last executing test programs: 3m19.561149001s ago: executing program 0 (id=944): r0 = syz_io_uring_setup(0x8e, 0x0, &(0x7f0000000380)=0x0, 0x0) io_uring_setup(0x5990, &(0x7f00000003c0)={0x0, 0xeae0, 0x2, 0x2, 0x18c, 0x0, r0}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000040)=[0xf, 0x6], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d22, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 3m16.457710261s ago: executing program 0 (id=951): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 3m16.245647133s ago: executing program 0 (id=953): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0xafb8a1a4416d9a34}, 0x0) 3m15.793129633s ago: executing program 0 (id=956): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x41, 0x0, 0x7, 0x7ffc0001}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$kcm(0x10, 0x2, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) socket$packet(0x11, 0x3, 0x300) 3m14.813850152s ago: executing program 0 (id=957): r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c460407000304000000000000000200030003000000"], 0x258) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3m13.33095315s ago: executing program 0 (id=960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000680)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 2m56.344175918s ago: executing program 32 (id=960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000680)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 20.313203637s ago: executing program 1 (id=1396): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x81, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="840100001000130400000000fbdbdf250a0101dd000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x184}}, 0x4048851) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffff8c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0}, 0x94) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000002f00010000000000fcdbdf", @ANYBLOB="c0c5ea6dfc3dfb457a1c320e9a13172af3ca5e7c771c4013a48c76c2c168edf24b2f33cb534f1ae1e2f85267cb487966f7b2888e60b348754a8ead8e89fa59f031747fc2eb53a2656f5a9845cfc98b95"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x34343452, 0x5, 0x8, [{0x6, 0x10}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x1, 0x7}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) 17.05715581s ago: executing program 1 (id=1404): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r3, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb02468799ce387cb38848442a8bac944cafa6006ad0cad331750787f6572490373b915434708b46f6f858b877b3c5031f976dfa9d79115f93d400", 0x6f}, {&(0x7f00000024c0)="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", 0x628}, {&(0x7f0000000940)="dd09685c6d6d24005d353911c37357e50a5571ce326b2b217c121fbfca79449cba01ca0f7b09761850e4547adf5db2a9", 0x30}, {&(0x7f00000034c0)}, {&(0x7f0000000a40)="2a3deb398b53e788b26eb617d0dc691d24ebc2a22da7fc38024de9de13340f4f4c8449d9e89c07a176", 0x29}, {0x0}, {&(0x7f0000000c00)}], 0x7}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000000e80)="73359c7aef6c8c46c16b02df643c244001ccb84a8f1ca6395a76f2bece75531a08f89ec1474622da43892ee1a02c355c5634564dd9cf67a6cb36b72e51d985bb023808ded7b261784e71ce39f6857c71887c085a520dccdd658561f7a4a5fa76d43fa855a716e315d7cd9771c4f64fc0a5eeee5fca2a2e84f6f6f5c397f812d38c7343ed5118ead79d58903a07573b73377b750938eb61d2ae8bf98b33c92fd6360590382cf64b65ab54688714c146da89312abb727fe5febd996fe20892b60cc9af7fba8f1a0161489a84d03c0a176ce6", 0xd1}, {0x0}, {0x0}, {0x0}, {&(0x7f00000044c0)="597a6b789cd5110caaa8e68623b0d55cfdff26cc78f16da427c07a314759cf6ca6867f2cda685d0f6a6723b953cb682580a11d0f01f7d7c16d7fb344aea09f9c6aa7639fc31813f85abae92cc838632e169851ff784e77c611e47d0a0269651bb766f9668aa38a809267f6afb294fecbee8cc4383ea66e5b9209ee2b3e19bef5d6ae6c155fbaecb16cb9f1d8d954cdfb7595b8c54d27674b518377ad919e", 0x9e}, {&(0x7f00000013c0)="e2f5e0db6549ee7d1669356953", 0xd}], 0x6, &(0x7f00000048c0)=ANY=[@ANYBLOB="40000000000000002900000037000000ff0400000000000007180000000304ff00800400000000000000000000000000000000010005020c5f040100280000000000000029000000040000000001000000000000000100050200ff04"], 0x80}}, {{&(0x7f0000004680)={0xa, 0x4e22, 0x3, @local, 0x7}, 0x1c, &(0x7f0000004700)=[{&(0x7f00000046c0)="e5dbe94c6d46969f", 0x8}], 0x1}}], 0x5, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x601, 0x0, &(0x7f0000000180), &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[0x0], &(0x7f0000000040), 0x0, 0x8}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0xfffe, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0x200000b2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0xc5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x5e4, 0x1, 0x1, {0x22, 0x466}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x91, 0x8, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3c7, 0x3, 0x1}}]}}}]}}]}}, 0x0) 13.878401064s ago: executing program 3 (id=1416): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 12.677481613s ago: executing program 3 (id=1417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x30}], 0x1, 0x0, 0x0, 0x24044011}, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000180)="66b99000004066b80840000066ba000000000f30440f20c066350c000000440f22c00f0f9a6a82b0e40066b99f03000066b80500000066ba008000000f30baf80c66b80477a78466efbafc0c66ed2e673e0fc73e3ef26f0faeeabad10466b8ba00008466ef", 0x65}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000140)="4416de8f8237d0bc2f39ac01", 0xc, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) 10.575766338s ago: executing program 3 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mlockall(0x2) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 10.125106667s ago: executing program 4 (id=1423): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r6 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xed}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0xa, 0xc}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[r6], 0x1) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x41}, 0x8) 8.977459101s ago: executing program 4 (id=1424): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 8.948505276s ago: executing program 1 (id=1425): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x2) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) 8.217350844s ago: executing program 4 (id=1427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37055437", 0x1f) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d27e096c28b61f97670f283a7de80ecc00", 0x11}], 0x1, 0x0, 0x0, 0x404c0c5}], 0x1, 0x4004041) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) 8.051531671s ago: executing program 4 (id=1428): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 8.00254664s ago: executing program 3 (id=1429): r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) io_setup(0x4, 0x0) 7.581253256s ago: executing program 5 (id=1430): getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x4, 0x8682) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019b80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x330}, 0x1, 0x0, 0x0, 0x44}, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r1, r1, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000019400)) stat(&(0x7f00000193c0)='./file1\x00', &(0x7f0000019480)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x200304, 0x4) lstat(&(0x7f0000000200)='./file1\x00', 0x0) r3 = syz_open_dev$MSR(&(0x7f0000019440), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r6 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000080)={0xa, {0x2, 0x7f, 0x3}}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000019680)={0xf, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 7.356536082s ago: executing program 2 (id=1431): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x2}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e090000030000000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000040000000700"/28], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x5) 6.504962566s ago: executing program 5 (id=1432): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x30}], 0x1, 0x0, 0x0, 0x24044011}, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000180)="66b99000004066b80840000066ba000000000f30440f20c066350c000000440f22c00f0f9a6a82b0e40066b99f03000066b80500000066ba008000000f30baf80c66b80477a78466efbafc0c66ed2e673e0fc73e3ef26f0faeeabad10466b8ba00008466ef", 0x65}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000140)="4416de8f8237d0bc2f39ac01", 0xc, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) 5.568052978s ago: executing program 2 (id=1433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000101401"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioperm(0x7, 0x81, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 4.871368459s ago: executing program 5 (id=1434): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c5f6bebd763ac3d358278bf00000000020108e8080000000000000069770908000840000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40084) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 4.685623961s ago: executing program 2 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r4, &(0x7f00000001c0), 0x0, 0x2000, 0x0) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}], 0x3, 0x2, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000008380)='./bus\x00', 0x2014408, &(0x7f0000000000)={[{@barrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp866'}}, {}, {@umask}, {@nodecompose}, {@part={'part', 0x3d, 0x1}}, {@uid}, {@umask={'umask', 0x3d, 0x6}}]}, 0x1, 0x6f8, &(0x7f0000000b00)="$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") mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./bus\x00') 4.542803373s ago: executing program 5 (id=1436): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0xa, 0xc}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x41}, 0x8) 3.465400948s ago: executing program 2 (id=1437): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) 3.019809467s ago: executing program 1 (id=1438): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.356804642s ago: executing program 3 (id=1439): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4004041) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) 2.197021331s ago: executing program 1 (id=1440): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1ff}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.167232923s ago: executing program 4 (id=1441): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@gettaction={0x28, 0x32, 0xbd5139864f3acfa7, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x20040054) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.067181569s ago: executing program 5 (id=1442): syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) 1.305242176s ago: executing program 2 (id=1443): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000000000300"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffc88, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0xb8}}, 0x20000000) writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$setown(r6, 0x8, r4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) 1.001013276s ago: executing program 4 (id=1444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioperm(0x7, 0x81, 0x2) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) 968.372758ms ago: executing program 3 (id=1445): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7f, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800000000, 0xba, 0xffffffffffffffff}], 0x1, 0xbff, 0x1e, 0x2, 0x2c, 0x6e}) flock(0xffffffffffffffff, 0x1) 85.020242ms ago: executing program 5 (id=1446): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c5f6bebd763ac3d358278bf00000000020108e8080000000000000069770908000840000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40084) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 41.495525ms ago: executing program 1 (id=1447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x41, 0x0, 0x7, 0x7ffc0001}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$kcm(0x10, 0x2, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 2 (id=1448): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) kernel console output (not intermixed with test programs): - 0 [ 176.287354][ T3008] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.343130][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 176.851823][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 177.313020][ T6757] binder: 6751:6757 ioctl 4018620d 0 returned -22 [ 177.877913][ T6756] loop0: detected capacity change from 0 to 32768 [ 177.919841][ T6756] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.229 (6756) [ 178.120148][ T6756] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.130525][ T6756] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 178.172541][ T6756] BTRFS info (device loop0): enabling ssd optimizations [ 178.180699][ T6756] BTRFS info (device loop0): turning on async discard [ 178.187911][ T6756] BTRFS info (device loop0): enabling free space tree [ 178.749832][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.481182][ T6794] loop2: detected capacity change from 0 to 131072 [ 181.542815][ T6794] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 181.551303][ T6794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 181.565289][ T6794] F2FS-fs (loop2): invalid crc value [ 181.725252][ T6794] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 181.756902][ T6794] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 181.764809][ T6794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 181.901558][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.933374][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 181.968889][ T9] usb 5-1: can't read configurations, error -71 [ 182.772431][ T6812] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.761518][ T6847] 9pnet_virtio: no channels available for device syz [ 186.389847][ T938] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 186.630479][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 187.368783][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 187.538615][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 187.548136][ T5897] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 187.559630][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.597914][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.648630][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.678079][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.770754][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.794946][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.919563][ T6866] bridge_slave_0: left allmulticast mode [ 187.951004][ T6866] bridge_slave_0: left promiscuous mode [ 187.968720][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.061008][ T6866] bridge_slave_1: left allmulticast mode [ 188.072787][ T6866] bridge_slave_1: left promiscuous mode [ 188.079984][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.087540][ T5897] usb 3-1: GET_CAPABILITIES returned 0 [ 188.104156][ T6866] bond0: (slave bond_slave_0): Releasing backup interface [ 188.112070][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 188.139858][ T6869] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 188.150719][ T6866] bond0: (slave bond_slave_1): Releasing backup interface [ 188.175708][ T6866] team0: Port device team_slave_0 removed [ 188.288749][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 188.321986][ T5897] usb 3-1: USB disconnect, device number 2 [ 188.330345][ T6866] team0: Port device team_slave_1 removed [ 188.336471][ T6866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.422705][ T6866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.493322][ T6866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.629172][ T6867] team0: Mode changed to "loadbalance" [ 188.659765][ T938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.673074][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.722184][ T938] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 188.748529][ T938] usb 4-1: can't read configurations, error -71 [ 188.969102][ T6869] team0: Port device bond0 added [ 189.816547][ T6885] loop3: detected capacity change from 0 to 32768 [ 189.831405][ T6885] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.259 (6885) [ 189.878885][ T6885] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.889650][ T6885] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 190.007173][ T6885] BTRFS info (device loop3): enabling ssd optimizations [ 190.015870][ T6885] BTRFS info (device loop3): turning on async discard [ 190.022722][ T6885] BTRFS info (device loop3): enabling free space tree [ 190.734147][ T5842] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.868692][ T6870] team0 (unregistering): Port device bond0 removed [ 193.108754][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 193.828621][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 194.392458][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.815101][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.340641][ T6968] netlink: 'syz.2.281': attribute type 4 has an invalid length. [ 197.463239][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 197.478954][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 197.486593][ T9] usb 4-1: can't read configurations, error -71 [ 198.516052][ T6986] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 200.023443][ T7004] loop1: detected capacity change from 0 to 1024 [ 200.331196][ T5905] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.421199][ T7023] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 200.534509][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 200.545012][ T5905] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 200.636657][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.680332][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.697243][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.760258][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 201.296140][ T5905] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 201.305613][ T5905] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 201.323625][ T5905] usb 3-1: Manufacturer: syz [ 201.357190][ T5905] usb 3-1: config 0 descriptor?? [ 202.268804][ T5898] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.449266][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 202.645697][ T5905] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 202.689941][ T5905] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 202.927579][ T7054] 9pnet_virtio: no channels available for device syz [ 203.221667][ T5905] usb 3-1: USB disconnect, device number 3 [ 203.225204][ T7066] syz.1.310 uses obsolete (PF_INET,SOCK_PACKET) [ 203.368353][ T7056] fido_id[7056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 203.410787][ T7063] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 203.960599][ T7077] process 'syz.2.312' launched './file0' with NULL argv: empty string added [ 204.444913][ T7077] mkiss: ax0: crc mode is auto. [ 204.464427][ T7080] loop4: detected capacity change from 0 to 4096 [ 204.540674][ T7080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.620195][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.203025][ T7097] syz.0.317 (7097): /proc/7091/oom_adj is deprecated, please use /proc/7091/oom_score_adj instead. [ 207.049748][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 207.142623][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 208.033994][ T5898] usb 4-1: can't read configurations, error -71 [ 208.739317][ T7124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.326'. [ 211.833275][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 211.839526][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.845775][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 211.852313][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 212.416816][ T7158] loop4: detected capacity change from 0 to 1024 [ 212.521899][ T7155] loop2: detected capacity change from 0 to 4096 [ 212.576642][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.702499][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.056818][ T7177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.116461][ T7205] loop1: detected capacity change from 0 to 256 [ 217.218891][ T7200] bond0: entered promiscuous mode [ 217.236423][ T7200] bond_slave_0: entered promiscuous mode [ 217.414445][ T7200] bond_slave_1: entered promiscuous mode [ 217.703696][ T7200] dummy0: entered promiscuous mode [ 217.773217][ T7200] hsr1: entered promiscuous mode [ 217.778261][ T7200] hsr1: entered allmulticast mode [ 217.998569][ T7200] bond0: entered allmulticast mode [ 218.003749][ T7200] bond_slave_0: entered allmulticast mode [ 218.818956][ T7200] bond_slave_1: entered allmulticast mode [ 218.881533][ T7200] dummy0: entered allmulticast mode [ 219.407058][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 219.440647][ T30] audit: type=1326 audit(1761760253.848:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 219.695864][ T30] audit: type=1326 audit(1761760253.848:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 219.720168][ T30] audit: type=1326 audit(1761760253.848:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 219.945499][ T30] audit: type=1326 audit(1761760253.848:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 220.208955][ T30] audit: type=1326 audit(1761760253.848:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 220.315964][ T30] audit: type=1326 audit(1761760253.848:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 220.583959][ T30] audit: type=1326 audit(1761760253.848:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 220.644130][ T30] audit: type=1326 audit(1761760253.848:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 220.706574][ T30] audit: type=1326 audit(1761760253.848:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 220.830443][ T30] audit: type=1326 audit(1761760253.848:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 221.159310][ T7236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.571164][ T7270] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 224.678532][ T5898] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 224.680025][ T7270] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 224.901047][ T7270] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 225.029905][ T7270] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 225.078765][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 225.307358][ T5898] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 225.322398][ T5898] usb 5-1: config 0 has no interface number 0 [ 225.339436][ T5898] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 225.364382][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.450899][ T5898] usb 5-1: Product: syz [ 225.475208][ T5898] usb 5-1: Manufacturer: syz [ 225.538897][ T5898] usb 5-1: SerialNumber: syz [ 225.599591][ T5898] usb 5-1: config 0 descriptor?? [ 225.665786][ T5898] hub 5-1:0.145: bad descriptor, ignoring hub [ 225.690136][ T5898] hub 5-1:0.145: probe with driver hub failed with error -5 [ 225.743186][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input5 [ 225.804632][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.812147][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.006125][ T5898] input: failed to attach handler mousedev to device input5, error: -2 [ 228.730607][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.802407][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.079983][ T45] usb 5-1: USB disconnect, device number 4 [ 229.476192][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.525416][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.554556][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.595094][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.537858][ T7343] loop3: detected capacity change from 0 to 256 [ 233.672730][ T7346] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 234.408559][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 234.654062][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.675638][ T9] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 234.714076][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.791143][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.863535][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 234.935394][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.044260][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.085933][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.248839][ T45] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 235.266242][ T9] usb 2-1: Product: syz [ 235.283595][ T9] usb 2-1: Manufacturer: syz [ 235.363604][ T7361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.386593][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 235.411188][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 235.417183][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.453456][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 235.488508][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 235.491692][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 235.515849][ T7375] netlink: 56 bytes leftover after parsing attributes in process `syz.3.404'. [ 235.552765][ T45] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 235.586194][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.610726][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.617595][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.624583][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.631199][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.637498][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.644109][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.650463][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.657092][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.668701][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.675329][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.681729][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.688334][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.694611][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.701207][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.707451][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.714058][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.720387][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.727011][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.733417][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 235.740131][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 235.780367][ T45] usb 5-1: config 0 descriptor?? [ 235.807843][ T45] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 235.815614][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 235.888565][ T7361] netlink: 92 bytes leftover after parsing attributes in process `syz.1.398'. [ 235.905755][ T45] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 235.930237][ T45] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 235.967123][ T45] usb 5-1: media controller created [ 235.998859][ T7361] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 236.013170][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.060248][ T7361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.398'. [ 236.119477][ T7361] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 236.137192][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 236.178718][ T7361] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 236.193844][ T45] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 236.216381][ T7361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 236.235857][ T45] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 236.289252][ T5947] usb 2-1: USB disconnect, device number 4 [ 236.295292][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 236.331626][ T45] dvb-usb: schedule remote query interval to 150 msecs. [ 236.361915][ T45] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 236.409566][ T45] usb 5-1: USB disconnect, device number 5 [ 236.453351][ T45] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 236.541969][ T7387] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.096834][ T7401] 9pnet_virtio: no channels available for device syz [ 239.147241][ T45] IPVS: starting estimator thread 0... [ 239.281772][ T7414] IPVS: using max 38 ests per chain, 91200 per kthread [ 240.703969][ T7429] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 240.710555][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.837295][ T7429] vhci_hcd vhci_hcd.0: Device attached [ 241.235901][ T7434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.281982][ T7430] vhci_hcd: connection closed [ 241.288479][ T12] vhci_hcd vhci_hcd.0: stop threads [ 241.315019][ T12] vhci_hcd vhci_hcd.0: release socket [ 241.328956][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 241.800106][ T7445] 9pnet_virtio: no channels available for device syz [ 243.542448][ T7447] loop2: detected capacity change from 0 to 32768 [ 243.559121][ T7447] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.425 (7447) [ 243.578975][ T7447] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.589244][ T7447] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 243.789738][ T7447] BTRFS info (device loop2): enabling ssd optimizations [ 243.796833][ T7447] BTRFS info (device loop2): turning on async discard [ 243.803794][ T7447] BTRFS info (device loop2): enabling free space tree [ 244.664011][ T5831] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.966584][ T7481] tmpfs: Bad value for 'mpol' [ 245.975502][ T7481] loop4: detected capacity change from 0 to 64 [ 246.431009][ T7486] loop0: detected capacity change from 0 to 256 [ 247.257847][ T7496] loop1: detected capacity change from 0 to 256 [ 247.284598][ T7494] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 248.419622][ T7494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.661011][ T7514] loop1: detected capacity change from 0 to 32768 [ 250.677675][ T7514] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.441 (7514) [ 250.706980][ T7514] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.717620][ T7514] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 250.729781][ T7516] netlink: 56 bytes leftover after parsing attributes in process `syz.3.443'. [ 250.990882][ T7514] BTRFS info (device loop1): enabling ssd optimizations [ 250.990940][ T7514] BTRFS info (device loop1): turning on async discard [ 250.990958][ T7514] BTRFS info (device loop1): enabling free space tree [ 252.011659][ T5826] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.262906][ T7552] loop4: detected capacity change from 0 to 256 [ 253.096583][ T7558] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.128685][ T7558] block device autoloading is deprecated and will be removed. [ 253.414874][ T7567] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 253.438872][ T7571] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 253.445451][ T7571] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 253.454053][ T7571] vhci_hcd vhci_hcd.0: Device attached [ 253.652248][ T7572] vhci_hcd: connection closed [ 253.673066][ T50] vhci_hcd vhci_hcd.0: stop threads [ 253.697663][ T7567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.708983][ T50] vhci_hcd vhci_hcd.0: release socket [ 253.714411][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 253.801760][ T7578] dummy0: left promiscuous mode [ 253.868705][ T7578] dummy0: left allmulticast mode [ 255.744941][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.752907][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.842541][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849224][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.998582][ T7600] loop0: detected capacity change from 0 to 32768 [ 256.012650][ T7600] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.458 (7600) [ 256.030340][ T7600] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.041240][ T7600] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 256.233753][ T7600] BTRFS info (device loop0): enabling ssd optimizations [ 256.241983][ T7600] BTRFS info (device loop0): turning on async discard [ 256.249044][ T7600] BTRFS info (device loop0): enabling free space tree [ 257.061911][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 257.276094][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.422939][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.970590][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 257.970630][ T30] audit: type=1326 audit(1761760292.418:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 258.385718][ T30] audit: type=1326 audit(1761760292.418:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 258.457327][ T30] audit: type=1326 audit(1761760292.428:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 258.513904][ T30] audit: type=1326 audit(1761760292.778:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 258.599866][ T30] audit: type=1326 audit(1761760292.778:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 258.809937][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.828782][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.850551][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.850599][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.993960][ T7644] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 0, id = 0 [ 261.303153][ T7670] loop4: detected capacity change from 0 to 32768 [ 261.313228][ T7670] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.472 (7670) [ 261.330996][ T7670] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.341307][ T7670] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 261.436607][ T7670] BTRFS info (device loop4): enabling ssd optimizations [ 261.443733][ T7670] BTRFS info (device loop4): turning on async discard [ 261.450663][ T7670] BTRFS info (device loop4): enabling free space tree [ 262.263840][ T7703] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.491689][ T5827] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 262.783184][ T7716] loop2: detected capacity change from 0 to 256 [ 262.805919][ T5905] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 263.133186][ T5905] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.141999][ T5905] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 263.153347][ T5905] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.162654][ T5905] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.192080][ T5905] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.931128][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.967068][ T5905] usb 4-1: Product: syz [ 263.972812][ T5905] usb 4-1: Manufacturer: syz [ 264.042333][ T5905] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 264.043529][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 264.788694][ T5905] usb 4-1: USB disconnect, device number 8 [ 264.833085][ T7728] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.068812][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 266.532492][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 268.510735][ T7757] tmpfs: Bad value for 'mpol' [ 268.528201][ T7757] loop3: detected capacity change from 0 to 64 [ 269.574201][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.588797][ T30] audit: type=1326 audit(1761760307.048:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 272.676386][ T30] audit: type=1326 audit(1761760307.098:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 272.787089][ T30] audit: type=1326 audit(1761760307.178:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 272.887913][ T30] audit: type=1326 audit(1761760307.178:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 273.223404][ T30] audit: type=1326 audit(1761760307.208:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 273.503250][ T30] audit: type=1326 audit(1761760307.208:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 273.567358][ T7794] 9pnet_virtio: no channels available for device syz [ 273.646368][ T30] audit: type=1326 audit(1761760307.208:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 273.753823][ T30] audit: type=1326 audit(1761760307.208:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 273.830374][ T30] audit: type=1326 audit(1761760307.208:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 273.948707][ T30] audit: type=1326 audit(1761760307.208:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 276.142144][ T938] IPVS: starting estimator thread 0... [ 276.242262][ T7843] IPVS: using max 24 ests per chain, 57600 per kthread [ 276.358938][ T7848] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 277.476032][ T7848] bond1: entered promiscuous mode [ 277.489076][ T7848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.434143][ T7852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.450409][ T7852] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 278.511860][ T7852] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 278.660089][ T7852] bond1: (slave gre1): making interface the new active one [ 278.678905][ T7852] gre1: entered promiscuous mode [ 278.685698][ T7852] bond1: (slave gre1): Enslaving as an active interface with an up link [ 278.943427][ T7881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.895331][ T7889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.938532][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 281.928651][ T9] usb 2-1: device descriptor read/64, error -71 [ 281.935455][ T7895] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 282.029352][ T7903] 9pnet_virtio: no channels available for device syz [ 282.958677][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 283.597310][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 283.840079][ T7910] loop3: detected capacity change from 0 to 4096 [ 283.898045][ T7910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.012250][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.553188][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 284.654176][ T7926] macvlan2: entered allmulticast mode [ 284.659752][ T7926] veth1_vlan: entered allmulticast mode [ 284.683599][ T7926] veth1_vlan: left allmulticast mode [ 285.142384][ T7927] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 285.294021][ T7935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.589676][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 286.770339][ T45] usb 1-1: device descriptor read/64, error -71 [ 286.798229][ T7958] loop2: detected capacity change from 0 to 4096 [ 286.876665][ T7958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.955401][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.028990][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 287.178924][ T7972] bridge_slave_0: left allmulticast mode [ 287.184757][ T7972] bridge_slave_0: left promiscuous mode [ 287.187670][ T45] usb 1-1: device descriptor read/64, error -71 [ 287.197682][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.231849][ T7975] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 287.247697][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.283486][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 287.283518][ T7972] bridge_slave_1: left allmulticast mode [ 287.313561][ T7972] bridge_slave_1: left promiscuous mode [ 287.326781][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.329204][ T45] usb usb1-port1: attempt power cycle [ 287.412056][ T7972] bond0: (slave bond_slave_0): Releasing backup interface [ 287.781681][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 287.950855][ T45] usb 1-1: device descriptor read/8, error -71 [ 287.981600][ T7972] bond0: (slave bond_slave_1): Releasing backup interface [ 288.169401][ T7972] team0: Port device team_slave_0 removed [ 288.288696][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 288.979369][ T7972] team0: Port device team_slave_1 removed [ 289.015794][ T45] usb 1-1: device descriptor read/8, error -71 [ 289.043065][ T7972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.190371][ T45] usb usb1-port1: unable to enumerate USB device [ 289.214571][ T7972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.098774][ T7995] loop4: detected capacity change from 0 to 32768 [ 290.109557][ T7972] bond0: (slave veth0_to_hsr): Releasing backup interface [ 290.117470][ T7995] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.550 (7995) [ 290.140381][ T7995] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.152076][ T7995] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 290.185087][ T7972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.205163][ T7975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.248754][ T7975] team0: Port device bond0 added [ 290.287337][ T7995] BTRFS info (device loop4): enabling ssd optimizations [ 290.294529][ T7995] BTRFS info (device loop4): turning on async discard [ 290.301415][ T7995] BTRFS info (device loop4): enabling free space tree [ 290.866657][ T5827] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 291.177405][ T8023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.221182][ T8025] loop1: detected capacity change from 0 to 64 [ 291.957875][ T7976] team0 (unregistering): Port device bond0 removed [ 296.155115][ T8084] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.729298][ T8087] netlink: 'syz.4.575': attribute type 10 has an invalid length. [ 296.762283][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 297.631027][ T8094] loop2: detected capacity change from 0 to 64 [ 297.699044][ T8084] team0 (unregistering): Port device team_slave_0 removed [ 297.792265][ T8094] MINIX-fs: bad superblock or unable to read bitmaps [ 297.911282][ T8084] team0 (unregistering): Port device team_slave_1 removed [ 298.754177][ T5898] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 299.648534][ T5898] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 299.848620][ T5898] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 300.279403][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.410811][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.519810][ T5898] usb 2-1: Product: syz [ 300.573519][ T5898] usb 2-1: Manufacturer: Ћ [ 300.705374][ T5898] usb 2-1: SerialNumber: syz [ 302.403514][ T5898] cdc_ncm 2-1:1.0: bind() failure [ 302.627163][ T5898] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 302.656377][ T5898] cdc_ncm 2-1:1.1: bind() failure [ 302.749186][ T5898] usb 2-1: USB disconnect, device number 7 [ 302.780322][ T8127] 9pnet_fd: Insufficient options for proto=fd [ 302.813960][ T8129] loop0: detected capacity change from 0 to 256 [ 304.338750][ T8146] mmap: syz.0.596 (8146): VmData 45854720 exceed data ulimit 32768. Update limits or use boot option ignore_rlimit_data. [ 307.173711][ T8168] loop4: detected capacity change from 0 to 256 [ 308.343020][ T8180] netlink: 3 bytes leftover after parsing attributes in process `syz.4.606'. [ 308.558317][ T8185] loop0: detected capacity change from 0 to 256 [ 309.820096][ T8180] batadv1: entered allmulticast mode [ 310.021766][ T8194] loop3: detected capacity change from 0 to 32768 [ 310.030760][ T8194] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.613 (8194) [ 310.055142][ T8192] input: syz1 as /devices/virtual/input/input7 [ 310.061920][ T8194] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.072280][ T8194] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 311.497188][ T75] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 311.514680][ T8194] BTRFS info (device loop3): enabling ssd optimizations [ 311.522165][ T8194] BTRFS info (device loop3): turning on async discard [ 311.529133][ T8194] BTRFS info (device loop3): enabling free space tree [ 312.344730][ T5842] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.502259][ T8221] loop0: detected capacity change from 0 to 256 [ 314.087101][ T5947] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 315.291326][ T5947] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 315.322798][ T8240] tipc: Started in network mode [ 315.328910][ T5947] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.348554][ T8240] tipc: Node identity f2babd02be52, cluster identity 4711 [ 315.361627][ T8240] tipc: Enabled bearer , priority 0 [ 315.371756][ T5947] usb 2-1: config 0 interface 0 has no altsetting 0 [ 315.393985][ T5947] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.609273][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.617661][ T5947] usb 2-1: Product: syz [ 315.758823][ T5947] usb 2-1: Manufacturer: syz [ 315.763537][ T5947] usb 2-1: SerialNumber: syz [ 315.960914][ T5947] usb 2-1: config 0 descriptor?? [ 315.968514][ T5947] hub 2-1:0.0: bad descriptor, ignoring hub [ 315.974492][ T5947] hub 2-1:0.0: probe with driver hub failed with error -5 [ 315.988820][ T8240] syzkaller0: entered promiscuous mode [ 315.994324][ T8240] syzkaller0: entered allmulticast mode [ 316.037382][ T5947] usb 2-1: selecting invalid altsetting 0 [ 316.308335][ T8248] loop0: detected capacity change from 0 to 32768 [ 316.341853][ T8248] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.620 (8248) [ 316.403362][ T8248] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 316.413633][ T8248] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 316.479892][ T45] tipc: Node number set to 1290321154 [ 316.514345][ T8239] tipc: Resetting bearer [ 316.522959][ T5947] usb 2-1: USB disconnect, device number 8 [ 316.583677][ T8248] BTRFS info (device loop0): enabling ssd optimizations [ 316.591326][ T8248] BTRFS info (device loop0): turning on async discard [ 316.598497][ T8248] BTRFS info (device loop0): enabling free space tree [ 317.283673][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291032][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.335326][ T8239] tipc: Disabling bearer [ 317.376740][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.414973][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 318.776114][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 318.777618][ T8294] loop4: detected capacity change from 0 to 256 [ 318.855945][ T8297] fuse: Bad value for 'fd' [ 320.534899][ T8308] loop0: detected capacity change from 0 to 32768 [ 320.560196][ T8308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.634 (8308) [ 320.576210][ T8308] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 320.586492][ T8308] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 320.605138][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 320.605154][ T30] audit: type=1326 audit(1761760355.068:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 320.640193][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 320.713051][ T30] audit: type=1326 audit(1761760355.108:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 320.737949][ T30] audit: type=1326 audit(1761760355.108:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 320.760551][ T30] audit: type=1326 audit(1761760355.108:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 320.782965][ T30] audit: type=1326 audit(1761760355.108:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 320.925663][ T30] audit: type=1326 audit(1761760355.108:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 321.137170][ T8308] BTRFS info (device loop0): enabling ssd optimizations [ 321.144791][ T8308] BTRFS info (device loop0): turning on async discard [ 321.151693][ T8308] BTRFS info (device loop0): enabling free space tree [ 321.878666][ T30] audit: type=1326 audit(1761760355.108:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 321.902151][ T30] audit: type=1326 audit(1761760355.108:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 321.928845][ T30] audit: type=1326 audit(1761760355.108:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 322.088604][ T30] audit: type=1326 audit(1761760355.108:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8303 comm="syz.2.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 322.437521][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 322.752662][ T8346] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 322.839698][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 322.982947][ T8346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.288797][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 323.945873][ T8361] loop0: detected capacity change from 0 to 32768 [ 323.986686][ T8361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.645 (8361) [ 324.003347][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.018598][ T8361] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 324.028962][ T8361] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 324.083391][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.111641][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.322701][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.348742][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.361919][ T8361] BTRFS info (device loop0): enabling ssd optimizations [ 325.373688][ T8361] BTRFS info (device loop0): turning on async discard [ 325.380757][ T8361] BTRFS info (device loop0): enabling free space tree [ 325.391704][ T45] usb 4-1: config 0 descriptor?? [ 326.753355][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 326.799257][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 326.810092][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.840850][ T45] usb 4-1: USB disconnect, device number 9 [ 328.547058][ T8410] dvmrp0: entered allmulticast mode [ 331.052735][ T8422] loop4: detected capacity change from 0 to 256 [ 331.940639][ T8426] loop1: detected capacity change from 0 to 32768 [ 331.958608][ T8426] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.661 (8426) [ 331.990349][ T8426] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 332.000591][ T8426] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 332.517147][ T8426] BTRFS info (device loop1): enabling ssd optimizations [ 332.524228][ T8426] BTRFS info (device loop1): turning on async discard [ 332.531353][ T8426] BTRFS info (device loop1): enabling free space tree [ 333.526370][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 333.538550][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 333.554842][ T30] audit: type=1326 audit(1761760367.988:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 333.719182][ T5826] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 333.878802][ T30] audit: type=1326 audit(1761760367.988:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 334.008959][ T30] audit: type=1326 audit(1761760367.988:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 334.049794][ T30] audit: type=1326 audit(1761760367.988:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 334.080111][ T30] audit: type=1326 audit(1761760367.988:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 334.129065][ T30] audit: type=1326 audit(1761760367.988:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 334.178574][ T30] audit: type=1326 audit(1761760367.988:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 334.238592][ T30] audit: type=1326 audit(1761760367.988:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 334.370000][ T30] audit: type=1326 audit(1761760367.988:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 334.515692][ T30] audit: type=1326 audit(1761760367.988:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 335.488524][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 335.750843][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.818913][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 336.098556][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.191143][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.374605][ T8478] netlink: 3 bytes leftover after parsing attributes in process `syz.4.672'. [ 337.388470][ T9] usb 2-1: Product: syz [ 337.406620][ T9] usb 2-1: Manufacturer: syz [ 338.366666][ T9] usb 2-1: SerialNumber: syz [ 339.240014][ T9] usb 2-1: can't set config #1, error -71 [ 339.243310][ T8478] batadv1: entered allmulticast mode [ 339.315802][ T9] usb 2-1: USB disconnect, device number 9 [ 339.827419][ T8492] 9pnet_virtio: no channels available for device syz [ 340.149008][ T45] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 340.413200][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.473311][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 340.498602][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 340.542846][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 340.604354][ T45] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 340.618523][ T45] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 340.646288][ T45] usb 3-1: Manufacturer: syz [ 340.678415][ T45] usb 3-1: config 0 descriptor?? [ 341.708522][ T45] rc_core: IR keymap rc-hauppauge not found [ 341.726323][ T45] Registered IR keymap rc-empty [ 341.748975][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 341.780186][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 341.836216][ T45] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 341.895213][ T45] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 342.079223][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 342.110168][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 342.131893][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 342.162706][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 342.213708][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 343.085711][ T5947] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 343.104398][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 343.668951][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 343.802967][ T5947] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 343.830527][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 343.858433][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.866931][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 343.944910][ T5947] usb 4-1: config 0 descriptor?? [ 343.950786][ T45] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 344.002103][ T45] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 344.018782][ T45] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 344.068182][ T45] usb 3-1: USB disconnect, device number 4 [ 344.179141][ T5947] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 344.518792][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 344.690928][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.918622][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.928904][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.942399][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.954189][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.122338][ T45] usb 3-1: config 0 descriptor?? [ 346.515881][ T8556] loop0: detected capacity change from 0 to 32768 [ 346.524118][ T8556] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.701 (8556) [ 346.540177][ T8556] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 346.550689][ T8556] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 346.626596][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.635027][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.647774][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.693503][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.713495][ T8556] BTRFS info (device loop0): enabling ssd optimizations [ 346.721832][ T8556] BTRFS info (device loop0): turning on async discard [ 346.728715][ T8556] BTRFS info (device loop0): enabling free space tree [ 346.733323][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.773936][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.793681][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.815918][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.844688][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.892031][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 346.965980][ T45] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 347.018599][ T5947] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 347.606312][ T5947] asix 4-1:0.0: probe with driver asix failed with error -71 [ 347.635072][ T5947] usb 4-1: USB disconnect, device number 10 [ 347.709384][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 347.853698][ T8584] loop4: detected capacity change from 0 to 4096 [ 347.916091][ T8584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.960854][ T8590] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 348.079067][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 348.156810][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.190933][ T8590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.367565][ T5897] usb 3-1: USB disconnect, device number 5 [ 348.592688][ T8604] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 349.887404][ T8626] netlink: 'syz.3.719': attribute type 12 has an invalid length. [ 350.105734][ T8623] loop2: detected capacity change from 0 to 32768 [ 350.113877][ T8623] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.717 (8623) [ 350.168712][ T8623] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 350.179013][ T8623] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 352.599122][ T8623] BTRFS info (device loop2): enabling ssd optimizations [ 352.606108][ T8623] BTRFS info (device loop2): turning on async discard [ 352.615357][ T8623] BTRFS info (device loop2): enabling free space tree [ 353.994545][ T5831] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 354.949497][ T8678] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 356.703854][ T8692] loop4: detected capacity change from 0 to 32768 [ 356.714801][ T8692] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.735 (8692) [ 356.731790][ T8692] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 356.742036][ T8692] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 357.181044][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 357.299663][ T8692] BTRFS info (device loop4): enabling ssd optimizations [ 357.306844][ T8692] BTRFS info (device loop4): turning on async discard [ 357.313685][ T8692] BTRFS info (device loop4): enabling free space tree [ 358.479471][ T5827] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 360.482757][ T8739] loop0: detected capacity change from 0 to 1024 [ 361.148478][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 361.239076][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 361.239092][ T30] audit: type=1326 audit(2000000002.390:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 361.267856][ T30] audit: type=1326 audit(2000000002.390:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 361.315844][ T30] audit: type=1326 audit(2000000002.390:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 361.823151][ T30] audit: type=1326 audit(2000000002.390:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 361.916881][ T30] audit: type=1326 audit(2000000002.390:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 361.991101][ T30] audit: type=1326 audit(2000000002.390:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 362.122288][ T30] audit: type=1326 audit(2000000002.390:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 362.190938][ T30] audit: type=1326 audit(2000000002.390:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 362.407961][ T30] audit: type=1326 audit(2000000002.390:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 362.488518][ T30] audit: type=1326 audit(2000000002.390:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e25f8efc9 code=0x7ffc0000 [ 363.634327][ T8769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.254246][ T8761] tipc: Enabling of bearer rejected, failed to enable media [ 366.031988][ T8783] loop4: detected capacity change from 0 to 32768 [ 366.056975][ T8783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.755 (8783) [ 366.072084][ T8783] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 366.082329][ T8783] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 366.292318][ T8783] BTRFS info (device loop4): enabling ssd optimizations [ 366.299435][ T8783] BTRFS info (device loop4): turning on async discard [ 366.306231][ T8783] BTRFS info (device loop4): enabling free space tree [ 367.109408][ T5827] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 367.539313][ T5947] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 367.728549][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 367.741931][ T5947] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 367.769282][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.901740][ T5947] usb 4-1: config 0 descriptor?? [ 368.182810][ T5947] gspca_main: sunplus-2.14.0 probing 041e:400b [ 368.701737][ T8833] fuse: Unknown parameter '0x0000000000000005' [ 369.395992][ T5947] gspca_sunplus: reg_r err -71 [ 369.408564][ T5947] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 369.418786][ T5947] usb 4-1: USB disconnect, device number 11 [ 371.755233][ T8868] fuse: Unknown parameter '0x0000000000000005' [ 374.109944][ T8889] tipc: Started in network mode [ 374.138555][ T8889] tipc: Node identity 963d08439d78, cluster identity 4711 [ 374.163367][ T8889] tipc: Enabled bearer , priority 0 [ 374.896010][ T8897] syzkaller0: entered promiscuous mode [ 374.913387][ T8897] syzkaller0: entered allmulticast mode [ 375.004516][ T8899] bond1: left promiscuous mode [ 375.062861][ T8899] gre1: left promiscuous mode [ 375.137683][ T8889] tipc: Resetting bearer [ 375.209510][ T8888] tipc: Resetting bearer [ 375.306892][ T8888] tipc: Disabling bearer [ 378.714939][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.721553][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.833536][ T8977] xt_nat: multiple ranges no longer supported [ 382.758905][ T5890] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 383.375088][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 383.387300][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.408134][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.564181][ T5890] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 383.651908][ T9016] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.814'. [ 384.199806][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 384.214969][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 384.224141][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.232554][ T5890] usb 5-1: Product: syz [ 384.236738][ T5890] usb 5-1: Manufacturer: syz [ 384.346414][ T5890] usb 5-1: SerialNumber: syz [ 384.385682][ T5890] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 384.495833][ T5890] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 384.523907][ T5890] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 386.437200][ T5890] usb 5-1: USB disconnect, device number 6 [ 386.711757][ T9039] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 386.729182][ T9039] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 386.740040][ T9039] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 386.747797][ T9039] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 387.663839][ T9044] team0: No ports can be present during mode change [ 387.671548][ T9044] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 387.683569][ T9044] bond0: left promiscuous mode [ 387.690154][ T9044] bond_slave_0: left promiscuous mode [ 387.728020][ T9044] bond_slave_1: left promiscuous mode [ 387.729149][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 387.772662][ T9042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.809392][ T9044] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 387.828581][ T9044] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 387.850445][ T9044] bond0: left allmulticast mode [ 387.859010][ T9044] bond_slave_0: left allmulticast mode [ 387.865080][ T9044] bond_slave_1: left allmulticast mode [ 387.918524][ T9044] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 388.412697][ T9044] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 389.031368][ T9044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.060114][ T9044] bond0: entered promiscuous mode [ 389.074338][ T9044] bond_slave_0: entered promiscuous mode [ 389.142908][ T9044] bond_slave_1: entered promiscuous mode [ 389.183339][ T9044] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 389.221165][ T9044] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 389.361690][ T9044] bond0: entered allmulticast mode [ 389.458477][ T9044] bond_slave_0: entered allmulticast mode [ 389.471535][ T9044] bond_slave_1: entered allmulticast mode [ 389.483784][ T9044] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 389.560914][ T9044] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 390.001059][ T9044] team0: Port device bond0 added [ 390.336874][ T9046] team_slave_0: left promiscuous mode [ 390.342779][ T9046] team_slave_0: left allmulticast mode [ 390.353225][ T9046] team0 (unregistering): Port device team_slave_0 removed [ 390.361900][ T9046] team_slave_1: left promiscuous mode [ 390.367454][ T9046] team_slave_1: left allmulticast mode [ 390.377998][ T9046] team0 (unregistering): Port device team_slave_1 removed [ 390.391259][ T9046] bond0: left promiscuous mode [ 390.398263][ T9046] bond_slave_0: left promiscuous mode [ 390.404249][ T9046] bond_slave_1: left promiscuous mode [ 390.410422][ T9046] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 390.417606][ T9046] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 390.425094][ T9046] bond0: left allmulticast mode [ 390.430525][ T9046] bond_slave_0: left allmulticast mode [ 390.436007][ T9046] bond_slave_1: left allmulticast mode [ 390.441808][ T9046] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 390.449413][ T9046] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 390.462646][ T9046] team0 (unregistering): Port device bond0 removed [ 390.485958][ T9083] tipc: Started in network mode [ 390.491473][ T9083] tipc: Node identity 4a1059a59569, cluster identity 4711 [ 390.499221][ T9083] tipc: Enabled bearer , priority 0 [ 390.506482][ T9088] syzkaller0: entered promiscuous mode [ 390.514570][ T9088] syzkaller0: entered allmulticast mode [ 390.559816][ T9093] tipc: Resetting bearer [ 390.581153][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 390.591605][ T9079] tipc: Resetting bearer [ 390.617654][ T9079] tipc: Disabling bearer [ 390.624413][ T9094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.768556][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 390.781241][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.810977][ T9] usb 4-1: config 0 has no interface number 0 [ 390.817166][ T9] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 576, setting to 64 [ 390.850889][ T9] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 390.864554][ T9] usb 4-1: config 0 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 390.876150][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=3899, bcdDevice=2b.0f [ 390.886302][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.970912][ T9104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.212670][ T9] usb 4-1: config 0 descriptor?? [ 393.197722][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 393.420734][ T9] usb 4-1: string descriptor 0 read error: -71 [ 393.436170][ T9] usb-storage 4-1:0.2: USB Mass Storage device detected [ 393.601339][ T9118] netlink: 'syz.2.848': attribute type 2 has an invalid length. [ 393.829349][ T9118] 9: entered promiscuous mode [ 393.998236][ T9] usb-storage 4-1:0.2: Quirks match for vid 17ef pid 3899: 800000 [ 394.232797][ T9] usb 4-1: USB disconnect, device number 12 [ 395.315513][ T9130] comedi comedi0: Minor 3 specified more than once! [ 395.373891][ T9130] netlink: 'syz.3.852': attribute type 9 has an invalid length. [ 395.749690][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 395.749710][ T30] audit: type=1326 audit(2000000036.870:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 395.814936][ T9150] lo: left promiscuous mode [ 395.842733][ T30] audit: type=1326 audit(2000000036.880:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 395.867993][ T9150] lo: left allmulticast mode [ 396.064337][ T9150] tunl0: left promiscuous mode [ 396.118744][ T9150] tunl0: left allmulticast mode [ 396.164375][ T30] audit: type=1326 audit(2000000036.880:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 396.218976][ T9159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.249027][ T9150] gre0: left promiscuous mode [ 397.361424][ T30] audit: type=1326 audit(2000000036.880:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 397.418057][ T9150] gre0: left allmulticast mode [ 397.728147][ T30] audit: type=1326 audit(2000000036.880:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 397.818113][ T9150] gretap0: left promiscuous mode [ 397.848410][ T9150] gretap0: left allmulticast mode [ 397.879721][ T30] audit: type=1326 audit(2000000036.880:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 397.942481][ T9150] erspan0: left promiscuous mode [ 397.977689][ T9150] erspan0: left allmulticast mode [ 398.010270][ T30] audit: type=1326 audit(2000000036.880:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 398.075581][ T30] audit: type=1326 audit(2000000036.880:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 398.087366][ T9150] ip_vti0: left promiscuous mode [ 398.146767][ T9150] ip_vti0: left allmulticast mode [ 398.371037][ T9150] ip6_vti0: left promiscuous mode [ 398.401916][ T30] audit: type=1326 audit(2000000036.880:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 398.650539][ T9150] ip6_vti0: left allmulticast mode [ 398.704319][ T9150] sit0: left promiscuous mode [ 398.728443][ T9150] sit0: left allmulticast mode [ 398.739407][ T30] audit: type=1326 audit(2000000036.890:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 398.765438][ T9150] ip6tnl0: left promiscuous mode [ 398.809370][ T9150] ip6tnl0: left allmulticast mode [ 398.834384][ T9150] ip6gre0: left promiscuous mode [ 398.864787][ T9150] ip6gre0: left allmulticast mode [ 398.893010][ T9150] syz_tun: left promiscuous mode [ 398.893035][ T9150] syz_tun: left allmulticast mode [ 398.899180][ T9150] ip6gretap0: left promiscuous mode [ 398.899202][ T9150] ip6gretap0: left allmulticast mode [ 398.905946][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.906337][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.913698][ T9150] bridge0: left promiscuous mode [ 398.913723][ T9150] bridge0: left allmulticast mode [ 398.918542][ T5898] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 398.950097][ T9150] vcan0: left promiscuous mode [ 398.950123][ T9150] vcan0: left allmulticast mode [ 399.048576][ T9150] nlmon0: left promiscuous mode [ 399.048601][ T9150] nlmon0: left allmulticast mode [ 399.050579][ T9150] caif0: left promiscuous mode [ 399.050599][ T9150] caif0: left allmulticast mode [ 399.069381][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 399.071837][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.071870][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.071911][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.071946][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.075392][ T5898] usb 1-1: config 0 descriptor?? [ 399.104085][ T5898] hub 1-1:0.0: USB hub found [ 399.762748][ T5898] hub 1-1:0.0: 1 port detected [ 399.934281][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.956814][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.025715][ T9150] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 400.025745][ T9150] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 400.152627][ T9150] batman_adv: batadv0: Interface deactivated: gretap1 [ 400.494606][ T9] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 400.798251][ T3008] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.851433][ T3008] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.861228][ T3008] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.886070][ T3008] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.998874][ T9] usb 1-1: USB disconnect, device number 7 [ 402.525367][ T9232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.920629][ T9237] block nbd0: not configured, cannot reconfigure [ 405.954528][ T9243] tipc: Enabled bearer , priority 0 [ 406.013684][ T9246] syzkaller0: entered promiscuous mode [ 406.033536][ T9246] syzkaller0: entered allmulticast mode [ 406.333258][ T9242] tipc: Resetting bearer [ 406.707992][ T9262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.881'. [ 406.780592][ T9242] tipc: Disabling bearer [ 406.989774][ T45] tipc: Node number set to 189073475 [ 410.049147][ T9277] loop4: detected capacity change from 0 to 4096 [ 410.127254][ T9277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.386141][ T9294] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.891'. [ 410.506812][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.147062][ T9316] netlink: 3 bytes leftover after parsing attributes in process `syz.1.895'. [ 411.848229][ T9316] batadv1: entered allmulticast mode [ 412.680410][ T9322] input: syz1 as /devices/virtual/input/input10 [ 420.046092][ T9416] loop1: detected capacity change from 0 to 256 [ 420.549467][ T9424] netlink: 'syz.0.925': attribute type 9 has an invalid length. [ 424.819063][ T9479] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.942'. [ 429.767633][ T9531] IPv6: NLM_F_REPLACE set, but no existing node found! [ 430.428487][ T9539] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.957'. [ 437.788755][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 437.976153][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 438.063238][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.112009][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.280906][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.290260][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.298289][ T45] usb 5-1: Product: syz [ 438.302588][ T45] usb 5-1: Manufacturer: syz [ 438.307213][ T45] usb 5-1: SerialNumber: syz [ 438.981666][ T9612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 438.987886][ T9612] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 439.002841][ T9612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 439.008967][ T9612] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 439.021635][ T9612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 439.027595][ T9612] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 439.042644][ T45] usb 5-1: 0:2 : does not exist [ 439.082093][ T45] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 439.119139][ T9612] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 439.125095][ T9612] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 439.238742][ T45] usb 5-1: USB disconnect, device number 7 [ 439.484519][ T6645] udevd[6645]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.881613][ T9634] netlink: 'syz.4.979': attribute type 12 has an invalid length. [ 440.162905][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.207385][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.429701][ T9659] netlink: 104 bytes leftover after parsing attributes in process `syz.3.985'. [ 442.425470][ T9676] netlink: 'syz.3.989': attribute type 2 has an invalid length. [ 443.573761][ T9676] 9: entered promiscuous mode [ 444.618524][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 444.903773][ T9683] comedi comedi0: reset error (fatal) [ 444.973544][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 445.047599][ T45] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 445.065324][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.119566][ T45] usb 3-1: config 0 descriptor?? [ 445.129168][ T9686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 445.343174][ T9708] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 445.416758][ T9708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.516077][ T9710] bond2: (slave veth3): Enslaving as an active interface with a down link [ 445.612863][ T45] hid_parser_main: 5 callbacks suppressed [ 445.612885][ T45] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 445.675646][ T45] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 445.701201][ T45] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 445.767781][ T45] belkin 0003:050D:3201.0003: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 446.008590][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 446.631936][ T45] usb 3-1: USB disconnect, device number 6 [ 448.212599][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.230664][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.242004][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.252444][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.268642][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.276310][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.276361][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 448.319008][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.341663][ T9722] fido_id[9722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 448.392656][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.413675][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.594216][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.609045][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.780873][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.794267][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.878373][ T5898] usb 4-1: config 0 descriptor?? [ 449.324488][ T5898] usb 4-1: can't set config #0, error -71 [ 449.421060][ T5898] usb 4-1: USB disconnect, device number 13 [ 450.768448][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 450.869976][ T5845] Bluetooth: hci5: command tx timeout [ 450.968470][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 451.024559][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 451.084956][ T45] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 451.106153][ T45] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 451.140432][ T9725] chnl_net:caif_netlink_parms(): no params data found [ 451.147415][ T45] usb 4-1: Product: syz [ 451.185913][ T45] usb 4-1: Manufacturer: syz [ 451.211506][ T45] usb 4-1: SerialNumber: syz [ 451.262719][ T45] usb 4-1: config 0 descriptor?? [ 451.313322][ T9752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 452.092708][ T5898] usb 4-1: USB disconnect, device number 14 [ 452.505960][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.532341][ T9725] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.558820][ T9725] bridge_slave_0: entered allmulticast mode [ 452.589626][ T9725] bridge_slave_0: entered promiscuous mode [ 452.616418][ T9725] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.662710][ T9725] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.677796][ T9725] bridge_slave_1: entered allmulticast mode [ 452.686263][ T9725] bridge_slave_1: entered promiscuous mode [ 452.787363][ T9784] loop4: detected capacity change from 0 to 4096 [ 452.831348][ T9784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.920185][ T9789] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1014'. [ 452.948538][ T5845] Bluetooth: hci5: command tx timeout [ 453.045485][ T9725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.114924][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.140982][ T9725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.218708][ T9799] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 453.245904][ T9799] CIFS: Unable to determine destination address [ 453.489875][ T9799] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 454.171164][ T9725] team0: Port device team_slave_0 added [ 454.203923][ T9725] team0: Port device team_slave_1 added [ 454.431855][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.448493][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.488071][ T9725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.501909][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.509056][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.535261][ T9725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.722218][ T9725] hsr_slave_0: entered promiscuous mode [ 454.731700][ T9725] hsr_slave_1: entered promiscuous mode [ 454.740269][ T9725] debugfs: 'hsr0' already exists in 'hsr' [ 454.746047][ T9725] Cannot create hsr debugfs directory [ 455.035633][ T5845] Bluetooth: hci5: command tx timeout [ 455.734602][ T9844] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1026'. [ 457.118610][ T5845] Bluetooth: hci5: command tx timeout [ 457.274702][ T9873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1033'. [ 457.296074][ T6017] bond1 (unregistering): (slave gre1): Releasing backup interface [ 457.530072][ T6017] bond0 (unregistering): Released all slaves [ 457.634460][ T6017] bond1 (unregistering): Released all slaves [ 457.733433][ T6017] bond2 (unregistering): Released all slaves [ 457.935973][ T9888] netlink: 'syz.4.1035': attribute type 12 has an invalid length. [ 458.261915][ T6017] tipc: Left network mode [ 459.250765][ T9725] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 459.359074][ T5897] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 459.387564][ T9918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.599293][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 459.638115][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.685827][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.757118][ T9911] syzkaller0: entered promiscuous mode [ 459.787335][ T9911] syzkaller0: entered allmulticast mode [ 459.852267][ T5897] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.902118][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.937781][ T5897] usb 5-1: Product: syz [ 459.953891][ T5897] usb 5-1: Manufacturer: syz [ 459.974135][ T5897] usb 5-1: SerialNumber: syz [ 460.392640][ T5897] usb 5-1: 0:2 : does not exist [ 460.515914][ T5897] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 460.920889][ T9725] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 460.990350][ T5897] usb 5-1: USB disconnect, device number 8 [ 461.502429][ T6645] udevd[6645]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.568401][ T9725] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 462.900369][ T9725] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 463.558385][ T6017] hsr_slave_0: left promiscuous mode [ 463.572326][ T6017] hsr_slave_1: left promiscuous mode [ 464.569334][ T5897] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 464.750913][ T5897] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 464.776846][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.815907][ T5897] usb 3-1: config 0 descriptor?? [ 465.051729][ T9973] loop3: detected capacity change from 0 to 1024 [ 465.399295][ T5897] cp210x 3-1:0.0: cp210x converter detected [ 465.882673][ T5897] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 466.120080][ T5897] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 466.224633][ T5897] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 466.272642][ T5897] usb 3-1: cp210x converter now attached to ttyUSB0 [ 466.296246][ T5897] usb 3-1: USB disconnect, device number 7 [ 466.317111][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.344621][ T5897] cp210x 3-1:0.0: device disconnected [ 466.934848][ T9980] loop2: detected capacity change from 0 to 32768 [ 466.943780][ T9980] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1056 (9980) [ 466.959074][ T9980] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 466.969283][ T9980] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 467.213875][ T9980] BTRFS info (device loop2): enabling ssd optimizations [ 467.220960][ T9980] BTRFS info (device loop2): turning on async discard [ 467.227770][ T9980] BTRFS info (device loop2): enabling free space tree [ 468.077020][ T5831] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 468.465611][ T9725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.750955][ T9725] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.764291][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.771625][ T6296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.062260][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.069583][ T6296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.279638][T10042] netlink: 'syz.3.1065': attribute type 29 has an invalid length. [ 470.287603][T10042] netlink: 'syz.3.1065': attribute type 3 has an invalid length. [ 470.295723][T10042] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1065'. [ 471.798769][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 472.153581][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 472.188657][ T45] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 472.208405][ T45] usb 5-1: config 0 has no interface number 0 [ 472.270771][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 472.348418][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.366820][ T45] usb 5-1: Product: syz [ 472.376933][ T45] usb 5-1: Manufacturer: syz [ 472.387067][ T45] usb 5-1: SerialNumber: syz [ 472.423011][ T45] usb 5-1: config 0 descriptor?? [ 472.570696][ T45] hub 5-1:0.132: bad descriptor, ignoring hub [ 472.585204][ T45] hub 5-1:0.132: probe with driver hub failed with error -5 [ 472.625102][ T45] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input11 [ 472.706716][ T9725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.555313][ T9725] veth0_vlan: entered promiscuous mode [ 475.617418][ T5897] usb 5-1: USB disconnect, device number 9 [ 475.682426][ T9725] veth1_vlan: entered promiscuous mode [ 476.779418][ T9725] veth0_macvtap: entered promiscuous mode [ 476.816584][ T9725] veth1_macvtap: entered promiscuous mode [ 476.875763][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.926149][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.946498][ T6296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.963876][ T6296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.013199][ T6296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.046580][ T6296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.269088][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.276970][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.375112][T10120] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1076'. [ 478.247280][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.267700][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.254959][T10142] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1000'. [ 486.982466][T10197] tipc: Started in network mode [ 486.987443][T10197] tipc: Node identity c63fe54ebf6a, cluster identity 4711 [ 487.033902][T10197] tipc: Enabled bearer , priority 0 [ 487.085830][T10203] tipc: Resetting bearer [ 487.488875][T10205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1094'. [ 488.078541][ T5890] tipc: Node number set to 2035672398 [ 488.996650][T10196] tipc: Disabling bearer [ 489.178660][ T5890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 489.640792][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 489.813986][ T5890] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 489.977742][ T5890] usb 5-1: config 0 has no interface number 0 [ 489.984118][T10214] loop8: detected capacity change from 0 to 8 [ 489.996510][T10214] Dev loop8: unable to read RDB block 8 [ 490.054136][ T5890] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 490.070177][T10214] loop8: unable to read partition table [ 490.086693][T10214] loop8: partition table beyond EOD, truncated [ 490.095840][ T5890] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 490.159197][T10214] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 490.411613][ T5890] usb 5-1: string descriptor 0 read error: -71 [ 490.417980][ T5890] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 490.564283][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.615158][ T5890] usb 5-1: config 0 descriptor?? [ 490.654084][ T5890] usb 5-1: can't set config #0, error -71 [ 491.620042][ T5890] usb 5-1: USB disconnect, device number 10 [ 491.828943][T10239] fuse: root generation should be zero [ 493.180067][T10258] netlink: 'syz.1.1109': attribute type 12 has an invalid length. [ 493.480738][T10266] loop8: detected capacity change from 0 to 8 [ 493.521729][T10266] Dev loop8: unable to read RDB block 8 [ 493.527378][T10266] loop8: unable to read partition table [ 493.558528][T10266] loop8: partition table beyond EOD, truncated [ 493.575156][T10266] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 495.237814][T10290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1115'. [ 495.958956][T10297] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 495.973615][T10297] xt_nfacct: accounting object `syz1' does not exist [ 499.188441][ T5890] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 499.505962][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.179348][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 500.198387][ T5890] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 500.218409][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.249299][ T5890] usb 3-1: config 0 descriptor?? [ 500.837202][ T5890] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 501.516667][T10355] loop4: detected capacity change from 0 to 1024 [ 501.594407][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.601594][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.775481][ T5890] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 501.822638][ T5890] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 501.894742][ T5890] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71 [ 501.987409][ T5890] usb 3-1: USB disconnect, device number 8 [ 506.348897][T10398] debugfs: 'ttyS3' already exists in 'caif_serial' [ 506.696742][T10406] netlink: 'syz.1.1141': attribute type 2 has an invalid length. [ 506.818079][T10406] 9: entered promiscuous mode [ 508.388541][T10427] loop2: detected capacity change from 0 to 1024 [ 512.618385][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 513.237464][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 513.244674][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.255049][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.308417][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 513.583297][T10493] loop1: detected capacity change from 0 to 32768 [ 513.597427][T10493] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1158 (10493) [ 513.618346][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.626867][ T9] usb 4-1: Product: syz [ 513.634749][T10493] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 513.645774][T10493] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 513.665545][ T9] usb 4-1: Manufacturer: syz [ 513.693165][ T9] usb 4-1: SerialNumber: syz [ 513.719574][ T9] usb 4-1: config 0 descriptor?? [ 513.802103][T10493] BTRFS info (device loop1): enabling ssd optimizations [ 513.809286][T10493] BTRFS info (device loop1): turning on async discard [ 513.816092][T10493] BTRFS info (device loop1): enabling free space tree [ 515.273442][ T5826] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 515.422566][ T45] usb 4-1: USB disconnect, device number 15 [ 516.853074][T10545] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1162'. [ 517.663461][T10539] nvme_fabrics: missing parameter 'transport=%s' [ 517.897556][T10539] nvme_fabrics: missing parameter 'nqn=%s' [ 519.749041][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 520.118543][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 520.427185][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.474371][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.522126][ T45] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 520.602473][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.668178][ T45] usb 6-1: Product: syz [ 520.709583][ T45] usb 6-1: Manufacturer: syz [ 520.714555][ T45] usb 6-1: SerialNumber: syz [ 521.110399][ T45] usb 6-1: config 0 descriptor?? [ 521.450303][T10597] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1177'. [ 522.076855][T10610] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1178'. [ 522.596911][T10623] devpts: Unknown parameter 'mafile0' [ 523.503225][ T5897] usb 6-1: USB disconnect, device number 2 [ 524.740572][T10642] netlink: 'syz.1.1186': attribute type 29 has an invalid length. [ 524.748580][T10642] netlink: 'syz.1.1186': attribute type 3 has an invalid length. [ 524.748855][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 524.792196][T10642] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1186'. [ 525.458982][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 527.409384][T10664] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 527.415362][T10664] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 527.628397][ T5897] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 527.838518][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 528.100340][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.114877][ T5897] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.170035][T10676] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1194'. [ 529.036710][ T5897] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 529.045966][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.344624][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.356307][ T45] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 529.376675][ T45] usb 5-1: can't read configurations, error -71 [ 529.719147][ T5897] usb 3-1: config 0 descriptor?? [ 529.988017][T10692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'. [ 531.143221][ T5897] usb 3-1: USB disconnect, device number 9 [ 532.793793][T10712] netlink: 'syz.5.1203': attribute type 29 has an invalid length. [ 532.801842][T10712] netlink: 'syz.5.1203': attribute type 3 has an invalid length. [ 532.809732][T10712] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1203'. [ 534.946329][T10739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1209'. [ 536.245739][T10748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1211'. [ 537.124151][T10678] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 537.312802][T10678] usb 2-1: Using ep0 maxpacket: 32 [ 537.341083][T10678] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.382921][T10678] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 537.406174][T10678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.457332][T10678] usb 2-1: config 0 descriptor?? [ 539.061157][T10796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1225'. [ 540.292607][T10678] usb 2-1: USB disconnect, device number 10 [ 541.448162][T10810] loop3: detected capacity change from 0 to 256 [ 542.150160][T10678] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 542.341499][T10678] usb 3-1: Using ep0 maxpacket: 16 [ 542.375887][T10678] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.418935][T10678] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 542.444771][T10678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.140433][T10678] usb 3-1: Product: syz [ 543.145341][T10678] usb 3-1: Manufacturer: syz [ 543.150823][T10678] usb 3-1: SerialNumber: syz [ 543.160582][T10678] usb 3-1: config 0 descriptor?? [ 543.269932][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.277928][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.541388][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1237'. [ 544.487386][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.526400][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.583214][ T938] usb 3-1: USB disconnect, device number 10 [ 545.579584][T10862] netlink: 'syz.3.1243': attribute type 2 has an invalid length. [ 545.753264][ T1011] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.788587][ T1011] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.797557][ T1011] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.873458][ T1011] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.946570][T10871] loop1: detected capacity change from 0 to 256 [ 546.387873][T10880] netlink: 'syz.2.1248': attribute type 29 has an invalid length. [ 546.396132][T10880] netlink: 'syz.2.1248': attribute type 3 has an invalid length. [ 546.404557][T10880] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1248'. [ 549.462160][T10678] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 549.772111][T10678] usb 4-1: Using ep0 maxpacket: 8 [ 551.209822][T10938] netlink: 'syz.5.1261': attribute type 29 has an invalid length. [ 551.218440][T10938] netlink: 'syz.5.1261': attribute type 3 has an invalid length. [ 551.226746][T10938] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1261'. [ 553.018447][T10678] usb 4-1: unable to get BOS descriptor or descriptor too short [ 553.055253][T10678] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 553.108397][T10678] usb 4-1: can't read configurations, error -71 [ 554.700012][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 554.860145][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.538338][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 555.558686][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 555.590315][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.604773][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.614210][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.630129][ T45] usb 3-1: config 0 descriptor?? [ 556.608371][T11001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.634620][T11001] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.939056][ T45] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 556.999105][T11001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.631610][ T9] usb 3-1: USB disconnect, device number 11 [ 559.888113][T11052] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 560.008399][ T938] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 560.166689][ T938] usb 6-1: config 0 has no interfaces? [ 560.181015][ T938] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 560.190560][ T938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.203982][ T938] usb 6-1: Product: syz [ 560.209054][T11061] Cannot find set identified by id 2 to match [ 560.230729][ T938] usb 6-1: Manufacturer: syz [ 560.243465][ T938] usb 6-1: SerialNumber: syz [ 560.321110][ T938] usb 6-1: config 0 descriptor?? [ 561.384367][T11074] loop1: detected capacity change from 0 to 4096 [ 561.560235][T11081] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1300'. [ 561.636502][T11074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.714246][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.073461][T11092] overlayfs: failed to resolve './file1': -2 [ 562.717562][T11100] debugfs: 'ttyS3' already exists in 'caif_serial' [ 563.033340][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.040541][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.323181][ T938] usb 6-1: USB disconnect, device number 3 [ 563.420626][T11108] netlink: 'syz.4.1306': attribute type 12 has an invalid length. [ 564.530138][T11125] tipc: Enabled bearer , priority 0 [ 564.572521][T11125] tipc: Resetting bearer [ 564.651354][T11118] tipc: Disabling bearer [ 564.742198][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 564.742219][ T30] audit: type=1326 audit(2000000205.951:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 564.867496][ T30] audit: type=1326 audit(2000000205.951:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 564.893124][ T30] audit: type=1326 audit(2000000205.951:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 564.915990][ T30] audit: type=1326 audit(2000000205.951:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 564.939059][ T30] audit: type=1326 audit(2000000205.951:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 565.067862][ T30] audit: type=1326 audit(2000000205.961:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 565.503205][ T30] audit: type=1326 audit(2000000205.961:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 566.008337][ T30] audit: type=1326 audit(2000000205.961:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 566.031663][ T30] audit: type=1326 audit(2000000205.961:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 566.074325][ T30] audit: type=1326 audit(2000000205.971:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.2.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f018efc9 code=0x7ffc0000 [ 567.761488][T11172] overlayfs: overlapping lowerdir path [ 567.796385][T11172] overlayfs: failed to verify upper (257/file0, ino=1414, err=-116) [ 568.459936][T11172] overlayfs: failed to verify index dir 'upper' xattr [ 568.508363][ T938] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 568.520576][T11172] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 568.718457][ T938] usb 6-1: Using ep0 maxpacket: 8 [ 569.148349][T11185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1322'. [ 569.831577][T11184] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1321'. [ 572.169143][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 572.358889][ T9] usb 3-1: device descriptor read/64, error -71 [ 572.638397][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 572.769295][ T938] usb 6-1: unable to get BOS descriptor or descriptor too short [ 572.819358][ T9] usb 3-1: device descriptor read/64, error -71 [ 572.837383][ T938] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 572.872149][ T938] usb 6-1: can't read configurations, error -71 [ 572.943326][ T9] usb usb3-port1: attempt power cycle [ 573.317252][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 573.667949][ T9] usb 3-1: device descriptor read/8, error -71 [ 573.747977][T11224] nvme_fabrics: missing parameter 'transport=%s' [ 573.754736][T11224] nvme_fabrics: missing parameter 'nqn=%s' [ 574.014966][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 574.051545][ T9] usb 3-1: device descriptor read/8, error -71 [ 574.218904][ T9] usb usb3-port1: unable to enumerate USB device [ 574.653766][T11231] loop4: detected capacity change from 0 to 1024 [ 575.267533][T11248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.209545][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 577.209561][ T30] audit: type=1326 audit(2000000218.371:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 577.752698][ T30] audit: type=1326 audit(2000000218.381:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 577.912309][T11261] loop1: detected capacity change from 0 to 4096 [ 577.977236][T11261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.888572][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.592090][T11286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1344'. [ 580.446950][T11289] debugfs: 'ttyS3' already exists in 'caif_serial' [ 581.457539][T11298] loop1: detected capacity change from 0 to 1024 [ 582.271289][T11310] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1347'. [ 582.325019][T11309] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 582.375830][T11309] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 582.401849][T11309] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 582.411697][T11309] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 583.543199][T11329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.750920][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 584.000904][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 584.059936][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.169836][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 584.419465][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.748095][ T9] usb 4-1: config 0 descriptor?? [ 585.310559][T11344] NILFS (nbd5): device size too small [ 586.172280][ T9] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 586.392034][ T9] usb 4-1: USB disconnect, device number 18 [ 586.657807][T11355] syzkaller0: entered promiscuous mode [ 586.693821][T11355] syzkaller0: entered allmulticast mode [ 586.954439][ T30] audit: type=1326 audit(2000000228.151:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 587.038321][ T30] audit: type=1326 audit(2000000228.151:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 587.215539][ T30] audit: type=1326 audit(2000000228.151:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 587.238188][ T30] audit: type=1326 audit(2000000228.151:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 587.261114][ T30] audit: type=1326 audit(2000000228.151:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 587.838345][ T30] audit: type=1326 audit(2000000228.151:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 587.907269][ T30] audit: type=1326 audit(2000000228.151:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 588.247903][ T30] audit: type=1326 audit(2000000228.151:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 588.302783][ T30] audit: type=1326 audit(2000000228.151:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 588.334237][T11379] netlink: 'syz.3.1362': attribute type 12 has an invalid length. [ 588.342438][ T30] audit: type=1326 audit(2000000228.151:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc77f18efc9 code=0x7ffc0000 [ 588.821167][T11386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1364'. [ 590.152869][T11397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.422283][T11426] netlink: 'syz.3.1374': attribute type 12 has an invalid length. [ 596.532139][T11424] loop1: detected capacity change from 0 to 4096 [ 596.708639][T11424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.041031][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.781962][T11457] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1380'. [ 600.808174][T11465] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 601.216990][T11481] loop3: detected capacity change from 0 to 4096 [ 601.281584][T11481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.235888][T11490] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1389'. [ 602.302544][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.340391][T11497] loop4: detected capacity change from 0 to 1024 [ 603.935901][T11513] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 603.968463][T11513] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 604.007632][T11513] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 604.016483][T11513] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 604.416100][T11521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1395'. [ 606.112845][T11538] syzkaller0: entered promiscuous mode [ 606.118930][T11538] syzkaller0: entered allmulticast mode [ 606.299604][T11532] nvme_fabrics: missing parameter 'transport=%s' [ 606.310481][T11532] nvme_fabrics: missing parameter 'nqn=%s' [ 608.610658][T11568] fuse: Unknown parameter 'group_id00000000000000000000' [ 608.807868][T11573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'. [ 608.963287][T11578] debugfs: 'ttyS3' already exists in 'caif_serial' [ 609.165361][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 609.378491][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 610.863884][T11611] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1411'. [ 613.889303][T11636] fuse: Unknown parameter 'group_id00000000000000000000' [ 614.480570][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 614.657435][ T45] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 614.665139][ T45] usb 2-1: chopping to 0 config(s) [ 614.670524][ T45] usb 2-1: can't read configurations, error -32 [ 616.111520][T11662] binder: 11661:11662 ioctl c0306201 0 returned -14 [ 616.948127][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 616.948145][ T30] audit: type=1326 audit(2000000258.101:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 617.346057][ T30] audit: type=1326 audit(2000000258.101:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 617.788511][ T30] audit: type=1326 audit(2000000258.101:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 617.833835][ T30] audit: type=1326 audit(2000000258.101:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 617.932897][ T30] audit: type=1326 audit(2000000258.101:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 618.658343][ T30] audit: type=1326 audit(2000000258.101:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 618.704141][ T30] audit: type=1326 audit(2000000258.101:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 618.727056][ T30] audit: type=1326 audit(2000000258.101:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 618.749832][ T30] audit: type=1326 audit(2000000258.101:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 618.776220][ T30] audit: type=1326 audit(2000000258.101:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2b8efc9 code=0x7ffc0000 [ 618.963729][T11694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1433'. [ 620.687717][T11711] loop2: detected capacity change from 0 to 1024 [ 623.758770][T11749] IPVS: set_ctl: invalid protocol: 0 172.20.20.26:21 [ 624.477627][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.484288][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.468136][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 729.475126][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5199/1:b..l [ 729.483502][ C1] rcu: (detected by 1, t=10502 jiffies, g=42313, q=184 ncpus=2) [ 729.491237][ C1] task:udevd state:R running task stack:22728 pid:5199 tgid:5199 ppid:1 task_flags:0x400140 flags:0x00080001 [ 729.505869][ C1] Call Trace: [ 729.509174][ C1] [ 729.512113][ C1] __schedule+0x17c4/0x4d60 [ 729.516676][ C1] ? __pfx___schedule+0x10/0x10 [ 729.521529][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 729.526734][ C1] ? kernel_text_address+0xa5/0xe0 [ 729.531857][ C1] ? unwind_get_return_address+0x4d/0x90 [ 729.537606][ C1] ? arch_stack_walk+0xfc/0x150 [ 729.542469][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 729.547768][ C1] preempt_schedule_irq+0xb5/0x150 [ 729.552881][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 729.558614][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 729.564428][ C1] irqentry_exit+0x6f/0x90 [ 729.568851][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.574838][ C1] RIP: 0010:unwind_next_frame+0x230/0x2390 [ 729.580648][ C1] Code: 5f b6 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 b0 5f b6 90 <48> 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 1c 1c 00 00 44 8b 45 [ 729.600250][ C1] RSP: 0018:ffffc90002f178b8 EFLAGS: 00000206 [ 729.606426][ C1] RAX: 0000000000012681 RBX: dffffc0000000000 RCX: c28889b97832eb00 [ 729.614486][ C1] RDX: 00000000000a580a RSI: ffffffff8bbf2120 RDI: ffffffff8bbf20e0 [ 729.622484][ C1] RBP: ffffffff90baf9b4 R08: 0000000000000000 R09: ffffffff8173cf85 [ 729.630475][ C1] R10: ffffc90002f179d8 R11: ffffffff81acadf0 R12: ffffffff822680fd [ 729.638458][ C1] R13: 000000000003b909 R14: ffffc90002f17988 R15: 0000000000012680 [ 729.646434][ C1] ? kasan_save_track+0x3d/0x80 [ 729.651321][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.657494][ C1] ? unwind_next_frame+0xa5/0x2390 [ 729.662627][ C1] ? unwind_next_frame+0xd4/0x2390 [ 729.667750][ C1] ? unwind_next_frame+0xa5/0x2390 [ 729.672862][ C1] ? kasan_save_track+0x3e/0x80 [ 729.677734][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.684090][ C1] arch_stack_walk+0x11c/0x150 [ 729.688874][ C1] ? kasan_save_track+0x3e/0x80 [ 729.693732][ C1] stack_trace_save+0x9c/0xe0 [ 729.698519][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 729.703917][ C1] ? kasan_save_track+0x3e/0x80 [ 729.708771][ C1] ? kasan_save_free_info+0x46/0x50 [ 729.713975][ C1] kasan_save_track+0x3e/0x80 [ 729.718652][ C1] ? kasan_save_track+0x3e/0x80 [ 729.723544][ C1] __kasan_kmalloc+0x93/0xb0 [ 729.728151][ C1] __kmalloc_cache_noprof+0x3e2/0x700 [ 729.733527][ C1] ? kmem_cache_free+0x16f/0x690 [ 729.738464][ C1] ? __phys_addr+0xd3/0x180 [ 729.742976][ C1] ? fput_close_sync+0x119/0x200 [ 729.747907][ C1] kmem_cache_free+0x16f/0x690 [ 729.752693][ C1] fput_close_sync+0x119/0x200 [ 729.757462][ C1] ? dnotify_flush+0x1e2/0x5e0 [ 729.762237][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 729.767610][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 729.772824][ C1] __x64_sys_close+0x7f/0x110 [ 729.777504][ C1] do_syscall_64+0xfa/0xfa0 [ 729.782013][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.788076][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.794245][ C1] ? clear_bhb_loop+0x60/0xb0 [ 729.798924][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.804815][ C1] RIP: 0033:0x7f0490d15a67 [ 729.809240][ C1] RSP: 002b:00007ffc1e5fff88 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 729.817653][ C1] RAX: ffffffffffffffda RBX: 00005605f11f4c80 RCX: 00007f0490d15a67 [ 729.825626][ C1] RDX: fffffffffffff000 RSI: 00007f0490df1b20 RDI: 000000000000000d [ 729.833598][ C1] RBP: 00005605f11d96a0 R08: 000000000000c740 R09: 0000000000000000 [ 729.841562][ C1] R10: 0000000000000003 R11: 0000000000000206 R12: 00005605f11d87b0 [ 729.849532][ C1] R13: 00000000000000ff R14: 00005605b9479be0 R15: 00007ffc1e600220 [ 729.857515][ C1] [ 729.860529][ C1] rcu: rcu_preempt kthread starved for 10379 jiffies! g42313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 729.871714][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 729.881681][ C1] rcu: RCU grace-period kthread stack dump: [ 729.887573][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 729.901057][ C1] Call Trace: [ 729.904358][ C1] [ 729.907291][ C1] __schedule+0x17c4/0x4d60 [ 729.911819][ C1] ? __lock_acquire+0xab9/0xd20 [ 729.916673][ C1] ? __pfx___schedule+0x10/0x10 [ 729.921541][ C1] ? schedule+0x91/0x360 [ 729.925791][ C1] schedule+0x165/0x360 [ 729.929952][ C1] schedule_timeout+0x12b/0x270 [ 729.934801][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 729.940168][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 729.946063][ C1] ? __pfx_process_timeout+0x10/0x10 [ 729.951354][ C1] ? prepare_to_swait_event+0x341/0x380 [ 729.957347][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 729.962214][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.967415][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 729.973572][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 729.978868][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 729.984080][ C1] rcu_gp_kthread+0x99/0x390 [ 729.988680][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 729.993883][ C1] ? __kthread_parkme+0x7b/0x200 [ 729.998824][ C1] ? __kthread_parkme+0x1a1/0x200 [ 730.003851][ C1] kthread+0x711/0x8a0 [ 730.007923][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 730.013118][ C1] ? __pfx_kthread+0x10/0x10 [ 730.017723][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.022919][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.028124][ C1] ? __pfx_kthread+0x10/0x10 [ 730.032730][ C1] ret_from_fork+0x4bc/0x870 [ 730.037319][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 730.042434][ C1] ? __switch_to_asm+0x39/0x70 [ 730.047191][ C1] ? __switch_to_asm+0x33/0x70 [ 730.051950][ C1] ? __pfx_kthread+0x10/0x10 [ 730.056558][ C1] ret_from_fork_asm+0x1a/0x30 [ 730.061343][ C1] [ 730.064358][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 730.070672][ C1] Sending NMI from CPU 1 to CPUs 0: [ 730.075883][ C0] NMI backtrace for cpu 0 [ 730.075924][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 730.075943][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 730.075954][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 730.075981][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 fa 13 00 f3 0f 1e fa fb f4 c8 ea 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 730.075996][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 730.076012][ C0] RAX: bd4c0de893282000 RBX: ffffffff8196e347 RCX: bd4c0de893282000 [ 730.076026][ C0] RDX: 0000000000000001 RSI: ffffffff8d77a730 RDI: ffffffff8bbf2140 [ 730.076038][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 730.076051][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f7d6670 [ 730.076064][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a58 [ 730.076075][ C0] FS: 0000000000000000(0000) GS:ffff888125ee9000(0000) knlGS:0000000000000000 [ 730.076089][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.076101][ C0] CR2: 00007fb884c46ce0 CR3: 000000007f7e2000 CR4: 00000000003526f0 [ 730.076116][ C0] Call Trace: [ 730.076124][ C0] [ 730.076130][ C0] default_idle+0x13/0x20 [ 730.076146][ C0] default_idle_call+0x73/0xb0 [ 730.076162][ C0] do_idle+0x1e7/0x510 [ 730.076182][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 730.076202][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.076226][ C0] ? __pfx_do_idle+0x10/0x10 [ 730.076251][ C0] ? do_idle+0x5/0x510 [ 730.076271][ C0] cpu_startup_entry+0x44/0x60 [ 730.076292][ C0] rest_init+0x2de/0x300 [ 730.076349][ C0] start_kernel+0x3a7/0x410 [ 730.076374][ C0] x86_64_start_reservations+0x24/0x30 [ 730.076391][ C0] x86_64_start_kernel+0x143/0x1c0 [ 730.076408][ C0] common_startup_64+0x13e/0x147 [ 730.076442][ C0]