff37d301e4bf12caa55105d815f1dbba4fcaf4158ce9b73f5529b458ad635f08558904b020176027d72a6b53e0465690ac261a1801ab0d93121caa466b9b2bf778719c8552f5d7ad8e87960602d727616e222a24d40d61d0036374916045f6b3c4584ddaeba98dd410a9bf94c2b56dbdada7c283c334e233cdf63912cfb5d2d4b5004a5161ca2caa5ba0292ae6a8cdbce0767b7d4a2b994acfb0684ddf2bfa85afec15e0a1221287fa806aef52283beb5793610188baed3350762cf59df01b9209351d6005333f5bf9a9365ede67554d19ea4c62c25dca92dc19b2c05118109ed1e06702643dbdb32634f6ca4f1ec1f79a096353b8eb3d35afb5195c5402bdd8d3b8893d2d5b57d9ec9868451a22af109f7ea9eb14d15ef92b240bb78dc68652cfe68808170a51f67fcf971cf70dd3f3719b017c75fa7eb62abb8fe8df887f2e43e6bae1d955dfb271c47ba078a4f7fa997eff74ffc70be40059f7257fd6e40c73651de6d16334f509a7e52449795fff4d3c7dd6c053fd1a85db6ecb87964af078382e6bc3b7edc51b00b17400573b3f7efd80dde42f8a9121d3b7d6fe2fa25ce7d01a1e44b34fa3ae9ca94deb02caf550e9f751b86e4cbe2354093b175959dedf31825241cbb131f6b829547300ffc9af659bcee1261696f584c809cc59f69739b02c642786d905a949e229785b625b6108a8b7313118418be3f48e5de6b738c3f03f7d8390f9348a9ea0ddb286816134c963a808b5fd80e19fd5b75b9f08028752b87e89ef430ca652455f9995951300eb0c1552adfabf5155cf6ddf0070296e16cb4e668cd682f622a83f91eb4a12271d4e0999bdedb13b53db6d004eb6f6316d80e4341192b13605310c175b9134d7687aaad089a2891ebeff9388a982b48952ed9eed207bd545f02e4f11de27f61793513017d14bffe1c6471c102b4fb4b01b82d2d2bbdc1818b7dab9ad2690107f12f5ef2ca6835307222e0993e2b68f4e9ec4e2fa46425c67e3e9ccf085170685a2b4458724ff7e2830cbf90946d4b5c9fab6fd980ed072361fafaeb29916d60eb52e778fc0d0a9b51197c15472e1124876e849d943b913c1f6d247b699d20fcc24f2c83771c449abb7933dcecd188b96522969db4711f72917feb31fb1ec21edd3b57adb53811f2559129677a93467f468ed7153106021f3481f1e8ca1f80b32d26a8439a3c286370f7efc414ec41ecbb15b7c64f096d94aa399f690b05e5575da5895b5930abdd642bdbfd39dae601a5f7092b4227f2159b6daf7a05b9cf3508ace62996bd6a591d4d90ed7910c6bdcd2752a86f783bcc45c67bfc10725e933b090819adea0dc7210dd5a90923304769df9c652609b8dfaed467783f3e104cbcc758436f861c838d6ae70633a76903fb40d78fd74e91a7fd9a4cb50458553b249d79b2c239ff245edf5aedd54f6fea729d3732adf647e455e5f82c31f6832fc3fc8a1b72602dc67cb31eaa10f78b2404f773493e9a2ba01d40b063ece97c8f132200a8ff2dd067bf121ca0d164926d21938dc01b5592b6907828af1da05956f9c1f1fa26c52ec04e7d67d0544d9bbfc7250ed1433d74d24d8ec3083c3aff9e72e596332627077791f5bf59698b3e5a82d59e285f89fb1101ba1565469b1ae4b2775c340afe1d1762824baf811840b0a1bd934ef70eeccc83a146afa21a434882bdb0ee773a9be10a0ca670d77fe5756b494c4932c90d7e2a41df4b621c70a6df147c950f4eaba4bfa80ce2105a76b56b96a62a5b1cda6b86725c04e8a308d2390e525494874cbe0c6f6b5f7a0f9366e351caa57093bb8aa1fa6a3d46e6575109c18ff19ad336ba17468f2647aaeb6d0c021c2e8fa836ac05197216fb816fe54f494fe589267cbebcccd154c138360c2a82fb918606413262ba0d36423ed57dc0090c79dd15e0e3c00c9d7fdd3ec4d0c58e6f9635c7f13e3d72f8c17d753a6e0ee3a875ed97d8204b816bbfe9c4f464b119735ab43599a8f77d37aa683b9a0b95da834360718c40a22b1190088d0a6173898c9d4a1d0d4199646b05bf01db7de749f13d8b1f625dc473756b9be3f6fe5e4a740fe7d4df362a9965a186ccd7332af494a579de966199f63f0926481e26ade83fcebcf15437126f1212abdf8f8f6251b03ce7c575f7b9175fc525bf50c5f99ba6b1ccd0538274786b7bc1c892de7ffb7b688f8e5aec8877a36350772db1209636a60b43a2d58e7ecebe5467e7a82454557ba49c2bb416ec1fa5ce54855b2626d917241ace6a590981e5ad26636aa99445cdcb852aa011bd97d285a219480af73baa70150a46d9c838df66505e88cd4f99e206538e7de14c1d09c8f8a93f55723cd7001947e5710be5489956441796c1c27278849d58cb142e090efa98bbaf239a9e98f3281cc8dada3f3051e3f4337583b35268dd5bcef134cf535ac19292e62b446afff1bfdc978ba1a68b7279e3f47d9a26ff5c612bd9e2df2cb5276a18b91ce42f64efa81baf6b85a4413cd09e0a2c3abcda08c6b96e0e933aec80313cf5a0a73bc491f9a90fc6f1ef78f7e383ba7a1dec58c15d8f2af942fbb74dfe17bc34ae218d0c852e57c3058fc12dfcc5ad3b35e4a6f8628d9b60df08db1d533eda8eb0988f07b22662f10848c736ce59787b7dae70d8dad9c458fbe5408d56cc6439b661870fdcaa7beaeec8dd0323099af8c68da6cf118d58fe807a51cd6a9ae97e298a3cff83876363089b28dde888a567b60d8cd7f4b25250b680df626e9a92635878c9c6f012c84a6047d47858b4bb9d77b489e6f829564ab76e0532b972931bb97b53a70aceb7c2b2448dc8d0864b5c18dc33203d31384765769af03383674f31cfc09853ee63844b0ac6c0bd349bfc7d55bbb591d32d3f6412aea2a05a1a976647ca1ba22b2463cda5066a678b2e232bc6ae22566d1e6b52e5e667562df7ba51f2bb9efbe6f4cc800fd2fa68f2bc61ae8cc7fe968b5d60e94d9de7cbd5056be82748de1ac19fae0cae985a7fb4ff0776860e86c0d9763826b7a99d205a003a384df1f35d5335302ac4782efd4237dcc944cc6388444def4b55e68e33b94030f41a308c5d904c1742e86209f1bef06512c5b5e1067fa709316d2084041f51bc9bd0cbf7210e34480ddce44a1bf2e0603edda369e8bdbaaac012512c835fe0661d9ccec0b0b05225a107cc8e00091c75120d09c19856dbc19baaedcd1e42b3126c321428a1392680e0cbbaa286f545d9b7b66d2953680c6c9345a3727fd0df3a95708dd87e7cad5c7fc606a2e615edcdf9df2515eaa36fe3c72866990d5da6729e2bb85e0eede8c001ee58505b4aab81d1515f2cbac5d9c3f935273d03120fa081137c600a45e6e3053a7a6e85d6013028b2300f9778d032e8f93ec997755596434b17f82fc09078279fbf9d10ead42e16910f5f82784c783bd2027636b986e5fe46414191e017436f1c83e353e0f476259b129309e8f12b102e05b548cc4da0fda1dd68077970af51f893eeed8c8acf6b0ca9a6c0e557203d5e5a4b06803c96c1b5dd701464a89963ad1574361e58b6e3b45bd05e19aed29002d52728e977460f4f0c9d58fbc9e45cc478c645c3aa792ff90a18eaf399ed01b02e194d29589e52818d6d3c2ba26ca477ce0c372b7e46ef1f5775f1d4b764ca7508b015892197495d863fe49276122844e1372f48a9bf4ed15be59f47355e36acde9bd3b289dd51a1e9a30b1e5a24deb005e461af1e8d063cc90e3337855af5a3dd2ac8907d7787e2ddd23abbecade7ef63a654b5a8715ce16d7e654e2be35e0e0705cb18953610d2200b368734cc881ecc6b68f31b2562c634e7dcef4100810d045fc8594cecad7e792d64a9970dc9b888756a37d3b436fc289e318db197670b95c448edb6c31d6d0ff6fa062571f4a57d579d3e5cf5eb8e2965c45253e3ef5a3b593d764f4cc11440b970aa20f1caf20cc6d6194e9a0bb520130cf004fb517d488cd5a7803649ebe03b171f3b97b9f5fa4a1c2d89977c05fb661ae6d6728f0594416c27819bd3ade0083653fa686c870308b9320e4394432f2e96b06401cd16020f89d26b15f16309fd2ec5d81619f15f6581299c4193bedb4d0b078aed6a822275c540e9b40d8415478ae0940510fc46c330a66e7746bd08b8859aafa3c65e8860f3fb2846ad154f7c6c4e1e3dc1b65e5250769a76877ffeeac1005b2e01bf4bdf8d7893ac38df364f2db3d2463b0b7b8a25c99975aedd7e009644ec7ff708821ffacfce270f5ee4485ec205d9371698b6bf1d0bcd542cbc826f468e6153f72bb40114145b4c2ccfbb45dba5c2f0634d8f3a21ec74e7d3b74aa271c5412fc0b7459323ca4c3bd91d378c8daf56f3f56c26096076eb42f392a1107e4f68f6144100ca48c44b4d59760fdab3704a1fa489ca5fb4de75503f8e3e21e5369a6b41ae2bf230780d82a0d0782a60a4b0d645dc57c3344b8b0efb7be4e0b8a2d9d6481aac8ee9c7eed3211c1778bd743f55388e69914387d8d3550a071c32455e7a19bc6c4c623da7c4dceced5afbbcd7f8b785a7a9adba7717f8faeeb3919c54daa0423214da53ec186112fa092b2539ee17a3bd8e9c0599d901ed6976b30ec7fa1826442a933111687cbfb8cc72e2c45f5aaed6d593412b186ccd49968ab563d73e2c53cf44532caf8427f319a4130670106294a71c49872181049caa96ec36c004c305e8871e99e351012bf4397f9ef9b846218d66d7f13864775ec54e25165299c9b513b023845842fa8cb745e0341e737bee3f173eafc976bf4a522ea76fa44afdc740aef19f9990e90ee842e6f19c7808844540da83b2b2b3ed782f5c063e2ec2b1ff537a9576ff2693041c506cdfd08236ca087133e4ce9736fe5f2ff344f979ea8122df6b76b36d406b06aab1d58d22759e4ab5d1fae3fb73adbf0d79ee0ac71f7a14c3abda11e629a49bb7a6463a05d35ba12be7aaf3be2df184089fbc109d68fe6850032dee49685a0ab82fc440db66ea890a87ce713535536c26a912e7cba2c20dd9ee3057e93997a4c8872a25907cda69bada9c9e6ef90364d224b5cbffe01d4ab8825657c032507cdd17324b8ee8df720cbd6751619760d0b976977bc830e15b9dd7402cbcd620cb175c2cfb4078d21f8d87a104c559c335a7443b4a2", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x3, {0x7, 0x2b, 0x9, 0xffffffffc0005400, 0x1, 0x1, 0xfffffffc, 0x9, 0x0, 0x0, 0x4, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x5d4}, 0x18) 52.108283508s ago: executing program 9 (id=3476): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 51.886035173s ago: executing program 4 (id=3477): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) sendmmsg$unix(r3, &(0x7f0000008300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)='A', 0x1}], 0x1, 0x0, 0x0, 0x20040000}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)="cd2a", 0x2}], 0x1}}], 0x2, 0x10) 48.493082379s ago: executing program 38 (id=3452): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040810) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 48.382823779s ago: executing program 4 (id=3479): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 46.488675862s ago: executing program 9 (id=3481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001c00)={0x0, [{0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x8, 0xb, &(0x7f00000001c0)="f8"}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x3, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x8, 0xfffffffffffffffd}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xd1a5, 0x0}, {0x2, 0x0, 0x9a93, 0x0}, {0x3, 0x10, 0x8, &(0x7f0000001bc0)='1P'}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.287791302s ago: executing program 4 (id=3482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) unshare(0x68040200) 34.788011783s ago: executing program 8 (id=3484): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000001"], 0x408100) 33.000966339s ago: executing program 8 (id=3485): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 30.221181738s ago: executing program 39 (id=3481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001c00)={0x0, [{0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x8, 0xb, &(0x7f00000001c0)="f8"}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x3, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x8, 0xfffffffffffffffd}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xd1a5, 0x0}, {0x2, 0x0, 0x9a93, 0x0}, {0x3, 0x10, 0x8, &(0x7f0000001bc0)='1P'}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.040301931s ago: executing program 40 (id=3482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) unshare(0x68040200) 25.740895281s ago: executing program 8 (id=3488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r1, 0x901, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 22.083194641s ago: executing program 8 (id=3489): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = semget$private(0x0, 0x7, 0x3c0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xfffd}], 0x1) semop(r1, &(0x7f0000000140)=[{0x0, 0xb, 0x800}], 0x1) 20.656122209s ago: executing program 8 (id=3490): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x4, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "af45cee1"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2, 0x700, 0x20a6}) 15.7801371s ago: executing program 8 (id=3491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x4004810) write$tun(r0, &(0x7f0000001940)={@void, @val={0x0, 0x0, 0x8, 0x6ea, 0x19, 0xc}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x1, 0xfc0, 0x67, 0x0, 0x4a, 0x6, 0x0, @empty, @multicast1}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0xece5, 0x0, 0x2, {[@generic={0x4, 0x2}]}}, {"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"}}}}, 0xfca) 0s ago: executing program 41 (id=3491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x4004810) write$tun(r0, &(0x7f0000001940)={@void, @val={0x0, 0x0, 0x8, 0x6ea, 0x19, 0xc}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x1, 0xfc0, 0x67, 0x0, 0x4a, 0x6, 0x0, @empty, @multicast1}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0xece5, 0x0, 0x2, {[@generic={0x4, 0x2}]}}, {"37133e621c2638a33e86ba9549f70bcb5248d5ec42b8d998cb66f8be7954ed58d31e76dc6a63b33af97be654129e2c261c13069126075cf7bf4a73b7cf7ffd9ee0d77d7cc7e834cd670072b6a2a263462dd478456a8cf276b43db7893a82743f2bf8e6b2b986942d02c7fe7861348834be815c88b41b90a3e818c5f75885c608cbe9a51841b72ce54e3edacca6dec10ac658558a822a5a19bf391cce6cf552d26848e55dd343b1035f05e8c6cfec5a7234b94e9b69a48aaf67896bd25b2ef1f8604f50c8c9b600ccea72fc24883927aea1ef52869a59f4780f332d3c27fd3bde3d4e59aa5239bb3ce0dded2d372ced04df34f0744272ca2156d1569f02efa1eab573b2600534e7d94bfff550af386e70b7e03f2229ff278a1ac88090679baeb348b32b3c423f9fa17f818d4e516051ad2b2c7323e9f79efb4d51fc3c0206087b8632633887929191106cf1d2c6b4bce60129fc70ef092ed0701ef8d96841e2cb3a0bc458d072f1b6cdddb859c28f243c0e29f8d8610872d453f8f5078151dfeca510ccc4cf88b047778a986941babc2592ce5a10611ff28b389072681bcf1384468eebdea6b7861bbb76622c885ade841e25ba301985766c98683242abdafebc1a9298f0c022b1859392036c1a285ed1b4ea99bde65ad8dd5f53d0b511582ec29082846b8f966ec350e1927759602ab7149e3d624d5fa9ce251518edfa14848bbf06d57387a6a388b5062a9b261ec1fbcb0e3c4214336d1ad1390d2509beb9ba48df7ad8f57cc3d788f1b72648df57b08ee4640218c70a05ca42fabf5800ee5af43eb3a92c3f3fc217e07557334bc33e5d721d3fea3f808d2a08282848daaff3f9408b189628ac6c572ab341d0730c34140ff70711aa0bbd1dc69c31adb0e7f85b8406633c15426b50394d08a6ad78fcffaba1f2cb2b807092ea4168e93f589dfc0f4a21f996ec5a8cab46140b7f164159bed4556b982d3b5973009caefc9a0a7d04d773b7aeb3793396e09376340fbc3e761a4c0b51c5999d598a5bf1e03129ba5902db74133f271c3a207693d363f51ae50c0795eaaf2dfd6cb0fe6dac339200f9fc10a5fe6208d30edce8d95587b8440ea13f1711550a1221d886c91716214a1cd706f915ff588cce5d965f316c5baa9b651432e9f4d20bb52dde2384be94ffe88fb73cd404ebe2b86f32ec4605cd8ee4b2f61bf66195946e7f7746d53578b110d22374d219cb8d1f59d761b74a67d43962b518beb3c734d8bb1adc7f2655e7404c3a47b04b8a3fab14ed91ff5d1324cfa8ef5ada108fbd4d754f0eae29fe2e63e328845cbc91dc83bd081da52659c6f87f3a2a27665d788484ae55ed4b514d1e16a4c85d4ffb1811ccc22cd238a83476dd387b2a830671299e61e55621b4cc0a3ae9d5bc983d2436c2cc16ae06c3f8146a64fa679e78b78ea23c46a757a98306c4b3be1b066ba3609938594b3051b8bb2a15951c6bfb71065188c2d812a14adcfe6262c997e89d158df2ae28e8ca0ce4d9bd60d2f35fac5c836fef8df3fdde2e06f5aaa0ad44b49d2d873e4e3bd2333c4add16e5a22a00fba56a4670d1c5d36458399cbe7e179bbe09a69508d10187ee53e756e1eceb059b4562951a7193464e125732db963bb9ebfe03fa342fb43a4c42650252b615cc396b6ded80595151d878d42f9a9d287032a4a99bd2ed86704ba3cd6805eae79a05ac05e2cc99209952111663d793bd882cc6552262215f604425284fd31b6cc2b5427a7213ca932c3ad91a4ebe95d33fbf31440e5d52215f6efd0615552c2a27669fab0b6e4c02d3433663fae7c22a23fea2adbb5ce8b068575b304cec575fdfa4fd4735f356ad56902fe1c349959f925199c7bcd294511765290ab32863344127717fd3e051a3240fc04ed0a0f90f99ccd3174252820de2ea369be05aceabb1649c9a3372e13ccc2f4cf0dc79ee7638dde37fbfcd2916d375a46f4bf1c991387444d3bdac2a1c1d5ef44cfd563a79b96331a59302761b2eac63444126aea1f1e7ca2287b8c82f9dc9037e39063d98cd3c6c57b4f34ee83604ce93cb902f3196f0aaeb7ed04b9e97436f17a082d17806f3dc0ebc2d336d59fc0829d4169fc8954347a3d449b709a0ad7f6dd89b5d5a18d7a2d479cf27ef62d52a34f45e4e5320b50e40f2375c808442978263d2e709aee56ebc5132c812fb527d618b61443aafa8adf89a06ae35cf7ffc238d9be77070ab66291a6d9b8a2333c9ab0b474f07c830b27f1ede86605c524ffec64b65876b04f3872ed9a34ab88f73bbb56f18b09e3c081abe9afc0613a79ef5b7e6c6720b4b9df5e663c399f7f645e20d47745f7c8a65a657d16e73f3d1d70739e2da66a6c667f3fba6763600f71c551ef0b5e6d63dd2213287ff544a35a20de5ee6b623e1e6e0970c38bfb6ce7a71a64dc313e9373a6b2c885b8214d8e3d6a524aa7cbf0a09640f350d1d38dea2bc5f98d6ed6134c5572292ec17abc6b543a056b5259b4944741d704fef155e21281bf8fb1299483459054d32178c8dbaa59ce9187bf86c55ea913dfbecdcc281000874eb9810e5bea5188ea5262650d69e1391e1fcd6775fdcf5abc660f7af5a74cf7a808aa25b326d93de501c8c5fd4d1769a11a8fc6fa74c1dd70ffe5cf59586454f3768dee0ab0fff67adc778deef36ea2779a3caf40e9c377a74b645e6fd7eae10f46a5160892d2e83c11192926d8092ba2e606b116512278eb2285d91ddb8a2f9c171c8d18453ad34d499a45c145edf518004fb3a9541474b595e23f81d08368b3991dc7dbb8a17b5100572bb8d8849352526a1b77f26680f19c8b97f2fe895c1bdbe03f347354ec1e6cef328237281c3306273945f1e9749f49ef271faf9561b30c43407eb7cffa9f349bbb59604b88fc277f6600dbf983a2bb577c966e75e9fec31eaf30b1dd7a5e7e56113b3fb08258c6c074eb69a77fbc58ab5e6d373ef8d8e7b510ae19d21911c506bcfa6280e754032081c887a0a964d5649eef314276b7f53b44d53b67f93af1842866dbbc373bfc25725cc60131be8dd8c90b4f7ecfe7b249e45c3884ca25dc1ae35b936486c97fb7517d31ad4084c7354df3d1e3507ba9af3664956f00fe4c7fd7281ba1d69523832081a0741477970129b97dfb5d0dc99e8bbcc413ae70bca889dd76886a2f26a56864d09e043eebf74d719be5cc08b2cef4801d4938ee65905c6ef9376c378282a6a6286ffa62546de74ed75518d11adc650b66247173f39424c92c9484cd154b62ae872893859ba0836274c527b93abbf20db3a37f3cc409e5ba01c1bf91c9b3be4671a52d4c320c403c01393df02fda0dca5d92d540361416b2a83ca94a319b4958f0f0d618031be8ce7b210f987e97a4c658dc73cadc9d3f484900d4fd767b01a37f4e47b807bdad3866630af0bc0b805dae4fec8320f2e532ed889deeb41abfe12b93413034570f8aa78a0d8e73a56a78566f92414c8d329a0a3b856b0a70aaaa2573e000e41bd8308d6f944d22118dd08196eef1ee24ef1c271f73f74a78de75803bbafad41b1860c85798b0d53dadfb36b9db1657151e267bc788b30e63e445a395355b743fad38f929d38353109aece1fcbc43fd9a2e2d3ccc6e1820ce86ba20dada06553215f54d95481eeadc261b50027a93ddc7595ce7081779235632e57333951bc75cfbe3445edd9a7108e8329a5dc3993b648e77641d6c4418691ffeb3d1311f2f5d33c5480aefb58e72190127eb900ab3be74491a041e3717e4987fbfdc7f2f225933aebe33fe971c26acb280f9adc50e18f9ede9e9bcd1b130f6e9042d0b452e7f601c70e56184a4c5c8d8b445a50636f051710b8fde11aff46df218ffd368a6ea7d64dd81f27aa64f45e5121fadd1850c81b4ecc4ab9172956e54d2b2557bc9b8303f9af70726412ed417fa4a619714b776acc54e20176726badfa8763da34ba508ef0acc42326245c77ab5a49482da4c67c9d9d0bef70673913b60f67453452653ab2999da37b6ab8a4acdcf4b96afdf0f8c7eb7c46ec35341f7b95541658a2b39f442b310ca4817d7502fac22fbac24caf41ab0955f1d17af10a194c0180622b365cd7def87207e758623254524b454276059ccd70501f021a129ba712caa3721e90e41bd59f20af24c233e1844390813356f7ec4c74ada6c1e57ae45dfd24e55fb2627daebabbefa537bda6d4159453109591a30931fed1db9c98a5da8211fbfcd931a285da953bbc6cf8ccab005e633c664b17e69f6a7f2c53359d7b48e3245e817f7b5679cf2f21da3be36766dafeb1dc738e6bc40011000aa3b7b95ee23421e36d3dc94bcd29f114e3bb889307d3f132b8f374da20cf0eded95a5789db37cf5396e1ee108944413d14ee8637835437bcb9c9124af95210a8688c91fb2c73fd7e4166799ab714e78b0956b997ba951b4bcca661f2d2c5d7ae56407963a5a5cc41dee34e86fb803910d5dd8bdb23550ef323b960f55a6389561fd2b9b57ca4a74f5a2eac2e2270b71a4a34d4ef4049309f126bbe1af25ef667fb95ae0a034eb57934c1936d0320d067b1b47814460c6b918936bf254cbbdae25adfa9d9f8d0a791348cfbe0539ee45a4599511679668d9d1b151404241d27ba24fbcec093994f1f962489a90a35a73bee01ee6cd881f2fd1d4c9679893dcf74aae0465f5cecb5c0229bc8a8109dac4455041b18640954dad15e48c892ac5b71022a35f74ade11d941e0ade9de8f2020c9a672a851f6769bae4ff907777e816c527c9b11ca974de72d3c3d25383ad1b55e71fddd628730526052ecfc06651f7efed38b63e83985b81fffcc964f5a6131f7ae7e2e2a2233695dce53a5b01f3648781b11ee406e179890d724dbbe0f10665ac94da7a6656c82bba10ad16231ec5c7e508d8792df8d5bc02f003f886751f12a2b407046b29060728ac364d7f43ae9b3b334ea4f7c69336081a8b71c952e0d36ad2aef2c6ed6446eb4ed0af27da18ff168640488980771b8e0a444a348ef6b9bb93f5f41c6e046fbe299275fcc1b12104c0f13422834556abbf752593e658d2b8f05daa27d7247633bcdc789fc2a34fa3f863d1450d2867d6728ddf44f09444dbd2a845a77445ce138701868fae255be44ff55dca077f61704b9c8369958bd5fc9d376007c63c16588f04d463835856d07d0e011947aad80299eba25f779f32a77669347e97c4ebb94d9fd555e293a9c4f284955f975da4b3bdeecfa014c5b26fe42a532881ad161a3222e2dceb778e2ecc46a1ba3e3adf9354bc1f649cce5b327f8381cbe2b5a022211e3056005b841a38ef62613046f53b101bee5110500c74f9e583f4e7f9cfcd187032aa5fb4deff0629783c3be30630ae30f8bb997fbb4d647a44db92719dd66fb9693a9a0eaf149b342ae074015088f4f9c582033dcd68860451fbdc9cd9c29e1441e3420c05cc568feab5a1ea6d46f1c21566e467fde5b460fa3a1fded9b916b5cfb2bf93e300c7dbe1d9996da816ae17a4e0036c067aca1d7e7cfad9532bd7e42f6061df3ad96192052c64c966d2e2110dae28c9a89882044e9666f5bfbc8e2215671788c1d507eb16159b2be2f697ea88c757ef2e10ee78a4fcc95141a4443466b7b7daec7c2100d4c806f380d9"}}}}, 0xfca) kernel console output (not intermixed with test programs): duct: syz [ 1134.776433][T10101] usb 5-1: Manufacturer: syz [ 1134.776444][T10101] usb 5-1: SerialNumber: syz [ 1135.338064][T13407] chnl_net:caif_netlink_parms(): no params data found [ 1136.089532][T13058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.201737][T11558] Bluetooth: hci4: command tx timeout [ 1137.306363][ T9675] usb 5-1: USB disconnect, device number 20 [ 1137.730948][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.731173][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.731428][T13407] bridge_slave_0: entered allmulticast mode [ 1137.740732][T13407] bridge_slave_0: entered promiscuous mode [ 1138.081771][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.081910][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.082168][T13407] bridge_slave_1: entered allmulticast mode [ 1138.092267][T13407] bridge_slave_1: entered promiscuous mode [ 1138.298718][T13058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.225852][T13407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.242695][T13407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.356341][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.360238][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.814581][T13407] team0: Port device team_slave_0 added [ 1139.873674][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.873823][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.891145][T13407] team0: Port device team_slave_1 added [ 1139.926114][ T37] audit: type=1326 audit(1763785271.708:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13534 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa779f749 code=0x7ffc0000 [ 1139.926172][ T37] audit: type=1326 audit(1763785271.708:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13534 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa779f749 code=0x7ffc0000 [ 1139.932041][ T37] audit: type=1326 audit(1763785271.708:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13534 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcfa779f749 code=0x7ffc0000 [ 1139.940549][ T37] audit: type=1326 audit(1763785271.718:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13534 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa779f749 code=0x7ffc0000 [ 1139.940597][ T37] audit: type=1326 audit(1763785271.728:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13534 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa779f749 code=0x7ffc0000 [ 1140.177014][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1857'. [ 1140.448448][T13407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.448465][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.449259][T13407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.582387][T13407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.582404][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.582430][T13407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.418584][T13407] hsr_slave_0: entered promiscuous mode [ 1141.434037][T13407] hsr_slave_1: entered promiscuous mode [ 1141.434977][T13407] debugfs: 'hsr0' already exists in 'hsr' [ 1141.435000][T13407] Cannot create hsr debugfs directory [ 1141.478747][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 1141.478767][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1869'. [ 1141.491309][T13274] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1141.580431][T13274] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1141.736934][T13274] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1141.789280][ T71] bridge_slave_1: left allmulticast mode [ 1141.789307][ T71] bridge_slave_1: left promiscuous mode [ 1141.789561][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.865409][ T71] bridge_slave_0: left allmulticast mode [ 1141.865437][ T71] bridge_slave_0: left promiscuous mode [ 1141.865723][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.111045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.188994][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.250201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.318255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.581847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.720775][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.802184][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.874207][ T71] bond0 (unregistering): Released all slaves [ 1142.908222][T13274] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1142.968651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.086065][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.194112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.233463][T13592] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 1143.502156][ T71] hsr_slave_0: left promiscuous mode [ 1143.547842][ T71] hsr_slave_1: left promiscuous mode [ 1143.548706][T13612] netlink: 'syz.4.1889': attribute type 21 has an invalid length. [ 1143.548752][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.600921][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.018553][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.073246][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.174734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.370778][ T71] team0 (unregistering): Port device team_slave_1 removed [ 1144.411192][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.473210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.522596][ T71] team0 (unregistering): Port device team_slave_0 removed [ 1144.571070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.771709][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.228310][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.296102][T13612] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1889'. [ 1145.647356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.708217][T13640] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 1145.749766][T13640] bond4 (unregistering): Released all slaves [ 1145.816318][T13642] netlink: 'syz.4.1902': attribute type 4 has an invalid length. [ 1145.902142][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.180076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.327006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.376206][T13058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.445023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.722994][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.254781][T13274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.407771][T13274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.443613][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.443767][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.454894][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.455023][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.707832][ T9524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1149.738624][ T9524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1149.744788][ T9524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1149.755473][ T9524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1149.766100][ T9524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1149.948482][T13711] netlink: 'syz.0.1919': attribute type 1 has an invalid length. [ 1151.362234][T13407] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1151.454963][T13407] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1151.759396][T13407] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1151.818724][T13407] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1151.890129][T11558] Bluetooth: hci1: command tx timeout [ 1152.135499][T13274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.164592][T13704] chnl_net:caif_netlink_parms(): no params data found [ 1153.960348][T11558] Bluetooth: hci1: command tx timeout [ 1154.029127][T13796] netlink: 'syz.0.1942': attribute type 1 has an invalid length. [ 1154.424926][ T7242] bridge_slave_1: left allmulticast mode [ 1154.424954][ T7242] bridge_slave_1: left promiscuous mode [ 1154.425201][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.525862][ T7242] bridge_slave_0: left allmulticast mode [ 1154.525893][ T7242] bridge_slave_0: left promiscuous mode [ 1154.526132][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.040434][T11558] Bluetooth: hci1: command tx timeout [ 1157.891392][ T7242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.960838][ T7242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.983028][ T7242] bond0 (unregistering): Released all slaves [ 1158.023305][T13704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.023435][T13704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.023630][T13704] bridge_slave_0: entered allmulticast mode [ 1158.025286][T13704] bridge_slave_0: entered promiscuous mode [ 1158.064349][T13704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.064484][T13704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.064719][T13704] bridge_slave_1: entered allmulticast mode [ 1158.069188][T13704] bridge_slave_1: entered promiscuous mode [ 1158.146310][T11558] Bluetooth: hci1: command tx timeout [ 1158.252213][T13274] veth0_vlan: entered promiscuous mode [ 1158.297354][T13407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.498632][T13704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.517306][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1962'. [ 1158.680054][ T7242] hsr_slave_0: left promiscuous mode [ 1158.720181][ T7242] hsr_slave_1: left promiscuous mode [ 1158.721148][ T7242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.766615][T13860] cgroup: Unknown subsys name 'cpuset' [ 1158.777294][ T7242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.006728][T13868] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1972'. [ 1159.308869][T13872] netlink: 'syz.4.1974': attribute type 2 has an invalid length. [ 1160.000807][ T7242] team0 (unregistering): Port device team_slave_1 removed [ 1160.270499][ T7242] team0 (unregistering): Port device team_slave_0 removed [ 1163.113635][T13704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.349744][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1981'. [ 1163.424070][T13274] veth1_vlan: entered promiscuous mode [ 1163.441898][T13704] team0: Port device team_slave_0 added [ 1163.522939][ T37] audit: type=1326 audit(1763785295.298:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.522989][ T37] audit: type=1326 audit(1763785295.298:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.523027][ T37] audit: type=1326 audit(1763785295.298:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.523059][ T37] audit: type=1326 audit(1763785295.298:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.523095][ T37] audit: type=1326 audit(1763785295.298:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.523143][ T37] audit: type=1326 audit(1763785295.298:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.523182][ T37] audit: type=1326 audit(1763785295.298:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.523219][ T37] audit: type=1326 audit(1763785295.298:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.523258][ T37] audit: type=1326 audit(1763785295.298:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.523298][ T37] audit: type=1326 audit(1763785295.298:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13893 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1163.524850][T13704] team0: Port device team_slave_1 added [ 1163.546316][T13407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.963546][T13704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.963563][T13704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.963587][T13704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.975653][T13704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.975670][T13704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.975693][T13704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.192618][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.192983][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.830110][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 1164.844476][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.844727][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.263329][T13704] hsr_slave_0: entered promiscuous mode [ 1165.273310][T13704] hsr_slave_1: entered promiscuous mode [ 1165.274374][T13704] debugfs: 'hsr0' already exists in 'hsr' [ 1165.274402][T13704] Cannot create hsr debugfs directory [ 1166.734838][T13274] veth0_macvtap: entered promiscuous mode [ 1166.904725][T13274] veth1_macvtap: entered promiscuous mode [ 1167.060062][T12665] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1167.251630][T12665] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 1167.251658][T12665] usb 5-1: config 0 has no interface number 0 [ 1167.251705][T12665] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1167.251725][T12665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.279735][T13963] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2007'. [ 1167.331672][T12665] usb 5-1: config 0 descriptor?? [ 1167.552649][T12665] usb 5-1: string descriptor 0 read error: -71 [ 1167.555507][T12665] usb-storage 5-1:0.168: USB Mass Storage device detected [ 1167.577508][T13274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.642308][T13274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.656519][T12665] usb-storage 5-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 1167.902988][T12665] usb 5-1: USB disconnect, device number 21 [ 1167.967179][ T1487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.972809][ T1487] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.972849][ T1487] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.972878][ T1487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.103224][T13979] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2012'. [ 1168.244644][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'. [ 1168.427683][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 1168.543281][T13994] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 1168.543298][T13994] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2018'. [ 1169.163290][T13407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.449972][ T7242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.450005][ T7242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.820333][ T1487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.820348][ T1487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.170097][T14024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2025'. [ 1172.458140][T13704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1172.713408][T13704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1172.770038][T13704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1172.839153][T13704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1173.128134][T13407] veth0_vlan: entered promiscuous mode [ 1173.243355][T13407] veth1_vlan: entered promiscuous mode [ 1173.717460][T13407] veth0_macvtap: entered promiscuous mode [ 1173.864018][T13704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.867099][T13407] veth1_macvtap: entered promiscuous mode [ 1174.053584][T13407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.123509][T13407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.143496][T13704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.202113][ T1487] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.216633][ T1487] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.290206][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.314563][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.314721][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.358367][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.447321][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.456247][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.247298][ T7242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.247319][ T7242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.686338][ T8530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.686360][ T8530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.246967][T13704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.149664][T13704] veth0_vlan: entered promiscuous mode [ 1178.218866][T13704] veth1_vlan: entered promiscuous mode [ 1178.376458][T13704] veth0_macvtap: entered promiscuous mode [ 1178.392645][T13704] veth1_macvtap: entered promiscuous mode [ 1178.469398][T13704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.503500][T13704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.577605][ T8530] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.591972][ T8530] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.593733][ T8530] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.596125][ T8530] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.022328][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.022351][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.368486][ T7242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.368506][ T7242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.735554][T14202] netlink: 'syz.4.2093': attribute type 1 has an invalid length. [ 1180.735577][T14202] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2093'. [ 1181.442015][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'. [ 1181.442113][T14231] netlink: 'syz.0.2106': attribute type 2 has an invalid length. [ 1181.615624][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2109'. [ 1181.615662][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2109'. [ 1181.687167][T14239] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2110'. [ 1182.013308][T14252] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 1182.248537][T14259] netlink: 'syz.4.2118': attribute type 21 has an invalid length. [ 1182.458269][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.458341][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.578218][T14267] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2123'. [ 1182.864174][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2129'. [ 1183.209131][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2131'. [ 1183.209167][T14285] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2131'. [ 1184.388469][ T37] kauditd_printk_skb: 68 callbacks suppressed [ 1184.388487][ T37] audit: type=1326 audit(1763785316.168:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14303 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ffc0000 [ 1184.391451][ T37] audit: type=1326 audit(1763785316.178:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14303 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ffc0000 [ 1184.391904][ T37] audit: type=1326 audit(1763785316.178:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14303 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7feb43e7f749 code=0x7ffc0000 [ 1184.489385][ T37] audit: type=1326 audit(1763785316.268:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14303 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ffc0000 [ 1184.876273][T14095] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1185.324745][T14095] usb 9-1: Using ep0 maxpacket: 16 [ 1185.492423][T14095] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1185.492453][T14095] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.492471][T14095] usb 9-1: Product: syz [ 1185.492484][T14095] usb 9-1: Manufacturer: syz [ 1185.492497][T14095] usb 9-1: SerialNumber: syz [ 1185.545101][T14095] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1185.545136][T14095] r8152-cfgselector 9-1: config 0 descriptor?? [ 1185.954028][T14327] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 1186.007402][T14095] r8152-cfgselector 9-1: USB disconnect, device number 2 [ 1186.009970][ T37] audit: type=1326 audit(1763785317.788:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ff00000 [ 1186.010017][ T37] audit: type=1326 audit(1763785317.788:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ff00000 [ 1186.010055][ T37] audit: type=1326 audit(1763785317.788:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ff00000 [ 1186.010090][ T37] audit: type=1326 audit(1763785317.788:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ff00000 [ 1186.010123][ T37] audit: type=1326 audit(1763785317.788:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ff00000 [ 1186.010152][ T37] audit: type=1326 audit(1763785317.788:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14324 comm="syz.7.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb43e7f749 code=0x7ff00000 [ 1186.990311][T14341] netlink: 'syz.0.2153': attribute type 2 has an invalid length. [ 1192.507851][T14465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2208'. [ 1192.517847][ T37] kauditd_printk_skb: 116 callbacks suppressed [ 1192.517863][ T37] audit: type=1326 audit(1763785324.298:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.517913][ T37] audit: type=1326 audit(1763785324.298:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.519358][ T37] audit: type=1326 audit(1763785324.298:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.519401][ T37] audit: type=1326 audit(1763785324.298:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.519438][ T37] audit: type=1326 audit(1763785324.298:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.530616][ T37] audit: type=1326 audit(1763785324.318:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.530666][ T37] audit: type=1326 audit(1763785324.318:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.530705][ T37] audit: type=1326 audit(1763785324.318:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.531302][ T37] audit: type=1326 audit(1763785324.318:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1192.531341][ T37] audit: type=1326 audit(1763785324.318:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14462 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082ef4f749 code=0x7ffc0000 [ 1193.021739][T14484] 9pnet_fd: Insufficient options for proto=fd [ 1193.107807][T14486] loop4: detected capacity change from 0 to 7 [ 1193.307602][T14486] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1193.307651][T14486] loop4: partition table partially beyond EOD, truncated [ 1193.307901][T14486] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1193.383151][T14496] team0: Port device veth0_to_bridge added [ 1193.383690][T14496] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 1193.650354][T14506] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1193.736345][T14360] udevd[14360]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1197.637391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.554096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.918551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.799398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.134562][T14603] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2268'. [ 1201.366332][ C0] vkms_vblank_simulate: vblank timer overrun [ 1201.430188][ T9675] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1201.600121][ T9675] usb 5-1: Using ep0 maxpacket: 32 [ 1201.610221][ T9675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.610252][ T9675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.610289][ T9675] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1201.610309][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.668974][ T9675] usb 5-1: config 0 descriptor?? [ 1201.918928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.085033][ T8311] bridge0: port 3(syz_tun) entered disabled state [ 1202.216163][ T9675] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 1202.216202][ T9675] macally 0003:060B:0001.0003: unknown main item tag 0x0 [ 1202.251973][ T9675] macally 0003:060B:0001.0003: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 1202.315046][ T8311] syz_tun (unregistering): left promiscuous mode [ 1202.315178][ T8311] bridge0: port 3(syz_tun) entered disabled state [ 1202.419555][T12665] usb 5-1: USB disconnect, device number 22 [ 1202.641126][T14645] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.2287'. [ 1202.788906][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2290'. [ 1202.789041][T14649] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2290'. [ 1204.281390][T11558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1204.293871][T11558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1204.295914][T11558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1204.297650][T11558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1204.298936][T11558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1205.631126][T14686] F2FS-fs: Conflicting test_dummy_encryption options [ 1205.745411][T14691] vivid-000: disconnect [ 1205.760247][T14690] vivid-000: reconnect [ 1207.113734][ T9524] Bluetooth: hci0: command tx timeout [ 1207.310300][ T37] kauditd_printk_skb: 50 callbacks suppressed [ 1207.310317][ T37] audit: type=1326 audit(1763785339.088:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.310356][ T37] audit: type=1326 audit(1763785339.098:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.311283][ T37] audit: type=1326 audit(1763785339.098:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.311327][ T37] audit: type=1326 audit(1763785339.098:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.311366][ T37] audit: type=1326 audit(1763785339.098:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.311852][ T37] audit: type=1326 audit(1763785339.098:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.312096][ T37] audit: type=1326 audit(1763785339.098:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.312430][ T37] audit: type=1326 audit(1763785339.098:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.312693][ T37] audit: type=1326 audit(1763785339.098:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.316852][ T37] audit: type=1326 audit(1763785339.098:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.8.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f60b267f749 code=0x7ffc0000 [ 1207.349391][T14665] chnl_net:caif_netlink_parms(): no params data found [ 1207.486557][T14723] devpts: Bad value for 'max' [ 1207.748305][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2321'. [ 1208.059917][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1208.104084][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 1208.240067][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1208.250432][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1208.250457][ T10] usb 8-1: config 0 has no interface number 0 [ 1208.429634][ T10] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1208.429663][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.429682][ T10] usb 8-1: Product: syz [ 1208.429703][ T10] usb 8-1: Manufacturer: syz [ 1208.429715][ T10] usb 8-1: SerialNumber: syz [ 1208.475556][ T10] usb 8-1: config 0 descriptor?? [ 1208.493301][ T10] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1208.493357][ T10] usb 8-1: selecting invalid altsetting 1 [ 1208.493401][ T10] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1208.605812][ T10] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1208.606620][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1208.606765][ T10] usb 8-1: media controller created [ 1208.672774][T14744] veth0_macvtap: left promiscuous mode [ 1208.692494][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1208.797768][ T10] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1208.797829][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1208.824022][ T10] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1208.938813][ T10] usb 8-1: USB disconnect, device number 2 [ 1209.122468][T14665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.122603][T14665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.122840][T14665] bridge_slave_0: entered allmulticast mode [ 1209.166392][T14665] bridge_slave_0: entered promiscuous mode [ 1209.170797][ T9524] Bluetooth: hci0: command tx timeout [ 1209.177208][T14665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.177404][T14665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.177651][T14665] bridge_slave_1: entered allmulticast mode [ 1209.190737][T14665] bridge_slave_1: entered promiscuous mode [ 1210.889966][T14782] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2345'. [ 1210.943101][T14665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.947642][T14665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.112260][ T9524] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1211.112290][ T9524] CPU: 0 UID: 0 PID: 9524 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1211.112303][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1211.112311][ T9524] Workqueue: hci2 hci_rx_work [ 1211.112430][ T9524] Call Trace: [ 1211.112439][ T9524] [ 1211.112445][ T9524] dump_stack_lvl+0x189/0x250 [ 1211.112485][ T9524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1211.112500][ T9524] ? __pfx__printk+0x10/0x10 [ 1211.112521][ T9524] ? kernfs_path_from_node+0x2c/0x280 [ 1211.112551][ T9524] ? kernfs_path_from_node+0x243/0x280 [ 1211.112560][ T9524] ? kernfs_path_from_node+0x2c/0x280 [ 1211.112572][ T9524] sysfs_create_dir_ns+0x259/0x280 [ 1211.112582][ T9524] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1211.112638][ T9524] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1211.112651][ T9524] ? rt_spin_unlock+0x161/0x200 [ 1211.112663][ T9524] kobject_add_internal+0x5a5/0xb50 [ 1211.112705][ T9524] kobject_add+0x155/0x220 [ 1211.112718][ T9524] ? __pfx_kobject_add+0x10/0x10 [ 1211.112733][ T9524] ? get_device_parent+0x370/0x3a0 [ 1211.112794][ T9524] device_add+0x408/0xb50 [ 1211.112809][ T9524] hci_conn_add_sysfs+0xd5/0x1e0 [ 1211.112846][ T9524] le_conn_complete_evt+0xf39/0x1500 [ 1211.112907][ T9524] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1211.112921][ T9524] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1211.112957][ T9524] ? lockdep_hardirqs_on+0x9c/0x150 [ 1211.113009][ T9524] ? skb_pull_data+0xfb/0x200 [ 1211.113073][ T9524] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1211.113088][ T9524] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1211.113104][ T9524] hci_event_packet+0x78f/0x1200 [ 1211.113138][ T9524] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1211.113153][ T9524] ? __pfx_hci_event_packet+0x10/0x10 [ 1211.113170][ T9524] ? hci_send_to_monitor+0xe2/0x570 [ 1211.113214][ T9524] hci_rx_work+0x46a/0xe80 [ 1211.113230][ T9524] ? process_scheduled_works+0x9ef/0x17b0 [ 1211.113261][ T9524] process_scheduled_works+0xae1/0x17b0 [ 1211.113290][ T9524] ? __pfx_process_scheduled_works+0x10/0x10 [ 1211.113312][ T9524] worker_thread+0x8a0/0xda0 [ 1211.113327][ T9524] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1211.113345][ T9524] ? __kthread_parkme+0x7b/0x200 [ 1211.113365][ T9524] kthread+0x711/0x8a0 [ 1211.113381][ T9524] ? __pfx_worker_thread+0x10/0x10 [ 1211.113392][ T9524] ? __pfx_kthread+0x10/0x10 [ 1211.113404][ T9524] ? rt_spin_unlock+0x150/0x200 [ 1211.113418][ T9524] ? rt_spin_unlock+0x161/0x200 [ 1211.113427][ T9524] ? __pfx_kthread+0x10/0x10 [ 1211.113441][ T9524] ret_from_fork+0x4bc/0x870 [ 1211.113461][ T9524] ? __pfx_ret_from_fork+0x10/0x10 [ 1211.113477][ T9524] ? __switch_to_asm+0x39/0x70 [ 1211.113486][ T9524] ? __switch_to_asm+0x33/0x70 [ 1211.113494][ T9524] ? __pfx_kthread+0x10/0x10 [ 1211.113509][ T9524] ret_from_fork_asm+0x1a/0x30 [ 1211.113528][ T9524] [ 1211.113553][ T9524] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1211.113581][ T9524] Bluetooth: hci2: failed to register connection device [ 1211.250634][ T9524] Bluetooth: hci0: command tx timeout [ 1211.387831][T10791] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1211.616482][T10791] usb 9-1: Using ep0 maxpacket: 32 [ 1211.663635][T10791] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.663664][T10791] usb 9-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1211.663686][T10791] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1211.663708][T10791] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1211.663726][T10791] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1211.663748][T10791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1211.663780][T10791] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1211.663800][T10791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.669294][T10791] usb 9-1: config 0 descriptor?? [ 1212.337073][T10791] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1212.337098][T10791] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1212.337114][T10791] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1212.337129][T10791] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1212.337144][T10791] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1212.423337][T10791] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 1212.423734][T10791] hid-thrustmaster 0003:044F:B65D.0004: setup data couldn't be sent [ 1212.686035][ C0] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 1212.686450][T10791] usb 9-1: USB disconnect, device number 3 [ 1212.993997][T14665] team0: Port device team_slave_0 added [ 1213.027038][T14665] team0: Port device team_slave_1 added [ 1213.320069][ T9524] Bluetooth: hci0: command tx timeout [ 1213.351995][T14808] fido_id[14808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1214.371547][T14665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.371564][T14665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.371588][T14665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.380792][T14665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.380807][T14665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.380831][T14665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.917429][T14665] hsr_slave_0: entered promiscuous mode [ 1214.918794][T14665] hsr_slave_1: entered promiscuous mode [ 1214.957214][T14665] debugfs: 'hsr0' already exists in 'hsr' [ 1214.957241][T14665] Cannot create hsr debugfs directory [ 1215.528429][T14840] delete_channel: no stack [ 1215.640881][T10791] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1215.793610][T10791] usb 8-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1215.793637][T10791] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.835707][T10791] usb 8-1: config 0 descriptor?? [ 1215.972770][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1216.073993][T14849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.140147][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1216.145651][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1216.205799][ T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1216.205828][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.205846][ T10] usb 5-1: Product: syz [ 1216.205858][ T10] usb 5-1: Manufacturer: syz [ 1216.205870][ T10] usb 5-1: SerialNumber: syz [ 1216.229736][T10791] snd-usb-hiface 8-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1216.234240][ T10] usb 5-1: config 0 descriptor?? [ 1216.287998][T10101] usb 8-1: USB disconnect, device number 3 [ 1216.365628][T14854] tipc: Started in network mode [ 1216.365657][T14854] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1216.418653][T14854] tipc: Enabled bearer , priority 10 [ 1216.741714][ T10] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1216.945366][ T10] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1216.945843][ T10] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1217.085908][ T10] usb 5-1: USB disconnect, device number 23 [ 1217.411962][T14665] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1217.470517][T14665] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1217.571584][T13482] tipc: Node number set to 4269801488 [ 1217.595704][T14665] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1217.830414][T14665] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1218.195290][T14665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.236717][T14665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.248735][T14905] ptrace attach of "./syz-executor exec"[5812] was attempted by "  &\x0c  \x09"[14905] [ 1218.315051][ T8868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.319510][ T8868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.373408][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.397165][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.737307][ T9524] Bluetooth: Fragment is too long (len 14, expected 2) [ 1218.778681][T14922] xt_l2tp: invalid flags combination: 8 [ 1219.226243][T14665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.454682][T14964] syz.4.2418 (14964): /proc/14962/oom_adj is deprecated, please use /proc/14962/oom_score_adj instead. [ 1220.671175][T14665] veth0_vlan: entered promiscuous mode [ 1220.732905][T14665] veth1_vlan: entered promiscuous mode [ 1221.291872][T14665] veth0_macvtap: entered promiscuous mode [ 1221.317961][T14665] veth1_macvtap: entered promiscuous mode [ 1221.467329][T14665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.518069][T14665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.631983][ T8530] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.636390][ T8530] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.660241][ T8530] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.686761][ T8530] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.704309][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2436'. [ 1224.092169][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.092191][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.317790][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.317813][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.967635][T15175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.782774][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1234.782793][ T37] audit: type=1326 audit(1763785366.568:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15233 comm="syz.9.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717988f749 code=0x7ffc0000 [ 1234.783091][ T37] audit: type=1326 audit(1763785366.568:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15233 comm="syz.9.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717988f749 code=0x7ffc0000 [ 1235.790863][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2536'. [ 1235.955827][T15251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1235.986338][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2538'. [ 1235.986369][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2538'. [ 1235.986429][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2538'. [ 1236.681754][T15017] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1236.822191][T15279] vivid-000: ================= START STATUS ================= [ 1236.822250][T15279] vivid-000: Test Pattern: 75% Colorbar [ 1236.822286][T15279] vivid-000: Fill Percentage of Frame: 100 [ 1236.822307][T15279] vivid-000: Horizontal Movement: No Movement [ 1236.822324][T15279] vivid-000: Vertical Movement: No Movement [ 1236.822341][T15279] vivid-000: OSD Text Mode: All [ 1236.822358][T15279] vivid-000: Show Border: false [ 1236.822376][T15279] vivid-000: Show Square: false [ 1236.822392][T15279] vivid-000: Sensor Flipped Horizontally: false [ 1236.822409][T15279] vivid-000: Sensor Flipped Vertically: false [ 1236.822425][T15279] vivid-000: Insert SAV Code in Image: false [ 1236.822441][T15279] vivid-000: Insert EAV Code in Image: false [ 1236.822458][T15279] vivid-000: Insert Video Guard Band: false [ 1236.822474][T15279] vivid-000: Reduced Framerate: false [ 1236.822490][T15279] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1236.822508][T15279] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1236.822525][T15279] vivid-000: Enable Capture Cropping: false grabbed [ 1236.822546][T15279] vivid-000: Enable Capture Composing: true grabbed [ 1236.822566][T15279] vivid-000: Enable Capture Scaler: true grabbed [ 1236.822586][T15279] vivid-000: Timestamp Source: End of Frame [ 1236.822602][T15279] vivid-000: Colorspace: sRGB [ 1236.822617][T15279] vivid-000: Transfer Function: Default [ 1236.822633][T15279] vivid-000: Y'CbCr Encoding: Default [ 1236.822666][T15279] vivid-000: HSV Encoding: Hue 0-179 [ 1236.822689][T15279] vivid-000: Quantization: Default [ 1236.822705][T15279] vivid-000: Apply Alpha To Red Only: false [ 1236.822723][T15279] vivid-000: Standard Aspect Ratio: 4x3 [ 1236.822746][T15279] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1236.822769][T15279] vivid-000: DV Timings: 640x480p59 inactive [ 1236.822827][T15279] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1236.822852][T15279] vivid-000: Maximum EDID Blocks: 2 [ 1236.822870][T15279] vivid-000: Limited RGB Range (16-235): false [ 1236.822886][T15279] vivid-000: Rx RGB Quantization Range: Automatic [ 1236.822909][T15279] vivid-000: Power Present: 0x00000001 [ 1236.822953][T15279] tpg source WxH: 320x180 (Y'CbCr) [ 1236.822964][T15279] tpg field: 1 [ 1236.823009][T15279] tpg crop: (0,0)/320x180 [ 1236.823022][T15279] tpg compose: (0,0)/320x180 [ 1236.823035][T15279] tpg colorspace: 8 [ 1236.823042][T15279] tpg transfer function: 0/2 [ 1236.823051][T15279] tpg Y'CbCr encoding: 0/1 [ 1236.823059][T15279] tpg quantization: 0/2 [ 1236.823069][T15279] tpg RGB range: 0/2 [ 1236.823077][T15279] vivid-000: ================== END STATUS ================== [ 1236.828622][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 1236.869949][T15017] usb 8-1: Using ep0 maxpacket: 16 [ 1236.876542][T15017] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.876601][T15017] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1236.876627][T15017] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1236.876646][T15017] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1236.876667][T15017] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.878133][T15017] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1236.878157][T15017] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1236.878175][T15017] usb 8-1: Manufacturer: syz [ 1236.959145][T15017] usb 8-1: config 0 descriptor?? [ 1237.398677][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2555'. [ 1237.410196][T15017] rc_core: IR keymap rc-hauppauge not found [ 1237.410218][T15017] Registered IR keymap rc-empty [ 1237.411740][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.412323][T15288] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2556'. [ 1237.453334][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.463405][T15292] ALSA: mixer_oss: invalid OSS volume '00000000000000000003' [ 1237.608940][T15017] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1237.639562][T15017] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 1237.673084][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.693655][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.793611][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.822646][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.879707][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.895755][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.911134][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.930255][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.950437][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1237.980293][T15017] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1238.004509][T15017] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1238.004534][T15017] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1238.111037][T15017] usb 8-1: USB disconnect, device number 4 [ 1239.781403][T15329] netlink: 'syz.4.2573': attribute type 2 has an invalid length. [ 1239.781775][T15332] netlink: 'syz.8.2575': attribute type 1 has an invalid length. [ 1240.669692][T15334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.681237][T15334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.404300][ T9524] Bluetooth: hci2: command 0x0406 tx timeout [ 1241.714767][T15334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.756773][T15334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.842436][T15378] netlink: 356 bytes leftover after parsing attributes in process `syz.8.2596'. [ 1242.281682][T15384] nbd: must specify a size in bytes for the device [ 1242.710132][T12665] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1242.863212][T12665] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1242.863244][T12665] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1242.865932][T12665] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1242.865960][T12665] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1242.865971][T12665] usb 9-1: Product: syz [ 1242.865978][T12665] usb 9-1: Manufacturer: syz [ 1242.865986][T12665] usb 9-1: SerialNumber: syz [ 1242.870867][T12665] usb 9-1: config 0 descriptor?? [ 1242.905768][T12665] usb 9-1: selecting invalid altsetting 0 [ 1243.243096][T15374] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2594'. [ 1243.243345][ T1383] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.272130][T12665] usb 9-1: USB disconnect, device number 4 [ 1243.293724][ T8530] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.293843][ T8530] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.293877][ T8530] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.496656][T13904] udevd[13904]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.568910][T15394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2604'. [ 1243.893261][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.893333][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.198611][T15420] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 1244.198634][T15420] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 1244.198648][T15420] ALSA: mixer_oss: invalid OSS volume 'lg' [ 1244.198661][T15420] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 1244.198692][T15420] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 1244.198704][T15420] ALSA: mixer_oss: invalid OSS volume '' [ 1244.198720][T15420] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 1244.198739][T15420] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 1244.198751][T15420] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 1244.198770][T15420] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 1244.198790][T15420] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 1244.198801][T15420] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 1244.335744][T15425] 9p: Unknown Cache mode or invalid value m [ 1244.377129][T15426] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2617'. [ 1244.377155][T15426] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2617'. [ 1244.377169][T15426] netlink: 'syz.7.2617': attribute type 6 has an invalid length. [ 1244.377182][T15426] netlink: 'syz.7.2617': attribute type 5 has an invalid length. [ 1244.377193][T15426] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2617'. [ 1245.886969][T15451] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.2628'. [ 1245.887532][T15451] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1246.790157][T15470] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2638'. [ 1246.930400][T15475] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1248.192294][T15516] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2661'. [ 1248.253273][T15523] futex_wake_op: syz.8.2664 tries to shift op by -1; fix this program [ 1248.813121][T15543] atomic_op ffff888032b54218 conn xmit_atomic 0000000000000000 [ 1249.768302][T15564] netlink: 'syz.6.2683': attribute type 2 has an invalid length. [ 1249.768328][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2683'. [ 1249.790032][T12665] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1249.945081][T12665] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.945131][T12665] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1249.945162][T12665] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.971453][T12665] usb 9-1: config 0 descriptor?? [ 1250.444031][T12665] steelseries 0003:1038:12B6.0005: item fetching failed at offset 5/7 [ 1250.444932][T12665] steelseries 0003:1038:12B6.0005: probe with driver steelseries failed with error -22 [ 1250.690758][ T9675] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1250.690880][T12665] usb 9-1: USB disconnect, device number 5 [ 1250.880054][ T9675] usb 5-1: Using ep0 maxpacket: 32 [ 1250.888320][ T9675] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.888348][ T9675] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1250.888372][ T9675] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1250.888404][ T9675] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1250.888423][ T9675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.969051][ T9675] usb 5-1: config 0 descriptor?? [ 1251.090071][T15548] Bluetooth: hci4: command 0x0406 tx timeout [ 1251.419291][ T9675] corsair-cpro 0003:1B1C:0C10.0006: item fetching failed at offset 2/5 [ 1251.433724][ T9675] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -22 [ 1251.572349][ T37] audit: type=1326 audit(1763785383.358:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15589 comm="syz.9.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717988f749 code=0x7ffc0000 [ 1251.572402][ T37] audit: type=1326 audit(1763785383.358:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15589 comm="syz.9.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717988f749 code=0x7ffc0000 [ 1251.577250][ T37] audit: type=1326 audit(1763785383.358:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15589 comm="syz.9.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f717988f749 code=0x7ffc0000 [ 1251.577306][ T37] audit: type=1326 audit(1763785383.358:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15589 comm="syz.9.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717988f749 code=0x7ffc0000 [ 1251.577346][ T37] audit: type=1326 audit(1763785383.358:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15589 comm="syz.9.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717988f749 code=0x7ffc0000 [ 1251.618858][T13482] usb 5-1: USB disconnect, device number 24 [ 1251.664439][ T37] audit: type=1326 audit(1763785383.428:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.8.2698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60b267f749 code=0x0 [ 1251.955647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1252.299606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.249987][ T9675] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1253.408551][ T9675] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.408580][ T9675] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.408617][ T9675] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1253.408637][ T9675] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.494128][ T9675] usb 10-1: config 0 descriptor?? [ 1254.112772][ T9675] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -71 [ 1254.188748][ T9675] usb 10-1: USB disconnect, device number 2 [ 1256.314688][T15689] openvswitch: netlink: Missing valid actions attribute. [ 1256.314724][T15689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.080116][ T9675] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1257.332541][ T9675] usb 9-1: Using ep0 maxpacket: 8 [ 1257.470721][ T9675] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.470738][ T9675] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1257.514569][ T9675] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1257.514596][ T9675] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.514608][ T9675] usb 9-1: Product: syz [ 1257.514615][ T9675] usb 9-1: Manufacturer: syz [ 1257.514622][ T9675] usb 9-1: SerialNumber: syz [ 1257.617245][T15718] macvlan2: entered promiscuous mode [ 1257.779975][T14095] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1257.929543][T15733] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2761'. [ 1257.939524][T14095] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1257.939554][T14095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.939571][T14095] usb 5-1: Product: syz [ 1257.939585][T14095] usb 5-1: Manufacturer: syz [ 1257.939597][T14095] usb 5-1: SerialNumber: syz [ 1257.965502][T14095] usb 5-1: config 0 descriptor?? [ 1257.997000][T14095] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1258.033674][T14095] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1258.051735][T14095] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1258.051800][T14095] usb 5-1: media controller created [ 1258.387332][T14095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1258.889766][T14095] DVB: Unable to find symbol mt352_attach() [ 1258.926910][T15754] tipc: Enabling of bearer rejected, failed to enable media [ 1259.540549][T14095] DVB: Unable to find symbol nxt6000_attach() [ 1259.540643][T14095] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1260.771669][T14095] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 1260.824059][T14095] dvb-usb: schedule remote query interval to 1000 msecs. [ 1260.824085][T14095] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1260.824623][T14095] dvb-usb: bulk message failed: -22 (7/0) [ 1260.824643][T14095] dvb-usb: bulk message failed: -22 (7/0) [ 1260.874748][T14095] usb 5-1: USB disconnect, device number 25 [ 1261.341680][T14095] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1261.740842][T15793] netlink: 7060 bytes leftover after parsing attributes in process `syz.7.2788'. [ 1261.850142][T14095] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1262.000385][T15017] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1262.044529][T14095] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1262.044558][T14095] usb 5-1: config 0 has no interface number 0 [ 1262.047852][T14095] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1262.047882][T14095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.047909][T14095] usb 5-1: Product: syz [ 1262.047921][T14095] usb 5-1: Manufacturer: syz [ 1262.047934][T14095] usb 5-1: SerialNumber: syz [ 1262.071118][T14095] usb 5-1: config 0 descriptor?? [ 1262.183265][T15017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1262.183295][T15017] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1262.183370][T15017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1262.183389][T15017] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1262.183423][T15017] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1262.183442][T15017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.330246][T15017] usb 10-1: config 0 descriptor?? [ 1262.402153][T10791] usb 9-1: USB disconnect, device number 6 [ 1262.563653][T14095] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1262.598069][T15017] hdpvr 10-1:0.0: firmware version 0x4b dated ׯZZ[qkw$$DBύq5 [ 1262.598092][T15017] hdpvr 10-1:0.0: untested firmware, the driver might not work. [ 1262.607210][T14095] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1262.607353][T14095] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1262.608137][T14095] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1262.764389][T14095] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1263.031845][T14095] usb 5-1: USB disconnect, device number 26 [ 1263.082776][ T9675] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1263.084004][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2799'. [ 1263.114052][T14095] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1263.115892][T14095] keyspan 5-1:0.133: device disconnected [ 1263.239007][ T9675] usb 8-1: Using ep0 maxpacket: 16 [ 1263.292022][ T9675] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1263.292050][ T9675] usb 8-1: config 0 has no interface number 0 [ 1263.292110][ T9675] usb 8-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.292136][ T9675] usb 8-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.292157][ T9675] usb 8-1: config 0 interface 8 has no altsetting 0 [ 1263.292193][ T9675] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1263.292214][ T9675] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.304883][T15017] hdpvr 10-1:0.0: Could not setup controls [ 1263.305629][T15017] hdpvr 10-1:0.0: registering videodev failed [ 1263.320685][ T9675] usb 8-1: config 0 descriptor?? [ 1263.471187][T15017] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -71 [ 1263.614536][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2803'. [ 1263.666030][T15017] usb 10-1: USB disconnect, device number 3 [ 1263.911871][ T9675] uclogic 0003:5543:0522.0008: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.7-1/input8 [ 1264.074111][T12665] usb 8-1: USB disconnect, device number 5 [ 1264.393259][T15852] devpts: Bad value for 'uid' [ 1264.393279][T15852] devpts: Bad value for 'uid' [ 1264.778734][T15856] fido_id[15856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1265.000016][T12665] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1265.153457][T15870] netlink: 'syz.8.2824': attribute type 28 has an invalid length. [ 1265.168193][T12665] usb 5-1: Using ep0 maxpacket: 32 [ 1265.176568][T12665] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 1265.176600][T12665] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.176623][T12665] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1265.176655][T12665] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1265.176676][T12665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.241423][T12665] usb 5-1: config 0 descriptor?? [ 1265.736089][T12665] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0009/input/input11 [ 1265.952036][T12665] uclogic 0003:28BD:0933.0009: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 1265.992906][T12665] usb 5-1: USB disconnect, device number 27 [ 1266.575074][T15887] fido_id[15887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1266.878016][T15900] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1267.226144][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2843'. [ 1267.300117][T15017] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1267.336213][T15916] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2845'. [ 1267.336236][T15916] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2845'. [ 1267.356729][T15918] autofs: Unknown parameter '' [ 1267.468578][T15017] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1267.468607][T15017] usb 5-1: config 0 has no interface number 0 [ 1267.468660][T15017] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1267.468683][T15017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.535189][T15017] usb 5-1: config 0 descriptor?? [ 1267.591639][T15017] usb 5-1: selecting invalid altsetting 1 [ 1267.593507][T15017] dvb_ttusb_budget: ttusb_init_controller: error [ 1267.593527][T15017] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1267.869992][T13482] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1268.023153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.141583][T13482] usb 9-1: Using ep0 maxpacket: 32 [ 1268.143866][T13482] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1268.143905][T13482] usb 9-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1268.143925][T13482] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.837609][T15017] DVB: Unable to find symbol cx22700_attach() [ 1268.914589][T15017] DVB: Unable to find symbol tda10046_attach() [ 1268.914614][T15017] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1268.994081][T13482] usb 9-1: config 0 descriptor?? [ 1268.997001][T15017] usb 5-1: USB disconnect, device number 28 [ 1269.462814][T13482] kye 0003:0458:5015.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1269.483677][T13482] kye 0003:0458:5015.000A: hidraw0: USB HID v10.00 Device [HID 0458:5015] on usb-dummy_hcd.8-1/input0 [ 1269.483712][T13482] kye 0003:0458:5015.000A: tablet-enabling feature report not found [ 1269.483725][T13482] kye 0003:0458:5015.000A: tablet enabling failed [ 1269.670877][T13482] usb 9-1: USB disconnect, device number 7 [ 1270.328275][T15966] fido_id[15966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1272.590199][T16026] netlink: 'syz.6.2893': attribute type 2 has an invalid length. [ 1273.240225][T15017] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1273.410039][T15017] usb 10-1: Using ep0 maxpacket: 32 [ 1273.425749][T15017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.425779][T15017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.425818][T15017] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1273.425838][T15017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.469635][T15017] usb 10-1: config 0 descriptor?? [ 1273.991936][T15017] zydacron 0003:13EC:0006.000B: item fetching failed at offset 0/2 [ 1273.992940][T15017] zydacron 0003:13EC:0006.000B: parse failed [ 1273.993061][T15017] zydacron 0003:13EC:0006.000B: probe with driver zydacron failed with error -22 [ 1274.501061][T10791] usb 10-1: USB disconnect, device number 4 [ 1275.859974][T12665] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1276.429961][T12665] usb 9-1: Using ep0 maxpacket: 8 [ 1276.433990][T12665] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.434015][T12665] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1276.442853][T12665] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1276.442881][T12665] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.442898][T12665] usb 9-1: Product: syz [ 1276.442910][T12665] usb 9-1: Manufacturer: syz [ 1276.442923][T12665] usb 9-1: SerialNumber: syz [ 1277.042672][T10791] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1277.284514][T11558] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.515392][T10791] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.515417][T10791] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1277.515470][T10791] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1277.515489][T10791] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.581575][T10791] usb 8-1: config 0 descriptor?? [ 1277.619022][T10791] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1277.619105][T10791] dvb-usb: bulk message failed: -22 (3/0) [ 1277.693566][T16089] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1278.996611][T10791] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1279.009595][T16082] dvb-usb: bulk message failed: -22 (2/0) [ 1279.009769][T16082] dibusb: i2c wr: len=61 is too big! [ 1279.009769][T16082] [ 1279.027812][T10791] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1279.027877][T10791] usb 8-1: media controller created [ 1279.084324][T10791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1280.235867][T10791] dvb-usb: bulk message failed: -22 (6/0) [ 1280.236101][T10791] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1280.267435][T10791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input12 [ 1280.300533][T10791] dvb-usb: schedule remote query interval to 150 msecs. [ 1280.300557][T10791] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1280.352357][T10791] usb 8-1: USB disconnect, device number 6 [ 1280.680012][ T9675] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1281.522885][ T9675] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.522940][ T9675] usb 10-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1281.522961][ T9675] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.590348][ T9675] usb 10-1: config 0 descriptor?? [ 1282.521817][T12665] usb 9-1: can't set config #1, error -110 [ 1283.253344][ T9675] logitech-djreceiver 0003:046D:C71F.000C: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.9-1/input0 [ 1283.311938][T10791] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1283.438221][ T9675] usb 10-1: USB disconnect, device number 5 [ 1283.890126][T10791] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1284.269945][T10791] usb 8-1: Using ep0 maxpacket: 16 [ 1284.447695][T10791] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1284.475895][T10791] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1284.475925][T10791] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.475944][T10791] usb 8-1: Product: syz [ 1284.475956][T10791] usb 8-1: Manufacturer: syz [ 1284.475969][T10791] usb 8-1: SerialNumber: syz [ 1284.567697][T10791] usb 8-1: config 0 descriptor?? [ 1284.599364][T10791] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1284.599398][T10791] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1284.771959][T16118] fido_id[16118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1284.830343][T10791] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1284.939936][T10791] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1284.940004][T10791] em28xx 8-1:0.0: board has no eeprom [ 1285.049982][T10791] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1285.050137][T10791] em28xx 8-1:0.0: dvb set to bulk mode. [ 1285.050700][T15017] em28xx 8-1:0.0: Binding DVB extension [ 1285.123826][T10791] usb 8-1: USB disconnect, device number 7 [ 1285.138423][T10791] em28xx 8-1:0.0: Disconnecting em28xx [ 1285.230039][T13482] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1285.276952][T15017] em28xx 8-1:0.0: Registering input extension [ 1285.292093][T10791] em28xx 8-1:0.0: Closing input extension [ 1285.658097][T10791] em28xx 8-1:0.0: Freeing device [ 1285.659961][T13482] usb 10-1: Using ep0 maxpacket: 8 [ 1285.799030][T13482] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1285.799059][T13482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.865653][T13482] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1285.865694][T13482] pvrusb2: ********** [ 1285.865702][T13482] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1285.865713][T13482] pvrusb2: Important functionality might not be entirely working. [ 1285.865721][T13482] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1285.865731][T13482] pvrusb2: ********** [ 1286.164463][ T2370] pvrusb2: Invalid write control endpoint [ 1286.550012][T13482] usb 10-1: USB disconnect, device number 6 [ 1286.893397][ T2370] pvrusb2: Invalid write control endpoint [ 1286.893413][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1286.893422][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1286.893430][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1286.893466][ T2370] pvrusb2: Device being rendered inoperable [ 1286.963655][ T2370] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1286.963815][ T2370] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1287.074091][ T2370] pvrusb2: Attached sub-driver cx25840 [ 1287.074108][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1287.074117][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1287.371587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.400494][T15017] usb 9-1: USB disconnect, device number 8 [ 1288.835306][T16159] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1289.081613][T16178] netlink: 'syz.9.2958': attribute type 1 has an invalid length. [ 1289.081634][T16178] netlink: 'syz.9.2958': attribute type 2 has an invalid length. [ 1290.526132][T16205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1290.775379][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2972'. [ 1291.804407][ T37] audit: type=1326 audit(1763785423.588:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16223 comm="syz.9.2977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f717988f749 code=0x0 [ 1292.610339][T15017] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1292.909232][ T37] audit: type=1326 audit(1763785424.688:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16237 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1292.909292][ T37] audit: type=1326 audit(1763785424.688:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16237 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1292.911126][T15017] usb 9-1: Using ep0 maxpacket: 8 [ 1293.040246][T15017] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1293.044663][ T37] audit: type=1326 audit(1763785424.828:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16237 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1293.044975][ T37] audit: type=1326 audit(1763785424.828:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16237 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1293.045350][ T37] audit: type=1326 audit(1763785424.828:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16237 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1293.154502][T15017] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1293.155710][ T37] audit: type=1326 audit(1763785424.938:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16237 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1293.340628][T15017] usb 9-1: string descriptor 0 read error: -22 [ 1293.340770][T15017] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1293.340793][T15017] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1293.959143][T16242] netlink: 'syz.9.2986': attribute type 4 has an invalid length. [ 1293.959168][T16242] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.2986'. [ 1294.263716][T15017] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1294.333643][T15017] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1294.334811][T15017] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1294.334865][T15017] usb 9-1: media controller created [ 1294.435646][T15017] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1296.641427][T15017] zl10353_read_register: readreg error (reg=127, ret==0) [ 1299.175772][T15017] usb 9-1: USB disconnect, device number 9 [ 1300.199537][T16271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.697900][T13482] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1302.009967][T13482] usb 10-1: Using ep0 maxpacket: 8 [ 1302.013816][T13482] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.013871][T13482] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1302.013890][T13482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.027012][T13482] usb 10-1: config 0 descriptor?? [ 1302.380888][T13482] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1304.171035][T13482] gspca_vc032x: reg_w err -110 [ 1304.171098][T13482] vc032x 10-1:0.0: probe with driver vc032x failed with error -110 [ 1304.313268][T13482] usb 10-1: USB disconnect, device number 7 [ 1305.070039][T13482] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1305.262505][T13482] usb 8-1: Using ep0 maxpacket: 32 [ 1305.264866][T13482] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1305.264890][T13482] usb 8-1: config 0 has no interface number 0 [ 1305.267906][T13482] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1305.267930][T13482] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.267949][T13482] usb 8-1: Product: syz [ 1305.267961][T13482] usb 8-1: Manufacturer: syz [ 1305.267974][T13482] usb 8-1: SerialNumber: syz [ 1305.354926][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.355009][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.782009][T13482] usb 8-1: config 0 descriptor?? [ 1305.814106][T13482] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1308.130004][T13482] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1308.130179][T13482] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1308.229130][T13482] usb 8-1: USB disconnect, device number 8 [ 1311.287085][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3032'. [ 1314.865148][T16398] vlan2: entered promiscuous mode [ 1314.880705][T16401] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3054'. [ 1321.670112][T14095] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1321.833046][T14095] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1321.833073][T14095] usb 10-1: config 0 has no interface number 0 [ 1321.833120][T14095] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.833144][T14095] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.833162][T14095] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1321.833202][T14095] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1321.833222][T14095] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.132579][T14095] usb 10-1: config 0 descriptor?? [ 1322.790148][T15017] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1322.950221][T15017] usb 5-1: Using ep0 maxpacket: 16 [ 1322.952547][T15017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.952575][T15017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.952611][T15017] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1322.952632][T15017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.076770][T14095] input: HID 28bd:0042 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0042.000D/input/input14 [ 1323.195244][T15017] usb 5-1: config 0 descriptor?? [ 1323.831002][T14095] uclogic 0003:28BD:0042.000D: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.9-1/input1 [ 1323.900756][T15017] corsair 0003:1B1C:1B02.000E: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 1323.910423][T14095] usb 10-1: USB disconnect, device number 8 [ 1323.981240][T15017] corsair 0003:1B1C:1B02.000E: Failed to get K90 initial state (error -32). [ 1323.989249][T15017] usb 5-1: USB disconnect, device number 29 [ 1325.112534][T16512] fido_id[16512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1325.427231][T16520] fido_id[16520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1327.895218][T15548] Bluetooth: hci0: command 0x0406 tx timeout [ 1327.897539][T15017] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1328.070125][T15017] usb 10-1: Using ep0 maxpacket: 32 [ 1328.074554][T15017] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1328.074581][T15017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.112737][T15017] usb 10-1: config 0 descriptor?? [ 1328.229755][T15017] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1328.750758][T15017] gspca_sq930x: reg_r 001f failed -110 [ 1328.750862][T15017] sq930x 10-1:0.0: probe with driver sq930x failed with error -110 [ 1329.114430][T16567] kvm: kvm [16565]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xff [ 1330.391510][T16583] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1330.721124][T12665] usb 10-1: USB disconnect, device number 9 [ 1331.850236][T16583] @0: renamed from bond_slave_1 (while UP) [ 1338.307170][T16641] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3153'. [ 1338.307196][T16641] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3153'. [ 1342.784094][ T5887] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1342.860031][T15017] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1343.010188][T15017] usb 5-1: Using ep0 maxpacket: 16 [ 1343.014816][T15017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.014845][T15017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.014883][T15017] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1343.014903][T15017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.089996][T15017] usb 5-1: config 0 descriptor?? [ 1343.444407][T15017] usbhid 5-1:0.0: can't add hid device: -71 [ 1343.444538][T15017] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1343.472542][ T5887] usb 10-1: Using ep0 maxpacket: 16 [ 1343.490332][T15017] usb 5-1: USB disconnect, device number 30 [ 1343.662561][ T5887] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 1343.662591][ T5887] usb 10-1: config 1 has no interface number 0 [ 1343.662644][ T5887] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1343.662667][ T5887] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1343.662690][ T5887] usb 10-1: config 1 interface 105 has no altsetting 0 [ 1343.852099][ T5887] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1343.852130][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.852148][ T5887] usb 10-1: Product: syz [ 1343.852160][ T5887] usb 10-1: Manufacturer: syz [ 1343.852172][ T5887] usb 10-1: SerialNumber: syz [ 1343.915209][T16701] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1343.915343][T16701] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1344.095627][T15017] kernel write not supported for file /542/attr/fscreate (pid: 15017 comm: kworker/0:5) [ 1344.173481][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 1344.447490][T16701] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1344.447617][T16701] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1344.910149][ T5887] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1344.910687][ T5887] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1344.911191][ T5887] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1345.386054][ T5887] aqc111 10-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fa:dc:9f:76:b8:80 [ 1345.440200][ T5887] usb 10-1: USB disconnect, device number 10 [ 1345.443718][ T5887] aqc111 10-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1346.196283][ T5887] aqc111 10-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1346.196440][ T5887] aqc111 10-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1346.196573][ T5887] aqc111 10-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1347.115584][T16761] input: syz0 as /devices/virtual/input/input15 [ 1347.550040][T15017] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1347.702577][T15017] usb 9-1: Using ep0 maxpacket: 16 [ 1347.716662][T15017] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1347.716686][T15017] usb 9-1: config 0 has no interface number 0 [ 1347.716734][T15017] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1347.716757][T15017] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1347.829085][T15017] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1347.829113][T15017] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1347.829132][T15017] usb 9-1: Product: syz [ 1347.829145][T15017] usb 9-1: SerialNumber: syz [ 1347.893334][T15017] usb 9-1: config 0 descriptor?? [ 1348.187196][T15017] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1348.247248][T15017] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input16 [ 1348.262268][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.265939][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.266197][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.266439][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.266674][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.266905][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.267138][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.267369][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.267603][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.267838][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.499254][T15017] usb 9-1: USB disconnect, device number 10 [ 1348.499342][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1348.597984][ T37] audit: type=1326 audit(1763785480.368:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.598041][ T37] audit: type=1326 audit(1763785480.368:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774fc7f749 code=0x7ffc0000 [ 1348.612753][ T37] audit: type=1326 audit(1763785480.398:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.612810][ T37] audit: type=1326 audit(1763785480.398:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.612850][ T37] audit: type=1326 audit(1763785480.398:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.612890][ T37] audit: type=1326 audit(1763785480.398:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.612927][ T37] audit: type=1326 audit(1763785480.398:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.612965][ T37] audit: type=1326 audit(1763785480.398:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.613010][ T37] audit: type=1326 audit(1763785480.398:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.613047][ T37] audit: type=1326 audit(1763785480.398:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16770 comm="syz.4.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f774fc1b829 code=0x7ffc0000 [ 1348.851405][T15017] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1353.591241][T16850] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3244'. [ 1355.358098][T16877] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1358.879974][ T9675] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1359.029974][ T9675] usb 9-1: Using ep0 maxpacket: 16 [ 1359.032626][ T9675] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1359.032649][ T9675] usb 9-1: config 0 has no interface number 0 [ 1359.032700][ T9675] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1359.032724][ T9675] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1359.035039][ T9675] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1359.035065][ T9675] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1359.035083][ T9675] usb 9-1: Product: syz [ 1359.035095][ T9675] usb 9-1: SerialNumber: syz [ 1359.143513][ T9675] usb 9-1: config 0 descriptor?? [ 1359.165995][ T9675] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1359.191296][ T9675] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input17 [ 1359.842929][ C0] cm109_urb_ctl_callback: 875 callbacks suppressed [ 1359.842957][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1359.843197][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1359.843596][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1359.843832][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1359.844107][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1359.844244][T14095] usb 9-1: USB disconnect, device number 11 [ 1359.844338][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1359.844360][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1360.104141][T14095] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1360.188068][T16935] input: syz0 as /devices/virtual/input/input18 [ 1360.713740][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3285'. [ 1361.506459][T16961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3293'. [ 1364.449988][T14095] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1364.605808][T14095] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1364.605836][T14095] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.651716][T14095] usb 10-1: config 0 descriptor?? [ 1364.659469][T14095] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1364.740119][ T9675] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1364.932104][ T9675] usb 9-1: Using ep0 maxpacket: 16 [ 1364.935715][ T9675] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.935815][ T9675] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1364.935837][ T9675] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.046108][T14095] gp8psk: usb in 128 operation failed. [ 1365.047948][T14095] gp8psk: usb in 137 operation failed. [ 1365.047964][T14095] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1365.080715][T14095] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1365.080784][T14095] usb 10-1: media controller created [ 1365.155455][ T9675] usb 9-1: config 0 descriptor?? [ 1365.319323][T17014] veth1_macvtap: left promiscuous mode [ 1365.319395][T17014] macsec0: entered promiscuous mode [ 1365.424049][T14095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1365.564520][T14095] gp8psk_fe: Frontend attached [ 1365.569434][T14095] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1365.604208][T14095] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1365.687938][ T9675] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1366.144856][T14095] gp8psk: usb in 138 operation failed. [ 1366.144875][T14095] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1366.144887][T14095] gp8psk: found Genpix USB device pID = 203 (hex) [ 1366.366452][T14095] usb 10-1: USB disconnect, device number 11 [ 1366.580612][ T9675] usb 9-1: USB disconnect, device number 12 [ 1366.765521][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.765592][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.422297][T14095] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1367.577160][T17044] loop5: detected capacity change from 0 to 7 [ 1368.033887][T11525] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.034106][T11525] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.073978][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.074012][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.074400][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.074424][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.074556][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.074578][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.074740][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.074761][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.074908][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.074930][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.075065][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.075087][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.075171][T17044] ldm_validate_partition_table(): Disk read failed. [ 1368.075227][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.075249][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.075376][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.075398][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.075525][T17044] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1368.075546][T17044] Buffer I/O error on dev loop5, logical block 0, async page read [ 1368.075746][T17044] Dev loop5: unable to read RDB block 0 [ 1368.076342][T17044] loop5: unable to read partition table [ 1368.076584][T17044] loop5: partition table beyond EOD, truncated [ 1368.076601][T17044] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1369.012304][T14095] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1369.113160][T17069] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 1369.160379][T14095] usb 10-1: Using ep0 maxpacket: 32 [ 1369.168596][T14095] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.168626][T14095] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.227354][T14095] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1369.227382][T14095] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1369.227400][T14095] usb 10-1: Product: syz [ 1369.227412][T14095] usb 10-1: Manufacturer: syz [ 1369.343865][T14095] hub 10-1:4.0: USB hub found [ 1369.599411][T14095] hub 10-1:4.0: 2 ports detected [ 1369.949016][T14095] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 1369.949041][T14095] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 1370.119451][T14095] usb 10-1: USB disconnect, device number 12 [ 1370.296430][T17085] sctp: [Deprecated]: syz.4.3343 (pid 17085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1370.296430][T17085] Use struct sctp_sack_info instead [ 1371.460832][T17099] Context (ID=0x0) not attached to queue pair (handle=0x4e1:0x0) [ 1377.579777][T17175] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1377.579777][T17175] The task syz.9.3378 (17175) triggered the difference, watch for misbehavior. [ 1377.743827][T10791] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1377.899966][T10791] usb 9-1: Using ep0 maxpacket: 8 [ 1377.924421][T10791] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1377.924450][T10791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.924468][T10791] usb 9-1: Product: syz [ 1377.924480][T10791] usb 9-1: Manufacturer: syz [ 1377.924493][T10791] usb 9-1: SerialNumber: syz [ 1377.970805][T10791] usb 9-1: config 0 descriptor?? [ 1377.984383][T17179] pim6reg1: entered allmulticast mode [ 1378.022252][T10791] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1378.628449][T17181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3382'. [ 1378.628483][T17181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3382'. [ 1378.659455][T17181] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1378.874988][T10791] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1378.875713][T10791] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1379.062062][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3384'. [ 1379.062302][T10791] usb 9-1: USB disconnect, device number 13 [ 1379.203418][T17190] loop8: detected capacity change from 0 to 8 [ 1379.329577][T15399] Dev loop8: unable to read RDB block 8 [ 1379.329632][T15399] loop8: unable to read partition table [ 1379.341819][T15399] loop8: partition table beyond EOD, truncated [ 1379.453032][T17190] Dev loop8: unable to read RDB block 8 [ 1379.453084][T17190] loop8: unable to read partition table [ 1379.453437][T17190] loop8: partition table beyond EOD, truncated [ 1379.453472][T17190] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1379.845694][T17194] syzkaller1: entered promiscuous mode [ 1379.845720][T17194] syzkaller1: entered allmulticast mode [ 1381.928884][T17232] input: syz1 as /devices/virtual/input/input20 [ 1382.107905][T17231] exFAT-fs (loop6): unable to read boot sector [ 1382.107924][T17231] exFAT-fs (loop6): failed to read boot sector [ 1382.107932][T17231] exFAT-fs (loop6): failed to recognize exfat type [ 1382.942985][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3409'. [ 1383.340073][ T9675] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1383.494106][ T9675] usb 9-1: Using ep0 maxpacket: 16 [ 1383.498578][ T9675] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1383.498604][ T9675] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.498622][ T9675] usb 9-1: config 0 has no interface number 0 [ 1383.585058][ T9675] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1383.585088][ T9675] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.585107][ T9675] usb 9-1: Product: syz [ 1383.585120][ T9675] usb 9-1: Manufacturer: syz [ 1383.585132][ T9675] usb 9-1: SerialNumber: syz [ 1383.706393][ T9675] usb 9-1: config 0 descriptor?? [ 1383.965854][ T9675] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1383.965922][ T9675] uvcvideo 9-1:0.105: No valid video chain found. [ 1384.001831][ T9675] usb 9-1: USB disconnect, device number 14 [ 1385.213233][T13952] udevd[13952]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1385.245520][T14334] udevd[14334]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1385.315784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1385.460511][T17274] overlay: filesystem on ./bus is read-only [ 1385.690537][T10791] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1385.840053][T10791] usb 9-1: Using ep0 maxpacket: 8 [ 1385.842759][T10791] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1385.842787][T10791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.935798][T10791] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1385.935816][T10791] pvrusb2: ********** [ 1385.935829][T10791] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1385.935839][T10791] pvrusb2: Important functionality might not be entirely working. [ 1385.935848][T10791] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1385.935858][T10791] pvrusb2: ********** [ 1386.163472][ T2370] pvrusb2: Invalid write control endpoint [ 1386.295260][T17288] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3424'. [ 1386.295288][T17288] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3424'. [ 1386.295304][T17288] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3424'. [ 1386.297147][T17288] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3424'. [ 1386.399513][T17272] pvrusb2: Invalid write control endpoint [ 1386.420086][T12665] usb 9-1: USB disconnect, device number 15 [ 1386.492547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.795943][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.842819][ T2370] pvrusb2: Invalid write control endpoint [ 1386.842837][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1386.842847][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1386.842855][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1386.842865][ T2370] pvrusb2: Device being rendered inoperable [ 1386.846656][ T2370] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1386.846720][ T2370] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1386.848729][ T2370] pvrusb2: Attached sub-driver cx25840 [ 1386.848741][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1386.855216][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1399.274048][T17395] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3447'. [ 1399.634967][T17401] vivid-004: disconnect [ 1399.696293][T17401] vivid-004: reconnect [ 1403.970029][T14095] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1404.128351][T14095] usb 10-1: Using ep0 maxpacket: 16 [ 1404.137964][T14095] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.137996][T14095] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1404.138030][T14095] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1404.138051][T14095] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.253091][T14095] usb 10-1: config 0 descriptor?? [ 1405.003940][T14095] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0010/input/input21 [ 1405.223506][T14095] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1405.290213][T14095] usb 10-1: USB disconnect, device number 13 [ 1407.023052][T17450] fido_id[17450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1409.558636][T15548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1409.574383][T12665] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1409.603426][T15548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1409.607356][T15548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1409.649259][T15548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1409.697297][T15548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1409.880065][T12665] usb 5-1: Using ep0 maxpacket: 8 [ 1409.883546][T12665] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1409.883574][T12665] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1409.883598][T12665] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1409.883619][T12665] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1409.883660][T12665] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1409.883680][T12665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.384745][T12665] usb 5-1: GET_CAPABILITIES returned 0 [ 1410.384796][T12665] usbtmc 5-1:16.0: can't read capabilities [ 1411.889991][T15548] Bluetooth: hci5: command tx timeout [ 1412.179089][T12665] usb 5-1: USB disconnect, device number 31 [ 1413.944001][T17479] fuse: Bad value for 'fd' [ 1414.013012][T15548] Bluetooth: hci5: command tx timeout [ 1416.383180][T15548] Bluetooth: hci5: command tx timeout [ 1416.492572][T12665] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1416.691183][T12665] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1416.691210][T12665] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1416.691233][T12665] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1416.691252][T12665] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1416.694274][T12665] usb 10-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1416.694301][T12665] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.694319][T12665] usb 10-1: Product: syz [ 1416.694331][T12665] usb 10-1: Manufacturer: syz [ 1416.694344][T12665] usb 10-1: SerialNumber: syz [ 1417.810211][T12665] usb 10-1: config 0 descriptor?? [ 1417.827575][T12665] ums-isd200 10-1:0.0: USB Mass Storage device detected [ 1418.551691][T15548] Bluetooth: hci5: command tx timeout [ 1419.380085][T12665] scsi host1: usb-storage 10-1:0.0 [ 1419.777298][T12665] usb 10-1: USB disconnect, device number 14 [ 1423.205760][T17500] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1428.331070][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1431.356981][T15548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1431.385823][T15548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1431.388736][T15548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1431.390334][T15548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1431.391133][T15548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1433.759991][T11558] Bluetooth: hci1: command tx timeout [ 1435.799922][T11558] Bluetooth: hci1: command tx timeout [ 1437.980128][T11558] Bluetooth: hci1: command tx timeout [ 1438.536447][T17464] chnl_net:caif_netlink_parms(): no params data found [ 1440.048249][T11558] Bluetooth: hci1: command tx timeout [ 1445.189424][T15548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1445.223253][T15548] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1445.225141][T15548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1445.266346][T15548] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1445.550471][T15548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1446.970001][T13482] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1447.650029][T11558] Bluetooth: hci2: command tx timeout [ 1448.634950][T15548] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1448.655271][T15548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1448.657173][T15548] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1448.658248][T15548] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1448.696007][T15548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1448.912262][T13482] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.912296][T13482] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.912317][T13482] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1448.912370][T13482] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1448.912391][T13482] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.969532][T13482] usb 9-1: config 0 descriptor?? [ 1450.059946][T11558] Bluetooth: hci2: command tx timeout [ 1450.276403][T13482] usbhid 9-1:0.0: can't add hid device: -71 [ 1450.276542][T13482] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1450.350177][T13482] usb 9-1: USB disconnect, device number 16 [ 1450.760150][T11558] Bluetooth: hci6: command tx timeout [ 1452.131069][T11558] Bluetooth: hci2: command tx timeout [ 1453.967822][T11558] Bluetooth: hci6: command tx timeout [ 1454.203691][T11558] Bluetooth: hci2: command tx timeout [ 1454.972361][T17540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.040438][T11558] Bluetooth: hci6: command tx timeout [ 1456.334358][T17540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1458.120149][T11558] Bluetooth: hci6: command tx timeout [ 1472.304116][T17516] chnl_net:caif_netlink_parms(): no params data found [ 1474.273641][T15548] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1474.510300][T15548] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1474.609762][T15548] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1474.611067][T15548] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1474.643589][T15548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1474.693379][T15548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1474.724334][T15548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1474.725992][T15548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1474.727149][T15548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1474.727963][T15548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1477.455332][T11558] Bluetooth: hci7: command tx timeout [ 1477.456395][T11558] Bluetooth: hci5: command tx timeout [ 1479.479998][T11558] Bluetooth: hci5: command tx timeout [ 1479.480030][T11558] Bluetooth: hci7: command tx timeout [ 1481.564773][T15548] Bluetooth: hci7: command tx timeout [ 1481.564811][T15548] Bluetooth: hci5: command tx timeout [ 1483.720070][T11558] Bluetooth: hci5: command tx timeout [ 1483.720104][T11558] Bluetooth: hci7: command tx timeout [ 1487.013207][T11558] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1487.020946][T11558] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1487.035763][T11558] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1487.062816][T11558] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1487.065559][T11558] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1488.711946][T17536] chnl_net:caif_netlink_parms(): no params data found [ 1489.650551][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.440163][ T5817] Bluetooth: hci8: command tx timeout [ 1492.520058][ T5817] Bluetooth: hci8: command tx timeout [ 1494.613006][ T5817] Bluetooth: hci8: command tx timeout [ 1496.680709][ T5817] Bluetooth: hci8: command tx timeout [ 1507.636726][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1507.662059][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1507.663670][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1507.664904][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1507.665746][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1509.799964][ T5817] Bluetooth: hci1: command tx timeout [ 1511.940065][ T5817] Bluetooth: hci1: command tx timeout [ 1512.338608][T15548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1512.365745][T15548] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1512.369731][T15548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1512.393432][T15548] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1512.394185][T15548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1513.970211][ T5817] Bluetooth: hci1: command tx timeout [ 1514.710138][ T5817] Bluetooth: hci2: command tx timeout [ 1516.059965][ T5817] Bluetooth: hci1: command tx timeout [ 1516.760054][ T5817] Bluetooth: hci2: command tx timeout [ 1518.840023][ T5817] Bluetooth: hci2: command tx timeout [ 1520.938864][ T5817] Bluetooth: hci2: command tx timeout [ 1536.041024][T15548] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1536.060704][T15548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1536.068770][T15548] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1536.102831][T15548] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1536.110180][T15548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1536.153295][T11558] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1536.176325][T11558] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1536.178035][T11558] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1536.230545][ T5817] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1536.251191][ T5817] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1538.360144][T15548] Bluetooth: hci9: command tx timeout [ 1538.361009][T15548] Bluetooth: hci6: command tx timeout [ 1540.460076][ T5817] Bluetooth: hci6: command tx timeout [ 1540.460106][ T5817] Bluetooth: hci9: command tx timeout [ 1542.798809][T15548] Bluetooth: hci9: command tx timeout [ 1542.798843][T15548] Bluetooth: hci6: command tx timeout [ 1544.950081][T15548] Bluetooth: hci9: command tx timeout [ 1544.950116][T15548] Bluetooth: hci6: command tx timeout [ 1547.416379][T15548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1547.429243][T15548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1547.438561][T15548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1547.439597][T15548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1547.461974][T15548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1549.480360][ T5817] Bluetooth: hci5: command tx timeout [ 1551.085319][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.564617][ T5817] Bluetooth: hci5: command tx timeout [ 1553.640389][ T5817] Bluetooth: hci5: command tx timeout [ 1555.731412][ T5817] Bluetooth: hci5: command tx timeout [ 1563.669730][T15548] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1563.683547][T15548] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1563.685166][T15548] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1563.689687][T15548] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1563.701755][T15548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1565.810472][ T5817] Bluetooth: hci7: command tx timeout [ 1567.899950][T11558] Bluetooth: hci7: command tx timeout [ 1568.049432][T15548] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1568.076063][T15548] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1568.080213][T15548] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1568.081436][T15548] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1568.090456][T15548] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1568.660120][ T38] INFO: task syz.6.3438:17386 blocked for more than 144 seconds. [ 1568.660143][ T38] Not tainted syzkaller #0 [ 1568.660152][ T38] Blocked by coredump. [ 1568.660158][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1568.660166][ T38] task:syz.6.3438 state:D stack:22968 pid:17386 tgid:17380 ppid:13704 task_flags:0x40054c flags:0x00080001 [ 1568.661338][ T38] Call Trace: [ 1568.661345][ T38] [ 1568.661359][ T38] __schedule+0x16f3/0x4c20 [ 1568.661419][ T38] ? __pfx___schedule+0x10/0x10 [ 1568.661461][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1568.661489][ T38] rt_mutex_schedule+0x77/0xf0 [ 1568.661536][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1568.661556][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1568.661594][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1568.661617][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1568.661637][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1568.661655][ T38] ? __lock_acquire+0xab9/0xd20 [ 1568.661688][ T38] ? rcu_barrier+0x4c/0x570 [ 1568.661742][ T38] ? rcu_barrier+0x4c/0x570 [ 1568.661758][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1568.661775][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1568.661797][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1568.661906][ T38] rcu_barrier+0x4c/0x570 [ 1568.661929][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1568.661951][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1568.661971][ T38] netdev_run_todo+0x327/0xea0 [ 1568.662058][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1568.662129][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1568.662149][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1568.662182][ T38] ? netdev_state_change+0x1ca/0x220 [ 1568.662202][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1568.662223][ T38] tun_chr_close+0x13f/0x1c0 [ 1568.662246][ T38] __fput+0x45b/0xa80 [ 1568.662298][ T38] task_work_run+0x1d4/0x260 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1568.662320][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1568.662337][ T38] ? do_exit+0x6b0/0x2300 [ 1568.662361][ T38] ? do_exit+0x6b0/0x2300 [ 1568.662388][ T38] do_exit+0x6b5/0x2300 [ 1568.662410][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1568.662446][ T38] ? __pfx_do_exit+0x10/0x10 [ 1568.662465][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1568.662484][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1568.662519][ T38] do_group_exit+0x21c/0x2d0 [ 1568.662536][ T38] ? rt_spin_unlock+0x161/0x200 [ 1568.662558][ T38] get_signal+0x125d/0x1310 [ 1568.662603][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 1568.662673][ T38] ? __pfx___x64_sys_clone+0x10/0x10 [ 1568.662703][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1568.662741][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1568.662767][ T38] exit_to_user_mode_loop+0x72/0x130 [ 1568.662789][ T38] do_syscall_64+0x2bd/0xfa0 [ 1568.662810][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1568.662833][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.662897][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1568.662919][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.662936][ T38] RIP: 0033:0x7f082ef4f749 [ 1568.662952][ T38] RSP: 002b:00007f082d18cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1568.662971][ T38] RAX: fffffffffffffffc RBX: 00007f082f1a6090 RCX: 00007f082ef4f749 [ 1568.662985][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 1568.662996][ T38] RBP: 00007f082efd3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1568.663008][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1568.663019][ T38] R13: 00007f082f1a6128 R14: 00007f082f1a6090 R15: 00007ffc84a647a8 [ 1568.663052][ T38] [ 1568.663092][ T38] [ 1568.663092][ T38] Showing all locks held in the system: [ 1568.663106][ T38] 4 locks held by ktimers/0/16: [ 1568.663118][ T38] 4 locks held by rcuc/0/20: [ 1568.663129][ T38] 3 locks held by ksoftirqd/1/30: [ 1568.663139][ T38] 1 lock held by khungtaskd/38: [ 1568.663148][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1568.663208][ T38] 6 locks held by kworker/u8:6/1140: [ 1568.663233][ T38] 2 locks held by getty/5558: [ 1568.663243][ T38] #0: ffff88814e2340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1568.663365][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1568.663439][ T38] 2 locks held by kworker/1:4/5873: [ 1568.663450][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1568.663494][ T38] #1: ffffc90004ed7ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1568.663537][ T38] 3 locks held by kworker/1:6/5887: [ 1568.663547][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1568.663596][ T38] #1: ffffc90004fb7ba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1568.663638][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.663685][ T38] 3 locks held by kworker/1:0/12665: [ 1568.663702][ T38] 6 locks held by kworker/u8:30/17325: [ 1568.663714][ T38] 3 locks held by kworker/u8:59/17359: [ 1568.663725][ T38] 6 locks held by kworker/u8:60/17361: [ 1568.663736][ T38] 1 lock held by syz.6.3438/17386: [ 1568.663745][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.663786][ T38] 1 lock held by syz.7.3452/17410: [ 1568.663796][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.663836][ T38] 1 lock held by syz-executor/17464: [ 1568.663845][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.663886][ T38] 1 lock held by syz.9.3481/17494: [ 1568.663895][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.663936][ T38] 2 locks held by syz.4.3482/17507: [ 1568.663945][ T38] #0: ffffffff8e856a80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1568.663985][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.664025][ T38] 1 lock held by syz-executor/17516: [ 1568.664035][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.664075][ T38] 1 lock held by syz-executor/17532: [ 1568.664085][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.664125][ T38] 1 lock held by syz-executor/17536: [ 1568.664135][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.664174][ T38] 1 lock held by syz.8.3491/17539: [ 1568.664184][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.664225][ T38] 1 lock held by syz-executor/17553: [ 1568.664234][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.664274][ T38] 1 lock held by syz-executor/17557: [ 1568.664284][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.664330][ T38] 1 lock held by syz-executor/17565: [ 1568.664340][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1568.664380][ T38] 1 lock held by syz-executor/17585: [ 1568.664391][ T38] 2 locks held by syz-executor/17597: [ 1568.664400][ T38] #0: ffffffff8e856a80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1568.664439][ T38] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1568.664481][ T38] 2 locks held by syz-executor/17606: [ 1568.664491][ T38] #0: ffffffff8e856a80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1568.664530][ T38] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1568.664616][ T38] 2 locks held by syz-executor/17616: [ 1568.664627][ T38] 1 lock held by syz-executor/17620: [ 1568.664637][ T38] 2 locks held by udevd/17623: [ 1568.664648][ T38] [ 1568.664652][ T38] ============================================= [ 1568.664652][ T38] [ 1568.664661][ T38] NMI backtrace for cpu 1 [ 1568.664679][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1568.664724][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1568.664746][ T38] Call Trace: [ 1568.664761][ T38] [ 1568.664777][ T38] dump_stack_lvl+0x189/0x250 [ 1568.664848][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1568.664912][ T38] ? __pfx__printk+0x10/0x10 [ 1568.664991][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1568.665053][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1568.665075][ T38] ? __pfx__printk+0x10/0x10 [ 1568.665099][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1568.665127][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1568.665149][ T38] watchdog+0xf60/0xfa0 [ 1568.665186][ T38] ? watchdog+0x1e2/0xfa0 [ 1568.665213][ T38] kthread+0x711/0x8a0 [ 1568.665238][ T38] ? __pfx_watchdog+0x10/0x10 [ 1568.665259][ T38] ? __pfx_kthread+0x10/0x10 [ 1568.665277][ T38] ? rt_spin_unlock+0x150/0x200 [ 1568.665307][ T38] ? rt_spin_unlock+0x161/0x200 [ 1568.665323][ T38] ? __pfx_kthread+0x10/0x10 [ 1568.665346][ T38] ret_from_fork+0x4bc/0x870 [ 1568.665368][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1568.665394][ T38] ? __switch_to_asm+0x39/0x70 [ 1568.665410][ T38] ? __switch_to_asm+0x33/0x70 [ 1568.665425][ T38] ? __pfx_kthread+0x10/0x10 [ 1568.665447][ T38] ret_from_fork_asm+0x1a/0x30 [ 1568.665480][ T38] [ 1568.665487][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1568.665511][ C0] NMI backtrace for cpu 0 [ 1568.665525][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1568.665550][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1568.665560][ C0] RIP: 0010:lock_release+0x295/0x3e0 [ 1568.665583][ C0] Code: 5c 24 08 48 c7 c7 a0 56 f6 8c e8 66 cc 24 09 b8 ff ff ff ff 65 0f c1 05 59 f1 06 10 83 f8 01 75 51 48 c7 44 24 20 00 00 00 00 <9c> 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 [ 1568.665599][ C0] RSP: 0018:ffffc900001566b0 EFLAGS: 00000046 [ 1568.665614][ C0] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 531482936e8b3100 [ 1568.665626][ C0] RDX: 0000000000000005 RSI: ffffffff8cf656a0 RDI: ffffffff8b3ddfe0 [ 1568.665639][ C0] RBP: ffff88801b2d6628 R08: ffffc90000156df0 R09: 0000000000000000 [ 1568.665650][ C0] R10: ffffc90000156838 R11: fffff5200002ad09 R12: 0000000000000005 [ 1568.665663][ C0] R13: 0000000000000005 R14: ffffffff8d5aa880 R15: ffff88801b2d5a00 [ 1568.665675][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 1568.665690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1568.665702][ C0] CR2: 00007ffe58218010 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 1568.665717][ C0] Call Trace: [ 1568.665723][ C0] [ 1568.665731][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1568.665753][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1568.665773][ C0] unwind_next_frame+0x19a9/0x2390 [ 1568.665796][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1568.665816][ C0] ? debug_object_activate+0x6c/0x3a0 [ 1568.665868][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1568.665886][ C0] arch_stack_walk+0x11c/0x150 [ 1568.665910][ C0] ? call_rcu+0xaa/0x9c0 [ 1568.665927][ C0] stack_trace_save+0x9c/0xe0 [ 1568.665944][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1568.665961][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1568.665984][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1568.666008][ C0] kasan_save_track+0x3e/0x80 [ 1568.666036][ C0] ? kasan_save_track+0x3e/0x80 [ 1568.666053][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1568.666072][ C0] ? kmem_cache_alloc_noprof+0x181/0x6b0 [ 1568.666092][ C0] ? fill_pool+0x100/0x570 [ 1568.666110][ C0] ? debug_objects_fill_pool+0x107/0x120 [ 1568.666128][ C0] ? debug_object_activate+0x6c/0x3a0 [ 1568.666171][ C0] ? __slab_alloc+0xc6/0x1f0 [ 1568.666186][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1568.666206][ C0] ? fill_pool+0x100/0x570 [ 1568.666224][ C0] kmem_cache_alloc_noprof+0x181/0x6b0 [ 1568.666248][ C0] fill_pool+0x100/0x570 [ 1568.666268][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 1568.666288][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1568.666310][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 1568.666329][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 1568.666349][ C0] debug_objects_fill_pool+0x107/0x120 [ 1568.666369][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 1568.666394][ C0] debug_object_activate+0x6c/0x3a0 [ 1568.666417][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1568.666438][ C0] call_rcu+0xaa/0x9c0 [ 1568.666458][ C0] ? rcuref_put+0x1b7/0x210 [ 1568.666478][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1568.666493][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 1568.666517][ C0] ? dst_release+0x126/0x1b0 [ 1568.666538][ C0] skb_release_head_state+0x71/0x250 [ 1568.666563][ C0] consume_skb+0x60/0xf0 [ 1568.666580][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 1568.666679][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1568.666703][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1568.666782][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1568.666803][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1568.666822][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1568.666853][ C0] nft_do_chain+0x40c/0x1920 [ 1568.666919][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1568.666945][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1568.666964][ C0] ? debug_object_assert_init+0x65/0x300 [ 1568.666987][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1568.667010][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 1568.667036][ C0] nft_do_chain_inet+0x25d/0x340 [ 1568.667108][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1568.667129][ C0] ? __lock_acquire+0xab9/0xd20 [ 1568.667154][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1568.667202][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1568.667223][ C0] nf_hook_slow+0xc5/0x220 [ 1568.667250][ C0] NF_HOOK+0x206/0x3a0 [ 1568.667267][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1568.667283][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1568.667297][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1568.667311][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1568.667329][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1568.667347][ C0] ? skb_dst+0x4f/0xd0 [ 1568.667362][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1568.667379][ C0] NF_HOOK+0x30c/0x3a0 [ 1568.667395][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1568.667411][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1568.667426][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1568.667442][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1568.667463][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1568.667477][ C0] __netif_receive_skb+0x143/0x380 [ 1568.667503][ C0] ? process_backlog+0x27b/0x900 [ 1568.667517][ C0] process_backlog+0x31e/0x900 [ 1568.667544][ C0] __napi_poll+0xb6/0x540 [ 1568.667568][ C0] net_rx_action+0x5f7/0xda0 [ 1568.667591][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1568.667608][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1568.667633][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1568.667657][ C0] handle_softirqs+0x22f/0x710 [ 1568.667680][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1568.667704][ C0] run_ktimerd+0xcf/0x190 [ 1568.667724][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1568.667743][ C0] ? schedule+0x91/0x360 [ 1568.667766][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1568.667785][ C0] smpboot_thread_fn+0x542/0xa60 [ 1568.667805][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1568.667828][ C0] kthread+0x711/0x8a0 [ 1568.667851][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1568.667870][ C0] ? __pfx_kthread+0x10/0x10 [ 1568.667890][ C0] ? rt_spin_unlock+0x150/0x200 [ 1568.667910][ C0] ? rt_spin_unlock+0x161/0x200 [ 1568.667927][ C0] ? __pfx_kthread+0x10/0x10 [ 1568.667949][ C0] ret_from_fork+0x4bc/0x870 [ 1568.667968][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1568.667990][ C0] ? __switch_to_asm+0x39/0x70 [ 1568.668005][ C0] ? __switch_to_asm+0x33/0x70 [ 1568.668020][ C0] ? __pfx_kthread+0x10/0x10 [ 1568.668042][ C0] ret_from_fork_asm+0x1a/0x30 [ 1568.668067][ C0] [ 1570.094946][ T5817] Bluetooth: hci7: command tx timeout [ 1570.256130][ T5817] Bluetooth: hci8: command tx timeout [ 1572.399871][ T5817] Bluetooth: hci7: command tx timeout [ 1572.399905][ T5817] Bluetooth: hci8: command tx timeout [ 1574.459922][T15548] Bluetooth: hci8: command tx timeout [ 1576.519918][T15548] Bluetooth: hci8: command tx timeout