last executing test programs: 3m58.122414282s ago: executing program 2 (id=284): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x20, 0xb}, 0x0, 0x0}) 3m53.288941846s ago: executing program 2 (id=288): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 3m52.582376456s ago: executing program 2 (id=292): io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x40, 0x8, 0x1000c1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) lseek(0xffffffffffffffff, 0x4, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x89, 0x40, 0x401, 0x7, {{0x16, 0x4, 0x1, 0x8, 0x58, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x2c, 0xa9, 0x1, 0x4, [{@multicast1}, {@multicast2, 0xfffffffe}, {@empty, 0x7fffffff}, {@multicast1, 0x8}, {@local}]}, @timestamp={0x44, 0xc, 0xae, 0x0, 0x2, [0x9a6d, 0x20000000]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xc3, [@local]}]}}}}}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m47.481926787s ago: executing program 2 (id=301): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2d, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000002000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002f7ae0ff1000000018280000", @ANYRES32, @ANYBLOB="0000000000010000dc99dcff04000000e5770c00ffffffff18170000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000062700c0000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_socket_connect_nvme_tcp() fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 3m46.302369801s ago: executing program 2 (id=303): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d") ioctl(r6, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000007a") sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xa) syz_usb_connect$uac1(0x2, 0xe9, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000081e04193f4000010203010902d70003011080220904000000010100000a240100803e000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000640)=@string={0x2}}]}) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0002000306010400eeff00001c000100ac9300007454e0c1aab936f1"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) 3m41.63915924s ago: executing program 2 (id=308): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x2}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000180)) 3m25.119450529s ago: executing program 32 (id=308): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x2}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000180)) 19.563045394s ago: executing program 3 (id=644): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ublk_chdev(0x0, r2, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r6, 0x0, 0xb00) 18.284798942s ago: executing program 3 (id=646): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 16.204402693s ago: executing program 1 (id=650): socket$netlink(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105200, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) close(0x4) 15.247249981s ago: executing program 3 (id=651): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x9, 0x20a, &(0x7f0000000900)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000180)) ftruncate(0xffffffffffffffff, 0x6000000) prctl$PR_SET_THP_DISABLE(0x29, 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) ptrace$getregs(0xc, r0, 0x5, &(0x7f0000000500)=""/196) 12.918114713s ago: executing program 1 (id=654): syz_open_dev$video4linux(&(0x7f0000000040), 0xfa85, 0x80000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 12.603942111s ago: executing program 5 (id=655): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 11.975334297s ago: executing program 4 (id=657): io_uring_setup(0x7, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) lseek(0xffffffffffffffff, 0x4, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x89, 0x40, 0x401, 0x7, {{0x16, 0x4, 0x1, 0x8, 0x58, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x2c, 0xa9, 0x1, 0x4, [{@multicast1}, {@multicast2, 0xfffffffe}, {@empty, 0x7fffffff}, {@multicast1, 0x8}, {@local}]}, @timestamp={0x44, 0xc, 0xae, 0x0, 0x2, [0x9a6d, 0x20000000]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xc3, [@local]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d002000011000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x2d0}}, 0x24040010) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) close(0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 11.614009579s ago: executing program 3 (id=658): openat$uhid(0xffffffffffffff9c, &(0x7f0000000c00), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) 10.045698386s ago: executing program 4 (id=659): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0xa, 0x806}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xb, 0x11, 0xff, @rand_addr=' \x01\x00', @local, {[], {0x4f19, 0x4e20, 0xb, 0x0, @opaque="27886a"}}}}}}}, 0x45) 9.984373337s ago: executing program 0 (id=660): r0 = socket(0x1d, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000000c0)="0b000000010001", 0x7) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x900) bind$can_j1939(r0, 0x0, 0x0) r4 = epoll_create(0x9) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000003c0)=[{0x3, 0x2, {0x0, 0xf0}, {0x2, 0xff, 0x2}, 0xfe, 0xff}, {0x3, 0x1, {0x1, 0x81a8dee6a2319c93, 0x4}, {0x1, 0x0, 0x1}, 0x2}], 0x40) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.414552471s ago: executing program 1 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000001800017d0a481efb30c8468a801400020076657468315f746f5f6801a92e4f4e978bb872884a5920737200000000666fa57463225186b8529035f9da64f3558c59993d436314c89f94a9f51dd345ca8a9b29664f710807245af7d17717f02d6d649c98fbc1c47e3c224ef585b9de4bd239a78265634b8cc60f98bc3638a3d14b5350211e"], 0x2c}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50a0000ffffffff61115c0000000000850000007c00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b101) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000340)={'pcl818\x00', [0x1100, 0x5, 0x13600, 0x4, 0x2, 0x10005, 0xf9, 0x3, 0x80008, 0x5, 0x2, 0x1, 0x7, 0x800, 0x6, 0xfd, 0x0, 0x80000000, 0x8, 0x7fffffff, 0xb740, 0xca9e, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7, 0x1539b804, 0x9, 0x1, 0x5]}) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) 8.839846054s ago: executing program 0 (id=662): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f79"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) r2 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 8.663313059s ago: executing program 4 (id=663): socket$netlink(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105200, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) close(0x4) 8.031372109s ago: executing program 5 (id=664): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f79"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x1, 0x0, 0x2000}) r1 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 5.522602166s ago: executing program 0 (id=665): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl(r0, 0x8934, &(0x7f00000002c0)) ioctl(r0, 0x890b, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 5.280818916s ago: executing program 1 (id=666): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 5.044830094s ago: executing program 0 (id=667): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_emit_vhci(0x0, 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 4.226962683s ago: executing program 1 (id=668): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x9, 0x20a, &(0x7f0000000900)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000180)) ftruncate(0xffffffffffffffff, 0x6000000) prctl$PR_SET_THP_DISABLE(0x29, 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) ptrace$getregs(0xc, r0, 0x5, &(0x7f0000000500)=""/196) 4.206043709s ago: executing program 4 (id=669): io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x40, 0x8, 0x1000c1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r0 = syz_open_procfs$namespace(0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) lseek(0xffffffffffffffff, 0x4, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x89, 0x40, 0x401, 0x7, {{0x16, 0x4, 0x1, 0x8, 0x58, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x2c, 0xa9, 0x1, 0x4, [{@multicast1}, {@multicast2, 0xfffffffe}, {@empty, 0x7fffffff}, {@multicast1, 0x8}, {@local}]}, @timestamp={0x44, 0xc, 0xae, 0x0, 0x2, [0x9a6d, 0x20000000]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xc3, [@local]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d002000011000000000000", @ANYRES32=r3, @ANYBLOB="020000000c000000ec0016805400018010000600ff0f000005000000090000000c00030003000000030000000c00070005000000060000000c00050002000000d50000000c000700090000000000000010000200140000008b0900007f0000003400018010000200ffffff7fd50300000c0000000c0003000d0000000004000014000a0009000000000000008f60ffffffffffff100001800c0009000f000000050000005000018014000b001000000000000000040000000000000014000a000600000000000000060000000000000004000c8014000a002e0000000000000004000000000000000c000500070000000600000008000d0000000000bc011880540001800b00020073686132353600000500020000000000060002007d0000000900020073797a30000000001400050098b00cfec51d2fa7db79ada64eb4acaf09000200c82d2f230000000005000600a90000002000018014000400683ff8919a71886c2f533ec4ee139eae0800010009000000340001801400050028896d132c36a5dd1412ca58f3c6f8ec060002002f0000001400040011510b9ab14b98d0d9a6aadd47584b913000018005000600070000001400050069f259c2dcf80efa6f9afc0b60524bc405000600f8000000080002002c2524005800018008000100f8ffffff0800010000000000140005008759013e3d6ae56ad528abd06cf0218b14000500520b47fac5036c4689c1322586dcd84214000400e0ee004a41f05b1638114aaf30296d570500020000000000280001800500060005000000140004007b4eb706bad46bdfadaea80eb2dd42c605000200000000001c000180080001000700000008000100010000000500060000000000400001800800010007000000050006000600000014000500845adaa5becf21242379032c1f32565605000600080000000800010005000000080001000300000004000180"], 0x2d0}}, 0x24040010) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) close(0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 4.167748025s ago: executing program 5 (id=670): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ublk_chdev(0x0, r2, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r6, 0x0, 0xb00) 3.913697315s ago: executing program 0 (id=671): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000001c0)={0x1, 0x0, 0x1, 0xbffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2700, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x4c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x2) clock_gettime(0x0, &(0x7f0000000180)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r5, 0x0, 0x0, 0x80800) close_range(r1, 0xffffffffffffffff, 0x0) 3.808130394s ago: executing program 3 (id=672): r0 = socket(0x1d, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000000c0)="0b000000010001", 0x7) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x900) bind$can_j1939(r0, 0x0, 0x0) r4 = epoll_create(0x9) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000003c0)=[{0x3, 0x2, {0x0, 0xf0}, {0x2, 0xff, 0x2}, 0xfe, 0xff}, {0x3, 0x1, {0x1, 0x81a8dee6a2319c93, 0x4}, {0x1, 0x0, 0x1}, 0x2}], 0x40) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.12216769s ago: executing program 5 (id=673): close(0x3) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) 2.107146724s ago: executing program 4 (id=674): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 1.156484855s ago: executing program 3 (id=675): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 211.925924ms ago: executing program 4 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 124.033945ms ago: executing program 5 (id=677): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl(r0, 0x8934, &(0x7f00000002c0)) ioctl(r0, 0x890b, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 77.997156ms ago: executing program 0 (id=678): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x9, 0x20a, &(0x7f0000000900)="$eJzslU9rE08Yxz+zmWSb3y+HgjevBtuLttmCePZi7/oCDOlai4nWbkQTCkYvvSiIb6Lgm9CDoHcPIoIXPSjooeKpIpFn9tnNbhJsWv9d9gvL853v829mdmfnSnQj8oHve9st5jcRGGq8MQYLLBgnsV+J7Re1Q8UHG48bqj9W+15t1Ou/vB/T/tVmux1uRb2fEx8DB8TkyaR07smDY7Pnj5EX9/KKYZYsY4/S69dItxTv7KTrYU7xp8VoLuOVGxf+8iqOTqoTk0/I1xpklY+/sXtZdrPM1Bhjct/64b5jR6SAI5C6vtUmX9M4ef0o7jw1pqTpVfLbciCRU/yv37IQ+Rc54h0qPULfR3T+rsdnA2Ve7W23RL1E4oS1+EmOhHPI4Jn+6UQ7bmEApsTQ5Ukdq7ELwFK3s7kU9fqnNjrN9XA9vBYEK2eWn/+vR3R4Bzba4bJx04jTPSGWFHJOqxm/fGlvR/4BGZjM1JB1jeS0ZPJzXjyRCamCl8nN1NACT9P+vmo3ow4XOckccGsg7kA3qI5Us1yWpa1iKOmgYbMTYh+POec43breXtvBYJK0XWxao/GOcjoIdCCNwpWz6fJ31NbVrqrdHfVzSO6u5E6yrsInHS0OoMLtZre75S6vmIlWSSs4LZhPO3vaNbkNk2Z1nxnx36yBBQoUKFCgQIECfwg/AgAA//+r2zk5") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000180)) ftruncate(r3, 0x6000000) prctl$PR_SET_THP_DISABLE(0x29, 0x1) copy_file_range(r3, 0x0, r3, 0x0, 0x9, 0x0) ptrace$getregs(0xc, r0, 0x5, &(0x7f0000000500)=""/196) 36.544335ms ago: executing program 5 (id=679): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 0s ago: executing program 1 (id=680): socket$netlink(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105200, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) close(0x4) kernel console output (not intermixed with test programs): sb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 80.444029][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.444863][ T5755] usb 4-1: Product: syz [ 80.444899][ T5755] usb 4-1: Manufacturer: syz [ 80.444918][ T5755] usb 4-1: SerialNumber: syz [ 80.489504][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.489542][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.518923][ T5755] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 80.565030][ T5755] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 80.743009][ T5755] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 80.777624][ T5755] usb 4-1: USB disconnect, device number 2 [ 80.817489][ T5755] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 80.843399][ T5755] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 80.856036][ T5755] ti_usb_3410_5052 4-1:2.0: device disconnected [ 81.038139][ T5849] binder: 5844:5849 ioctl c0306201 0 returned -14 [ 82.654101][ T5861] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 83.713933][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.881497][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 83.882204][ T5830] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 83.883169][ T5830] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 83.883210][ T5830] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 83.883234][ T5830] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.883258][ T5830] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 83.885085][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.885107][ T5830] usb 5-1: Product: syz [ 83.885120][ T5830] usb 5-1: Manufacturer: syz [ 83.885133][ T5830] usb 5-1: SerialNumber: syz [ 83.917850][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 83.940644][ T5830] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input5 [ 84.017718][ T5873] mmap: syz.1.19 (5873) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.147242][ T5879] loop5: detected capacity change from 0 to 7 [ 85.202066][ T5879] Dev loop5: unable to read RDB block 7 [ 85.202187][ T5879] loop5: AHDI p1 [ 85.203364][ T5879] loop5: partition table partially beyond EOD, truncated [ 85.657983][ T5830] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 85.658025][ T5830] (id 0x00) [ 86.379676][ T5878] comedi comedi3: pcl818: I/O base address or length out of range [ 86.496713][ T5889] random: crng reseeded on system resumption [ 86.543544][ T5830] rc_core: IR keymap rc-imon-pad not found [ 86.543579][ T5830] Registered IR keymap rc-empty [ 86.543686][ T5830] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 86.543708][ T5830] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 86.633255][ T5830] imon:send_packet: packet tx failed (-71) [ 86.639662][ T93] libceph: connect (1)[c::]:6789 error -101 [ 86.652594][ T93] libceph: mon0 (1)[c::]:6789 connect error [ 86.659490][ T5830] imon 5-1:155.0: remote input dev register failed [ 86.659671][ T5830] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 86.764646][ T93] libceph: connect (1)[c::]:6789 error -101 [ 86.779431][ T93] libceph: mon0 (1)[c::]:6789 connect error [ 86.793272][ T5886] ceph: No mds server is up or the cluster is laggy [ 87.053459][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 87.053644][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 87.561832][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 87.562017][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 88.858443][ T10] cfg80211: failed to load regulatory.db [ 88.891834][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 88.892001][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 88.968612][ T5898] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 89.252402][ T5830] imon 5-1:155.0: unable to initialize intf0, err 0 [ 89.252447][ T5830] imon:imon_probe: failed to initialize context! [ 89.252474][ T5830] imon 5-1:155.0: unable to register, err -19 [ 89.262461][ T5830] usb 5-1: USB disconnect, device number 2 [ 89.644003][ T5911] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 89.673787][ T5911] binder: 5906:5911 ioctl c0306201 0 returned -14 [ 89.698049][ T5911] binder: 5906:5911 ioctl c0306201 200000000040 returned -22 [ 90.670293][ T5914] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 90.834758][ T5920] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 90.859248][ T5920] binder: 5916:5920 ioctl c0306201 0 returned -14 [ 91.940030][ T5922] tipc: Enabling of bearer rejected, failed to enable media [ 95.574082][ T5954] Config c/1 of g1 needs at least one function. [ 95.576124][ T5954] udc dummy_udc.0: failed to start g1: -22 [ 95.576201][ T5954] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 95.587400][ T5954] UDC core: g1: couldn't find an available UDC or it's busy [ 97.380558][ T5967] dummy0: entered promiscuous mode [ 97.380654][ T5967] dummy0: entered allmulticast mode [ 98.491476][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.642767][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 98.648996][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 98.660683][ T10] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 98.671698][ T10] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 98.683847][ T10] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.695335][ T10] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 98.703412][ T5977] bridge1: entered promiscuous mode [ 98.720328][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.720379][ T10] usb 2-1: Product: syz [ 98.720408][ T10] usb 2-1: Manufacturer: syz [ 98.720424][ T10] usb 2-1: SerialNumber: syz [ 98.757801][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 98.773474][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input8 [ 99.051752][ T10] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 99.066734][ T10] (id 0x00) [ 99.907410][ T5989] loop5: detected capacity change from 0 to 7 [ 99.939894][ T5989] Dev loop5: unable to read RDB block 7 [ 99.940125][ T5989] loop5: AHDI p1 [ 99.940336][ T5989] loop5: partition table partially beyond EOD, truncated [ 99.980929][ T5989] comedi comedi3: pcl818: I/O base address or length out of range [ 101.462206][ T10] rc_core: IR keymap rc-imon-pad not found [ 101.463034][ T10] Registered IR keymap rc-empty [ 101.463139][ T10] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 101.463160][ T10] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 102.606163][ T10] imon:send_packet: packet tx failed (-71) [ 102.621613][ T10] imon 2-1:155.0: remote input dev register failed [ 102.621782][ T10] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 102.692208][ T10] imon 2-1:155.0: unable to initialize intf0, err 0 [ 102.692255][ T10] imon:imon_probe: failed to initialize context! [ 102.694112][ T10] imon 2-1:155.0: unable to register, err -19 [ 102.711253][ T10] usb 2-1: USB disconnect, device number 2 [ 105.721242][ T6037] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 105.721303][ T6037] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 105.721442][ T6037] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 105.897050][ T31] audit: type=1800 audit(1786470011.661:3): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.64" name="active" dev="configfs" ino=9421 res=0 errno=0 [ 106.261484][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.412453][ T5830] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 106.423377][ T5830] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.437900][ T5830] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 106.449214][ T5830] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.462166][ T5830] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 106.485003][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.485044][ T5830] usb 5-1: Product: syz [ 106.485062][ T5830] usb 5-1: Manufacturer: syz [ 106.485079][ T5830] usb 5-1: SerialNumber: syz [ 106.519598][ T5830] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 106.550227][ T5830] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 106.566512][ T5830] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 106.753154][ T5830] usb 5-1: USB disconnect, device number 3 [ 106.796460][ T5830] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 106.832195][ T5830] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 106.844078][ T5830] ti_usb_3410_5052 5-1:2.0: device disconnected [ 107.128180][ T6054] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5610] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6054] [ 108.381424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.896809][ T6065] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 114.905748][ T6087] bridge1: entered promiscuous mode [ 118.065771][ T6109] process 'syz.4.82' launched './file0' with NULL argv: empty string added [ 119.064209][ T31] audit: type=1800 audit(1786470024.831:4): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.84" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 119.070095][ T6110] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 119.070136][ T6110] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 119.070154][ T6110] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 119.228024][ T6110] syz.2.84 (6110) used greatest stack depth: 18312 bytes left [ 123.331939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.377737][ T6141] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 124.399914][ T6141] binder: 6139:6141 ioctl c0306201 0 returned -14 [ 124.420843][ T6141] binder: 6139:6141 ioctl c0306201 200000000040 returned -22 [ 126.356430][ T6147] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 126.665260][ T6152] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5609] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6152] [ 128.451490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.826218][ T6173] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 130.031481][ T93] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.047788][ T6175] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 130.182203][ T93] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 130.183511][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.183539][ T93] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.183575][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.196059][ T93] usb 2-1: config 0 descriptor?? [ 130.469358][ T6184] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 130.483288][ T31] audit: type=1800 audit(1786470036.251:5): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.100" name="file0" dev="overlay" ino=162 res=0 errno=0 [ 131.380202][ T93] usbhid 2-1:0.0: can't add hid device: -71 [ 131.380327][ T93] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 131.396192][ T93] usb 2-1: USB disconnect, device number 3 [ 131.452940][ T6192] loop0: detected capacity change from 0 to 8192 [ 131.544968][ T6192] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.587863][ T6192] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 131.598738][ T6192] FAT-fs (loop0): Filesystem has been set read-only [ 132.205336][ T6198] comedi comedi3: pcl818: I/O base address or length out of range [ 132.877635][ T5712] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.916612][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.917686][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.646602][ T6212] overlayfs: failed to resolve './file1': -2 [ 133.774773][ T6213] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 134.101531][ T6217] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 134.125160][ T31] audit: type=1800 audit(1786470039.871:6): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.115" name="file0" dev="overlay" ino=119 res=0 errno=0 [ 134.241288][ T5712] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 134.410585][ T5712] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.410683][ T5712] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 134.436217][ T5712] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.436257][ T5712] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 134.440799][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.440823][ T5712] usb 1-1: Product: syz [ 134.440836][ T5712] usb 1-1: Manufacturer: syz [ 134.440849][ T5712] usb 1-1: SerialNumber: syz [ 134.707896][ T6220] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 134.977945][ T5712] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 135.305114][ T5712] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 135.319484][ T5712] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 135.346766][ T5712] usb 1-1: USB disconnect, device number 2 [ 135.403422][ T5712] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 135.480688][ T5621] udevd[5621]: setting mode of /dev/ttyUSB1 to 020660 failed: No such file or directory [ 135.480828][ T5621] udevd[5621]: setting owner of /dev/ttyUSB1 to uid=0, gid=18 failed: No such file or directory [ 135.516046][ T5712] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 135.530154][ T5712] ti_usb_3410_5052 1-1:2.0: device disconnected [ 135.631557][ T5743] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.820163][ T5743] usb 4-1: Using ep0 maxpacket: 32 [ 136.392300][ T5743] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 136.641158][ T5743] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 136.641223][ T5743] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 136.641265][ T5743] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.641294][ T5743] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 136.698832][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.698874][ T5743] usb 4-1: Product: syz [ 136.698902][ T5743] usb 4-1: Manufacturer: syz [ 136.698919][ T5743] usb 4-1: SerialNumber: syz [ 136.761354][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 136.776780][ T5743] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input11 [ 137.020767][ T6242] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 137.051939][ T5743] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 137.052040][ T5743] (id 0x00) [ 137.054361][ T6242] binder: 6239:6242 ioctl c0306201 0 returned -14 [ 137.576521][ T6248] comedi comedi3: pcl818: I/O base address or length out of range [ 138.217977][ T6238] loop1: detected capacity change from 0 to 8192 [ 138.557934][ T6230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.933759][ T6238] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.981437][ T5743] rc_core: IR keymap rc-imon-pad not found [ 138.981480][ T5743] Registered IR keymap rc-empty [ 138.981575][ T5743] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 138.981596][ T5743] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 139.030067][ T6238] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 139.030113][ T6238] FAT-fs (loop1): Filesystem has been set read-only [ 139.152173][ T5743] imon:send_packet: packet tx failed (-71) [ 139.174463][ T5743] imon 4-1:155.0: remote input dev register failed [ 139.174618][ T5743] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 139.424796][ T5743] imon 4-1:155.0: unable to initialize intf0, err 0 [ 139.424844][ T5743] imon:imon_probe: failed to initialize context! [ 139.424872][ T5743] imon 4-1:155.0: unable to register, err -19 [ 139.931232][ T5743] usb 4-1: USB disconnect, device number 3 [ 140.284497][ T6263] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 142.226345][ T6268] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 142.234204][ T31] audit: type=1800 audit(1786470048.001:7): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.128" name="file0" dev="overlay" ino=134 res=0 errno=0 [ 144.780665][ T6284] loop4: detected capacity change from 0 to 8192 [ 144.809764][ T6284] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.812586][ T1217] libceph: connect (1)[c::]:6789 error -101 [ 144.812740][ T1217] libceph: mon0 (1)[c::]:6789 connect error [ 144.820411][ T6285] ceph: No mds server is up or the cluster is laggy [ 144.867430][ T6284] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 144.878427][ T6284] FAT-fs (loop4): Filesystem has been set read-only [ 145.527654][ T6297] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 145.658296][ T31] audit: type=1800 audit(1786470051.381:8): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="file0" dev="overlay" ino=153 res=0 errno=0 [ 147.264074][ T6311] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 149.169908][ T6327] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 149.198057][ T6327] binder: 6324:6327 ioctl c0306201 0 returned -14 [ 150.469425][ T6336] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 150.483960][ T31] audit: type=1800 audit(1786470056.251:9): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.146" name="file0" dev="overlay" ino=245 res=0 errno=0 [ 151.701121][ T6335] loop0: detected capacity change from 0 to 8192 [ 151.729812][ T6335] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.780047][ T6335] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 151.813390][ T6335] FAT-fs (loop0): Filesystem has been set read-only [ 156.995120][ T6373] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 157.623337][ T6371] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 157.647020][ T6375] dummy0: entered promiscuous mode [ 157.647045][ T6375] dummy0: entered allmulticast mode [ 158.130410][ T6384] overlayfs: missing 'lowerdir' [ 158.883287][ T6379] loop2: detected capacity change from 0 to 8192 [ 159.171854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 159.324898][ T6379] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.474542][ T6379] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 159.474576][ T6379] FAT-fs (loop2): Filesystem has been set read-only [ 159.618988][ T6389] dummy0: entered promiscuous mode [ 159.619094][ T6389] dummy0: entered allmulticast mode [ 163.424590][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 164.482660][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.641871][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 164.647972][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.659509][ T9] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 164.659577][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.659605][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 164.661278][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 164.661301][ T9] usb 2-1: Manufacturer: syz [ 165.462183][ T9] usb 2-1: config 0 descriptor?? [ 165.709367][ T6413] loop2: detected capacity change from 0 to 1024 [ 165.858116][ T6416] overlayfs: failed to resolve './file1': -2 [ 165.960029][ T6417] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 166.100747][ T5755] usb 2-1: USB disconnect, device number 4 [ 166.893240][ T6413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.371879][ T6429] Bluetooth: MGMT ver 1.23 [ 167.682706][ T6432] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 168.398277][ T6440] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 168.409976][ T31] audit: type=1800 audit(1786470074.171:10): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.176" name="file0" dev="overlay" ino=235 res=0 errno=0 [ 168.412053][ T6441] overlayfs: missing 'lowerdir' [ 169.125520][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.194777][ T6444] loop0: detected capacity change from 0 to 1024 [ 169.270045][ T6444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.696620][ T6458] dummy0: entered promiscuous mode [ 170.696735][ T6458] dummy0: entered allmulticast mode [ 171.429405][ T6463] loop1: detected capacity change from 0 to 1024 [ 171.752691][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.443023][ T6469] overlayfs: failed to resolve './bus': -2 [ 176.089752][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.487774][ T6492] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 178.784887][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.051537][ T6520] overlayfs: missing 'lowerdir' [ 180.274211][ T6525] overlayfs: missing 'lowerdir' [ 181.827262][ T6535] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 181.855655][ T6535] binder: 6532:6535 ioctl c0306201 0 returned -14 [ 181.941639][ T6535] gadgetfs: bound to dummy_udc driver [ 183.283477][ T6547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 184.191741][ T5721] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.458832][ T5721] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.480924][ T5721] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.480969][ T5721] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 184.481003][ T5721] usb 1-1: config 220 has no interface number 2 [ 184.481062][ T5721] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 184.481091][ T5721] usb 1-1: config 220 interface 0 has no altsetting 0 [ 184.481111][ T5721] usb 1-1: config 220 interface 76 has no altsetting 0 [ 184.481131][ T5721] usb 1-1: config 220 interface 1 has no altsetting 0 [ 184.554228][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.554256][ T5721] usb 1-1: Product: syz [ 184.554269][ T5721] usb 1-1: Manufacturer: syz [ 184.554289][ T5721] usb 1-1: SerialNumber: syz [ 185.447572][ T6566] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 186.415330][ T5721] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 186.426686][ T5721] uvcvideo 1-1:220.0: No valid video chain found. [ 186.427155][ T5721] usb 1-1: selecting invalid altsetting 0 [ 187.088340][ T6579] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 187.096647][ T31] audit: type=1800 audit(1786470092.861:11): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.208" name="file0" dev="overlay" ino=249 res=0 errno=0 [ 187.958594][ T5721] usb 1-1: selecting invalid altsetting 0 [ 187.958645][ T5721] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 189.032063][ T5721] usb 1-1: USB disconnect, device number 3 [ 191.139103][ T6598] device-mapper: table: 248:0: too large device [ 191.139131][ T6598] device-mapper: ioctl: error adding target to table [ 191.198986][ T6593] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 191.513798][ T5713] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 191.962988][ T5713] usb 3-1: not running at top speed; connect to a high speed hub [ 191.963040][ T5713] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 191.983107][ T5713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.983152][ T5713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.004700][ T5713] usb 3-1: language id specifier not provided by device, defaulting to English [ 192.017733][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.017777][ T5713] usb 3-1: Product: syz [ 192.017806][ T5713] usb 3-1: Manufacturer: syz [ 192.017822][ T5713] usb 3-1: SerialNumber: syz [ 192.329779][ T6613] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 192.382036][ T31] audit: type=1800 audit(1786470098.121:12): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.219" name="file0" dev="overlay" ino=250 res=0 errno=0 [ 193.117822][ T6615] loop4: detected capacity change from 0 to 1024 [ 193.196539][ T6615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.220929][ T5713] usb 3-1: 0:1 : does not exist [ 193.660652][ T5713] usb 3-1: USB disconnect, device number 2 [ 194.338648][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348509][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.546304][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.333186][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 195.492340][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 195.502830][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 195.502858][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 195.502878][ T10] usb 3-1: config 220 has no interface number 2 [ 195.502926][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.502955][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 195.502967][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 195.502978][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 195.576577][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.576625][ T10] usb 3-1: Product: syz [ 195.576655][ T10] usb 3-1: Manufacturer: syz [ 195.576672][ T10] usb 3-1: SerialNumber: syz [ 195.902462][ T6641] overlayfs: failed to resolve './file0': -2 [ 196.437822][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 196.438757][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 196.504778][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 196.783531][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 196.792541][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 196.875850][ T10] usb 3-1: selecting invalid altsetting 0 [ 198.136057][ T10] usb 3-1: selecting invalid altsetting 0 [ 198.150516][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 198.229947][ T10] usb 3-1: USB disconnect, device number 3 [ 198.270116][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.905381][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 201.472653][ T6667] loop0: detected capacity change from 0 to 1024 [ 201.524512][ T6667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.538522][ T6668] overlayfs: missing 'lowerdir' [ 202.194988][ T6676] evm: overlay not supported [ 202.215352][ T31] audit: type=1800 audit(1786470107.941:13): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.233" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 202.655098][ T6681] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 204.494906][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.966267][ T6711] overlayfs: failed to resolve './file1': -2 [ 206.083059][ T6710] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 206.789844][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.217043][ T30] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 207.328094][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.328146][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.328201][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.209891][ T30] usb 5-1: config 0 descriptor?? [ 208.623889][ T30] usb 5-1: can't set config #0, error -71 [ 208.640103][ T30] usb 5-1: USB disconnect, device number 4 [ 208.765501][ T6718] random: crng reseeded on system resumption [ 210.163423][ T6733] loop4: detected capacity change from 0 to 1024 [ 210.773763][ T6733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.497122][ T6746] overlay: ./file0 is not a directory [ 213.209135][ T6758] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 213.269594][ T31] audit: type=1800 audit(1786470119.001:14): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.255" name="file0" dev="overlay" ino=308 res=0 errno=0 [ 213.327302][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.143177][ T6763] overlayfs: failed to resolve './file1': -2 [ 214.225693][ T6763] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 216.912460][ T6776] xt_l2tp: invalid flags combination: c [ 217.046986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.098246][ T6783] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 219.611418][ T1217] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 219.724607][ T6796] overlayfs: failed to resolve './file0': -2 [ 219.817324][ T1217] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 220.344299][ T1217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.344355][ T1217] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.344393][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.702242][ T1217] usb 1-1: config 0 descriptor?? [ 222.808505][ T6802] UDC core: g1: couldn't find an available UDC or it's busy [ 223.118029][ T1217] usbhid 1-1:0.0: can't add hid device: -71 [ 223.118145][ T1217] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 223.144274][ T1217] usb 1-1: USB disconnect, device number 4 [ 224.344215][ T6817] loop0: detected capacity change from 0 to 1024 [ 224.574485][ T6817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.632216][ T6823] configfs-gadget.g1 gadget.0: HOST MAC 8a:e9:4d:ab:a8:d8 [ 224.632259][ T6823] configfs-gadget.g1 gadget.0: MAC 1a:c4:c7:db:ef:aa [ 224.973673][ T5743] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 225.122500][ T5743] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 225.126306][ T5743] usb 1-1: Dual-Role OTG device on HNP port [ 225.126749][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.673399][ T5743] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 8a:e9:4d:ab:a8:d8 [ 225.695661][ T31] audit: type=1800 audit(1786470131.461:15): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.276" name="active" dev="configfs" ino=11840 res=0 errno=0 [ 225.842789][ T6839] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 227.656652][ T5614] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 228.361974][ T5721] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 228.367841][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.563503][ T5721] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 228.576953][ T5721] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 228.586544][ T5721] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 228.597426][ T5721] usb 2-1: config 220 has no interface number 2 [ 228.604807][ T5721] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 228.619218][ T5721] usb 2-1: config 220 interface 0 has no altsetting 0 [ 228.619249][ T5721] usb 2-1: config 220 interface 76 has no altsetting 0 [ 228.619266][ T5721] usb 2-1: config 220 interface 1 has no altsetting 0 [ 228.678536][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 228.859678][ T6880] overlayfs: missing 'lowerdir' [ 229.241247][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.252974][ T5721] usb 2-1: Product: syz [ 229.289352][ T5721] usb 2-1: Manufacturer: syz [ 229.289374][ T5721] usb 2-1: SerialNumber: syz [ 229.308694][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.327171][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.327238][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.367251][ T10] usb 3-1: config 0 descriptor?? [ 229.403647][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 229.691971][ T5721] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 229.699906][ T5721] uvcvideo 2-1:220.0: No valid video chain found. [ 229.706809][ T5721] usb 2-1: selecting invalid altsetting 0 [ 229.729033][ T5721] usb 2-1: selecting invalid altsetting 0 [ 229.735895][ T5721] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 229.750545][ T5721] usb 2-1: USB disconnect, device number 5 [ 229.801438][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.954532][ T30] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 229.959836][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.959868][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.959907][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.967581][ T6891] device-mapper: table: 248:0: too large device [ 229.970392][ T6891] device-mapper: ioctl: error adding target to table [ 229.989576][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 230.085003][ T30] usb 5-1: config 0 descriptor?? [ 230.243356][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 230.317795][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 230.456372][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 230.559614][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 231.093440][ T5713] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 231.439441][ T5713] usb 4-1: not running at top speed; connect to a high speed hub [ 231.447881][ T5713] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 231.487618][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.487764][ T5713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.540311][ T5713] usb 4-1: language id specifier not provided by device, defaulting to English [ 231.542149][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 231.614886][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.624067][ T5713] usb 4-1: Product: syz [ 231.624088][ T5713] usb 4-1: Manufacturer: syz [ 231.624133][ T5713] usb 4-1: SerialNumber: syz [ 232.959619][ T6895] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 233.027973][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 233.029879][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 233.030487][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 233.031689][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 233.032198][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 233.046200][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 233.048011][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 233.048452][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.049003][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.049395][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 233.088310][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 233.088381][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 233.133206][ T30] usb 5-1: USB disconnect, device number 5 [ 233.171897][ T5713] usb 4-1: 0:1 : does not exist [ 233.245431][ T10] pwc: Registered as video103. [ 233.269685][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 233.317377][ T5713] usb 4-1: USB disconnect, device number 4 [ 233.338579][ T6904] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 233.398450][ T10] usb 3-1: USB disconnect, device number 4 [ 233.484293][ T6905] syz.2.288 (6905) used greatest stack depth: 18088 bytes left [ 234.699420][ T6918] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 237.618265][ T6571] udevd[6571]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.637646][ T6939] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 238.531845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 239.278881][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 239.463934][ T10] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 239.465879][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.465921][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.465960][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.597902][ T10] usb 2-1: config 0 descriptor?? [ 242.253863][ T6983] device-mapper: table: 248:0: too large device [ 242.256055][ T6983] device-mapper: ioctl: error adding target to table [ 243.452477][ T5721] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 244.608160][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 244.608240][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 244.623787][ T10] usb 2-1: USB disconnect, device number 6 [ 245.034977][ T5721] usb 3-1: device not accepting address 5, error -71 [ 245.092063][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.181386][ T5614] Bluetooth: hci4: failed to read key size for handle 200 [ 245.652153][ T25] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 245.779012][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.779074][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.779134][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.914928][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.145354][ T25] usb 2-1: config 0 descriptor?? [ 246.164726][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.818781][ T7015] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 247.758978][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 247.759094][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 247.780267][ T25] usb 2-1: USB disconnect, device number 7 [ 249.491744][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 249.591384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 249.752714][ T10] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 249.831759][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.844829][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.864230][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.338319][ T10] usb 2-1: config 0 descriptor?? [ 250.707237][ T7068] device-mapper: table: 248:0: too large device [ 250.707473][ T7068] device-mapper: ioctl: error adding target to table [ 251.504782][ T5721] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 252.717187][ T5721] usb 4-1: not running at top speed; connect to a high speed hub [ 252.717270][ T5721] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 253.104336][ T5721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.104505][ T5721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.198620][ T5721] usb 4-1: language id specifier not provided by device, defaulting to English [ 253.346350][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.346456][ T5721] usb 4-1: Product: syz [ 253.346495][ T5721] usb 4-1: Manufacturer: syz [ 253.346509][ T5721] usb 4-1: SerialNumber: syz [ 253.514562][ T5721] usb 4-1: can't set config #1, error -71 [ 253.524513][ T5721] usb 4-1: USB disconnect, device number 5 [ 253.607506][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 253.607738][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 253.706058][ T7077] overlayfs: failed to resolve './file0': -2 [ 253.803706][ T7077] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 253.860674][ T10] usb 2-1: USB disconnect, device number 8 [ 254.838555][ T7087] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 254.861975][ T7087] binder: 7084:7087 ioctl c0306201 0 returned -14 [ 255.012171][ T7083] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 255.907620][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.907680][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.350129][ T10] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 256.589943][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 256.598161][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 256.598213][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.598231][ T10] usb 5-1: config 0 has no interface number 0 [ 256.598266][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.598285][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.598323][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.611206][ T10] usb 5-1: config 0 descriptor?? [ 256.616015][ T10] ldusb 5-1:0.55: Interrupt in endpoint not found [ 257.786190][ T9] usb 5-1: USB disconnect, device number 6 [ 258.936785][ T7125] device-mapper: table: 248:0: zero-length target [ 258.936945][ T7125] device-mapper: ioctl: error adding target to table [ 258.965072][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.968243][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.575907][ T7142] device-mapper: table: 248:0: too large device [ 261.576062][ T7142] device-mapper: ioctl: error adding target to table [ 262.040084][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 262.291966][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 262.301071][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 262.348767][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.348871][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.388011][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 262.461379][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.470076][ T9] usb 2-1: Product: syz [ 262.470096][ T9] usb 2-1: Manufacturer: syz [ 262.470110][ T9] usb 2-1: SerialNumber: syz [ 264.261162][ T9] usb 2-1: 0:1 : does not exist [ 264.399902][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.424320][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.443100][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.457488][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.469747][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 265.536513][ T9] usb 2-1: USB disconnect, device number 9 [ 265.630705][ T6999] udevd[6999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.871516][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 266.121417][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 266.127710][ T30] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 266.264238][ T30] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 266.264318][ T30] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 266.264341][ T30] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.264364][ T30] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 266.493077][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.493150][ T30] usb 4-1: Product: syz [ 266.493181][ T30] usb 4-1: Manufacturer: syz [ 266.493198][ T30] usb 4-1: SerialNumber: syz [ 266.627943][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 266.706965][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input16 [ 266.731552][ T5614] Bluetooth: hci5: command tx timeout [ 267.570845][ T7147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.890310][ T7166] loop5: detected capacity change from 0 to 7 [ 267.891476][ T7166] Dev loop5: unable to read RDB block 7 [ 267.891497][ T7166] loop5: AHDI p1 [ 267.891510][ T7166] loop5: partition table partially beyond EOD, truncated [ 267.893410][ T7166] comedi comedi3: pcl818: I/O base address or length out of range [ 267.912729][ T30] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 267.912748][ T30] (id 0x00) [ 268.174796][ T7195] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 268.174853][ T7195] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 268.174898][ T7195] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 268.247452][ T30] rc_core: IR keymap rc-imon-pad not found [ 268.249108][ T30] Registered IR keymap rc-empty [ 268.249175][ T30] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 268.249191][ T30] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 268.273043][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 268.822033][ T5614] Bluetooth: hci5: command tx timeout [ 269.232884][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input17 [ 269.239415][ T30] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:6> initialized [ 269.501487][ T7207] device-mapper: table: 248:0: zero-length target [ 269.501619][ T7207] device-mapper: ioctl: error adding target to table [ 269.840217][ T5712] usb 4-1: USB disconnect, device number 6 [ 269.859427][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 270.116491][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 270.130473][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 270.201862][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.216255][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.248729][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 270.337832][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.349083][ T9] usb 5-1: Product: syz [ 270.349211][ T9] usb 5-1: Manufacturer: syz [ 270.360833][ T9] usb 5-1: SerialNumber: syz [ 270.891549][ T5614] Bluetooth: hci5: command tx timeout [ 272.971664][ T5614] Bluetooth: hci5: command tx timeout [ 273.226550][ T9] usb 5-1: 0:1 : does not exist [ 273.278737][ T9] usb 5-1: USB disconnect, device number 7 [ 274.111921][ T6143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.661381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 277.201377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 277.231385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 277.436031][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 280.514246][ T6143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.875745][ T6143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.043001][ T6999] udevd[6999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.003550][ T30] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 282.364953][ T30] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 282.366577][ T30] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.366600][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.366617][ T30] usb 4-1: config 0 has no interface number 0 [ 282.366652][ T30] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.366672][ T30] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.366708][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.697843][ T30] usb 4-1: config 0 descriptor?? [ 282.717156][ T30] ldusb 4-1:0.55: Interrupt in endpoint not found [ 283.986943][ T30] usb 4-1: USB disconnect, device number 7 [ 284.025758][ T6143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.345028][ T6143] bridge_slave_1: left allmulticast mode [ 286.373614][ T6143] bridge_slave_1: left promiscuous mode [ 286.377725][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.868120][ T6143] bridge_slave_0: left allmulticast mode [ 286.875480][ T6143] bridge_slave_0: left promiscuous mode [ 286.934410][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.560283][ T6143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.580120][ T6143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.592149][ T6143] bond0 (unregistering): Released all slaves [ 289.892458][ T7335] overlayfs: missing 'lowerdir' [ 289.968364][ T7335] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 291.597039][ T7353] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 292.809078][ T7367] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 295.445900][ T7398] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 295.673387][ T6143] hsr_slave_0: left promiscuous mode [ 295.682064][ T6143] hsr_slave_1: left promiscuous mode [ 295.684518][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.687754][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.737281][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.737323][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.962339][ T6143] veth1_macvtap: left promiscuous mode [ 295.969840][ T6143] veth0_macvtap: left promiscuous mode [ 295.970106][ T6143] veth1_vlan: left promiscuous mode [ 295.971134][ T6143] veth0_vlan: left promiscuous mode [ 298.521495][ T5830] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 298.642809][ T6143] team0 (unregistering): Port device team_slave_1 removed [ 298.654388][ T6143] team0 (unregistering): Port device team_slave_0 removed [ 298.681419][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 298.687311][ T5830] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 298.698703][ T5830] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 298.698760][ T5830] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 298.698784][ T5830] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.698810][ T5830] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 298.755974][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.756017][ T5830] usb 2-1: Product: syz [ 298.756046][ T5830] usb 2-1: Manufacturer: syz [ 298.756063][ T5830] usb 2-1: SerialNumber: syz [ 298.775978][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 298.788603][ T5830] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input18 [ 298.912379][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.923281][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.930929][ T7151] bridge_slave_0: entered allmulticast mode [ 298.944202][ T7151] bridge_slave_0: entered promiscuous mode [ 298.990444][ T7423] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 298.992999][ T5830] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 298.993017][ T5830] (id 0x00) [ 299.025873][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 299.035128][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.045657][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.045823][ T7151] bridge_slave_1: entered allmulticast mode [ 299.063595][ T7151] bridge_slave_1: entered promiscuous mode [ 299.190923][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.244361][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.284224][ T7443] loop5: detected capacity change from 0 to 7 [ 299.349584][ T7443] Dev loop5: unable to read RDB block 7 [ 299.349869][ T7443] loop5: AHDI p1 [ 299.350136][ T7443] loop5: partition table partially beyond EOD, truncated [ 299.763033][ T5830] rc_core: IR keymap rc-imon-pad not found [ 299.763073][ T5830] Registered IR keymap rc-empty [ 299.763172][ T5830] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 299.763191][ T5830] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 301.967841][ T5830] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 302.272885][ T5830] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input19 [ 302.360512][ T5830] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:10> initialized [ 302.391800][ T5830] usb 2-1: USB disconnect, device number 10 [ 302.469013][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.610392][ T7456] device-mapper: table: 248:0: too large device [ 302.610446][ T7456] device-mapper: ioctl: error adding target to table [ 302.696943][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.081436][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 305.828378][ T7151] team0: Port device team_slave_0 added [ 305.868277][ T7151] team0: Port device team_slave_1 added [ 306.014833][ T7479] overlayfs: missing 'lowerdir' [ 306.094907][ T7481] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 306.529547][ T7485] binder: 7476:7485 ioctl c0306201 0 returned -14 [ 307.053842][ T7485] gadgetfs: bound to dummy_udc driver [ 307.127437][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.127498][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.127521][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.327359][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.327461][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.329146][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.229527][ T7151] hsr_slave_0: entered promiscuous mode [ 310.240610][ T7151] hsr_slave_1: entered promiscuous mode [ 310.246677][ T7151] debugfs: 'hsr0' already exists in 'hsr' [ 310.258314][ T7151] Cannot create hsr debugfs directory [ 310.326771][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.346463][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.829830][ T7532] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 312.657784][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 313.874683][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 314.064987][ T25] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 314.078537][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 314.100737][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.182126][ T25] usb 2-1: config 0 descriptor?? [ 314.196320][ T7556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.347530][ T7554] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 314.572744][ T7560] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 314.600847][ T7151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.652922][ T7151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.661038][ T7151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.692095][ T7151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.709371][ T7151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.757005][ T7151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.762877][ T7151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.775623][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.775685][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.775710][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.775733][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.775758][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.775783][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.775808][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.779249][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.779279][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.779304][ T25] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 314.809399][ T25] asus 0003:0B05:1ABE.0001: reserved main item tag 0xd [ 314.839692][ T7151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.212741][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 316.274136][ T25] asus 0003:0B05:1ABE.0001: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 316.277025][ T25] asus 0003:0B05:1ABE.0001: Asus handshake 5a returned invalid response: 5a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 316.393601][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.399467][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.436105][ T25] usb 2-1: USB disconnect, device number 11 [ 316.814848][ T7597] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 316.814961][ T7597] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 316.815010][ T7597] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 316.877078][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.916105][ T7601] xt_l2tp: invalid flags combination: c [ 317.223299][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.223399][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.425794][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.548777][ T7589] fido_id[7589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 317.723871][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.723989][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.783154][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.783253][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.172702][ T7616] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 318.172765][ T7616] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 318.172783][ T7616] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 318.551840][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 320.465277][ T7645] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 320.555449][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.673104][ T7657] device-mapper: table: 248:0: too large device [ 320.673127][ T7657] device-mapper: ioctl: error adding target to table [ 320.832101][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 320.956735][ T7665] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 321.043173][ T25] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 321.081418][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 321.099327][ T30] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 321.201309][ T30] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 321.201533][ T30] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 321.201557][ T30] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.201579][ T30] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 321.414636][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.414690][ T30] usb 5-1: Product: syz [ 321.414721][ T30] usb 5-1: Manufacturer: syz [ 321.414739][ T30] usb 5-1: SerialNumber: syz [ 321.527032][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 321.527100][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 321.589667][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.589728][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.626034][ T25] usb 2-1: language id specifier not provided by device, defaulting to English [ 321.691964][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.692006][ T25] usb 2-1: Product: syz [ 321.692033][ T25] usb 2-1: Manufacturer: syz [ 321.692050][ T25] usb 2-1: SerialNumber: syz [ 321.972928][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 321.978283][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input20 [ 322.175916][ T7670] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 322.452738][ T30] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 322.461618][ T30] (id 0x00) [ 322.832593][ T7675] loop5: detected capacity change from 0 to 7 [ 322.891158][ T7676] comedi comedi3: pcl818: I/O base address or length out of range [ 323.069673][ T7675] Dev loop5: unable to read RDB block 7 [ 323.076452][ T7675] loop5: AHDI p1 [ 323.080424][ T7675] loop5: partition table partially beyond EOD, truncated [ 323.802639][ T25] usb 2-1: 0:1 : does not exist [ 324.320898][ T25] usb 2-1: USB disconnect, device number 12 [ 325.652779][ T30] rc_core: IR keymap rc-imon-pad not found [ 325.652821][ T30] Registered IR keymap rc-empty [ 325.652969][ T30] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 325.652992][ T30] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 325.710656][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.757588][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.790961][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.370571][ T7686] loop5: detected capacity change from 0 to 7 [ 326.536278][ T30] imon:send_packet: packet tx failed (-71) [ 326.552767][ T30] imon 5-1:155.0: remote input dev register failed [ 326.552899][ T30] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 326.637838][ T7686] Dev loop5: unable to read RDB block 7 [ 326.637875][ T7686] loop5: AHDI p1 [ 326.637953][ T7686] loop5: partition table partially beyond EOD, truncated [ 326.827893][ T7696] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 326.827944][ T7696] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 326.827983][ T7696] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 326.871018][ T30] imon 5-1:155.0: unable to initialize intf0, err 0 [ 326.887659][ T30] imon:imon_probe: failed to initialize context! [ 326.887720][ T30] imon 5-1:155.0: unable to register, err -19 [ 326.892373][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.896950][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.904648][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.914695][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.916683][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.942836][ T30] usb 5-1: USB disconnect, device number 9 [ 327.181838][ T5712] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 327.335782][ T5712] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.341302][ T5712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.341568][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.377944][ T5712] usb 2-1: config 0 descriptor?? [ 327.446083][ T5712] pwc: Askey VC010 type 2 USB webcam detected. [ 328.062667][ T5712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 328.079537][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 328.159593][ T5712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 328.470746][ T5712] pwc: recv_control_msg error -32 req 04 val 1000 [ 328.971686][ T5614] Bluetooth: hci1: command tx timeout [ 328.988975][ T5712] pwc: recv_control_msg error -32 req 04 val 1300 [ 329.018944][ T5712] pwc: recv_control_msg error -32 req 04 val 1400 [ 329.097306][ T5712] pwc: recv_control_msg error -32 req 02 val 2000 [ 329.221539][ T5712] pwc: recv_control_msg error -32 req 02 val 2100 [ 329.279352][ T5712] pwc: recv_control_msg error -32 req 04 val 1500 [ 329.293762][ T5712] pwc: recv_control_msg error -32 req 02 val 2500 [ 329.318387][ T5712] pwc: recv_control_msg error -32 req 02 val 2400 [ 329.577033][ T5712] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.577512][ T5712] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.684322][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 329.741494][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 330.664296][ T5712] pwc: Registered as video103. [ 330.667717][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 330.697438][ T5712] usb 2-1: USB disconnect, device number 13 [ 331.061470][ T5614] Bluetooth: hci1: command tx timeout [ 333.133276][ T5622] Bluetooth: hci1: command tx timeout [ 333.343142][ T6271] bridge_slave_1: left allmulticast mode [ 333.343210][ T6271] bridge_slave_1: left promiscuous mode [ 333.343441][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.387766][ T6271] bridge_slave_0: left allmulticast mode [ 333.388728][ T6271] bridge_slave_0: left promiscuous mode [ 333.388990][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.000764][ T6271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.053828][ T6271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.074005][ T6271] bond0 (unregistering): Released all slaves [ 335.215908][ T5614] Bluetooth: hci1: command tx timeout [ 335.266446][ T6271] hsr_slave_0: left promiscuous mode [ 335.274260][ T6271] hsr_slave_1: left promiscuous mode [ 335.275281][ T6271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.280413][ T6271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.565921][ T6271] team0 (unregistering): Port device team_slave_1 removed [ 335.584342][ T7749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.697359][ T6271] team0 (unregistering): Port device team_slave_0 removed [ 336.949774][ T7800] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 336.949821][ T7800] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 336.949851][ T7800] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 338.129201][ T7807] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 338.621735][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 338.667751][ T7820] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 338.782473][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 338.783978][ T25] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 338.784022][ T25] usb 2-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 338.784047][ T25] usb 2-1: config 220 has no interface number 2 [ 338.784111][ T25] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 338.784148][ T25] usb 2-1: config 220 interface 0 has no altsetting 0 [ 338.784169][ T25] usb 2-1: config 220 interface 76 has no altsetting 0 [ 338.784190][ T25] usb 2-1: config 220 interface 1 has no altsetting 0 [ 338.888895][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.888936][ T25] usb 2-1: Product: syz [ 338.918991][ T25] usb 2-1: Manufacturer: syz [ 338.919010][ T25] usb 2-1: SerialNumber: syz [ 341.347276][ T25] usb 2-1: selecting invalid altsetting 0 [ 341.505186][ T25] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 341.510478][ T25] uvcvideo 2-1:220.0: No valid video chain found. [ 341.518373][ T25] usb 2-1: selecting invalid altsetting 0 [ 341.518399][ T25] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 341.520782][ T25] usb 2-1: USB disconnect, device number 14 [ 341.550614][ T6999] udevd[6999]: setting mode of /dev/bus/usb/002/014 to 020664 failed: No such file or directory [ 341.550772][ T6999] udevd[6999]: setting owner of /dev/bus/usb/002/014 to uid=0, gid=0 failed: No such file or directory [ 341.748173][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.748272][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.748419][ T7691] bridge_slave_0: entered allmulticast mode [ 341.760309][ T7691] bridge_slave_0: entered promiscuous mode [ 341.768675][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.768835][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.768959][ T7691] bridge_slave_1: entered allmulticast mode [ 341.788555][ T7691] bridge_slave_1: entered promiscuous mode [ 342.723793][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 342.770229][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.800283][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.015232][ T7691] team0: Port device team_slave_0 added [ 343.030211][ T7691] team0: Port device team_slave_1 added [ 343.219861][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.229759][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.326088][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.358206][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.363419][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.363448][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.681755][ T7691] hsr_slave_0: entered promiscuous mode [ 344.689409][ T7691] hsr_slave_1: entered promiscuous mode [ 344.697001][ T7691] debugfs: 'hsr0' already exists in 'hsr' [ 344.702888][ T7691] Cannot create hsr debugfs directory [ 345.939215][ T7873] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 346.269080][ T7880] loop4: detected capacity change from 0 to 1024 [ 346.321740][ T7880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.669930][ T31] audit: type=1800 audit(1786470252.421:16): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.467" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 346.958746][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 347.303653][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.192718][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 348.840539][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 354.757945][ T7950] ima: policy update failed [ 354.759354][ T31] audit: type=1802 audit(1786470260.521:17): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.480" res=0 errno=0 [ 355.144332][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 356.686379][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.686923][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.795319][ T7970] loop5: detected capacity change from 0 to 7 [ 357.005729][ T7970] Dev loop5: unable to read RDB block 7 [ 357.012601][ T7970] loop5: AHDI p1 [ 357.012718][ T7970] loop5: partition table partially beyond EOD, truncated [ 358.562616][ T93] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 358.739640][ T93] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 358.786893][ T93] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 358.795392][ T93] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.795487][ T93] usb 5-1: config 0 has no interface number 0 [ 358.795808][ T93] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.795830][ T93] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.796094][ T93] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.918673][ T7691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.049189][ T93] usb 5-1: config 0 descriptor?? [ 359.148006][ T93] ldusb 5-1:0.55: Interrupt in endpoint not found [ 359.425341][ T7691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.509253][ T7691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.533880][ T93] usb 5-1: USB disconnect, device number 10 [ 359.854846][ T7691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.871763][ T7691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 359.902205][ T7691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.923395][ T7691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 359.950477][ T7691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.049782][ T7992] random: crng reseeded on system resumption [ 361.296475][ T7691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.335774][ T7691] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.354495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.354600][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.426509][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.426628][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.475982][ T8006] ima: policy update failed [ 362.481464][ T31] audit: type=1802 audit(1786470268.241:18): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.491" res=0 errno=0 [ 362.908511][ T5614] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 367.608102][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.610219][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.005060][ T8070] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 370.279258][ T7691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.155993][ T8075] ima: policy update failed [ 371.161634][ T31] audit: type=1802 audit(1786470276.921:19): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.505" res=0 errno=0 [ 371.389657][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.391207][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.971911][ T5743] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 372.196197][ T7691] veth0_vlan: entered promiscuous mode [ 372.303934][ T5743] usb 5-1: Using ep0 maxpacket: 32 [ 372.336078][ T5743] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 372.410965][ T7691] veth1_vlan: entered promiscuous mode [ 372.437990][ T5743] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 372.438090][ T5743] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 372.438115][ T5743] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.438139][ T5743] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 372.634124][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.661423][ T5743] usb 5-1: Product: syz [ 372.661465][ T5743] usb 5-1: Manufacturer: syz [ 372.661484][ T5743] usb 5-1: SerialNumber: syz [ 373.216652][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 373.219360][ T5743] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input24 [ 373.258929][ T7691] veth0_macvtap: entered promiscuous mode [ 373.288521][ T7691] veth1_macvtap: entered promiscuous mode [ 373.329151][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.345426][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.385638][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.551823][ T5743] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 373.551949][ T5743] (id 0x00) [ 373.616037][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.601692][ T5850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.602948][ T5850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.602984][ T5850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.603015][ T5850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.631419][ T5743] rc_core: IR keymap rc-imon-pad not found [ 376.631437][ T5743] Registered IR keymap rc-empty [ 376.631547][ T5743] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 376.631563][ T5743] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 376.631879][ T5743] imon:send_packet: packet tx failed (-71) [ 376.651560][ T5743] imon 5-1:155.0: remote input dev register failed [ 376.651720][ T5743] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 376.827829][ T5743] imon 5-1:155.0: unable to initialize intf0, err 0 [ 376.838470][ T5743] imon:imon_probe: failed to initialize context! [ 376.838555][ T5743] imon 5-1:155.0: unable to register, err -19 [ 377.381288][ T8123] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 378.077851][ T5743] usb 5-1: USB disconnect, device number 11 [ 378.498644][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.498686][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.653241][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.653318][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.422630][ T8144] ima: policy update failed [ 379.427611][ T31] audit: type=1802 audit(1786470285.191:20): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.521" res=0 errno=0 [ 379.898683][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.898725][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.168940][ T5743] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 380.353495][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 380.447024][ T5743] usb 2-1: not running at top speed; connect to a high speed hub [ 380.464174][ T5743] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 380.552830][ T5743] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.571082][ T5743] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.621443][ T5743] usb 2-1: language id specifier not provided by device, defaulting to English [ 380.727508][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 380.736787][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 380.739562][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.739597][ T5743] usb 2-1: Product: syz [ 380.739674][ T5743] usb 2-1: Manufacturer: syz [ 380.752605][ T5743] usb 2-1: SerialNumber: syz [ 380.817596][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.818161][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.851318][ T10] usb 4-1: language id specifier not provided by device, defaulting to English [ 380.955776][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.965357][ T10] usb 4-1: Product: syz [ 380.965440][ T10] usb 4-1: Manufacturer: syz [ 380.965523][ T10] usb 4-1: SerialNumber: syz [ 382.850924][ T5743] usb 2-1: 0:1 : does not exist [ 383.185905][ T10] usb 4-1: 0:1 : does not exist [ 383.192270][ T5743] usb 2-1: USB disconnect, device number 15 [ 383.389434][ T10] usb 4-1: USB disconnect, device number 8 [ 383.521717][ T8172] ima: policy update failed [ 383.521857][ T31] audit: type=1802 audit(1786470289.291:21): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.526" res=0 errno=0 [ 383.678835][ T6999] udevd[6999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 383.921025][ T5743] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 384.941700][ T5743] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 385.075612][ T5743] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 385.075760][ T5743] usb 2-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 385.075778][ T5743] usb 2-1: config 220 has no interface number 2 [ 385.075847][ T5743] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 385.075901][ T5743] usb 2-1: config 220 interface 0 has no altsetting 0 [ 385.075918][ T5743] usb 2-1: config 220 interface 76 has no altsetting 0 [ 385.075934][ T5743] usb 2-1: config 220 interface 1 has no altsetting 0 [ 385.412667][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.412751][ T5743] usb 2-1: Product: syz [ 385.412765][ T5743] usb 2-1: Manufacturer: syz [ 385.412779][ T5743] usb 2-1: SerialNumber: syz [ 386.099673][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.123872][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.133810][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.149763][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.163222][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.312171][ T5743] usb 2-1: can't set config #220, error -71 [ 386.327827][ T5743] usb 2-1: USB disconnect, device number 16 [ 387.268187][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.279445][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.675098][ T8224] ima: policy update failed [ 387.675238][ T31] audit: type=1802 audit(1786470293.441:22): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.536" res=0 errno=0 [ 387.681832][ T745] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.014488][ T745] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.474072][ T5622] Bluetooth: hci5: command tx timeout [ 389.443483][ T745] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.485258][ T5743] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 389.654122][ T5743] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 389.664911][ T5743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.664966][ T5743] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.665051][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.668435][ T5743] usb 5-1: config 0 descriptor?? [ 389.724504][ T745] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.273642][ T5743] usbhid 5-1:0.0: can't add hid device: -71 [ 390.273798][ T5743] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 390.292060][ T5743] usb 5-1: USB disconnect, device number 12 [ 390.491455][ T5622] Bluetooth: hci5: command tx timeout [ 390.573845][ T745] bridge_slave_1: left allmulticast mode [ 390.573889][ T745] bridge_slave_1: left promiscuous mode [ 390.574103][ T745] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.608936][ T745] bridge_slave_0: left allmulticast mode [ 390.608980][ T745] bridge_slave_0: left promiscuous mode [ 390.610097][ T745] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.984374][ T8269] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 390.984494][ T8269] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 391.071017][ T8270] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 392.437392][ T8283] ima: policy update failed [ 392.445540][ T31] audit: type=1802 audit(1786470298.211:23): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.546" res=0 errno=0 [ 392.573146][ T5622] Bluetooth: hci5: command tx timeout [ 392.672373][ T745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.911635][ T745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.001105][ T745] bond0 (unregistering): Released all slaves [ 394.665829][ T5622] Bluetooth: hci5: command tx timeout [ 397.646041][ T8337] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 397.655315][ T8337] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 397.726233][ T8337] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 398.930051][ T8352] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 399.014757][ T745] hsr_slave_0: left promiscuous mode [ 399.022320][ T745] hsr_slave_1: left promiscuous mode [ 399.023471][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.023492][ T745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.039021][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.039049][ T745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.500299][ T745] veth1_macvtap: left promiscuous mode [ 399.500390][ T745] veth0_macvtap: left promiscuous mode [ 399.500484][ T745] veth1_vlan: left promiscuous mode [ 399.500572][ T745] veth0_vlan: left promiscuous mode [ 399.629855][ T8365] overlayfs: failed to resolve './file0': -2 [ 402.186319][ T745] team0 (unregistering): Port device team_slave_1 removed [ 402.236451][ T745] team0 (unregistering): Port device team_slave_0 removed [ 402.898456][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.906465][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.915201][ T8191] bridge_slave_0: entered allmulticast mode [ 402.955244][ T8191] bridge_slave_0: entered promiscuous mode [ 402.987238][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.987343][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.987496][ T8191] bridge_slave_1: entered allmulticast mode [ 403.005018][ T8191] bridge_slave_1: entered promiscuous mode [ 403.250942][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.283181][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.506467][ T8191] team0: Port device team_slave_0 added [ 403.524486][ T8191] team0: Port device team_slave_1 added [ 404.015629][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.015664][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.015708][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.109934][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.109978][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.110001][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.470518][ T8191] hsr_slave_0: entered promiscuous mode [ 404.484412][ T8403] ima: policy update failed [ 404.484987][ T31] audit: type=1802 audit(1786470310.251:24): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.570" res=0 errno=0 [ 404.486262][ T8191] hsr_slave_1: entered promiscuous mode [ 404.486958][ T8191] debugfs: 'hsr0' already exists in 'hsr' [ 404.486975][ T8191] Cannot create hsr debugfs directory [ 404.807706][ T8412] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 404.830158][ T1217] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 405.027941][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 405.075809][ T1217] usb 5-1: Using ep0 maxpacket: 32 [ 405.081884][ T1217] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 405.095369][ T1217] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 405.095473][ T1217] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 405.095517][ T1217] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.095590][ T1217] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 405.149230][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.149259][ T1217] usb 5-1: Product: syz [ 405.149283][ T1217] usb 5-1: Manufacturer: syz [ 405.149300][ T1217] usb 5-1: SerialNumber: syz [ 405.374447][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 405.619071][ T1217] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input26 [ 405.821456][ T5713] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 406.264468][ T1217] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 406.264537][ T1217] (id 0x00) [ 406.284732][ T5713] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 406.297162][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.297197][ T5713] usb 2-1: Product: syz [ 406.297215][ T5713] usb 2-1: Manufacturer: syz [ 406.297236][ T5713] usb 2-1: SerialNumber: syz [ 406.441497][ T1217] rc_core: IR keymap rc-imon-pad not found [ 406.441531][ T1217] Registered IR keymap rc-empty [ 406.441677][ T1217] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 406.441699][ T1217] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 406.462743][ T1217] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 406.465324][ T1217] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input27 [ 406.471019][ T1217] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:13> initialized [ 406.863615][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 406.888055][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 409.848634][ T1217] usb 5-1: USB disconnect, device number 13 [ 410.254916][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 410.255007][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 410.364660][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 410.574405][ T5713] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 410.599547][ T5713] usb 2-1: USB disconnect, device number 17 [ 411.493894][ T8449] overlayfs: failed to resolve './file0': -2 [ 411.978660][ T8464] overlayfs: missing 'lowerdir' [ 412.073223][ T8465] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 412.520941][ T8466] overlayfs: missing 'lowerdir' [ 412.594513][ T8467] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 416.435714][ T31] audit: type=1800 audit(1786470322.191:25): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.590" name="file0" dev="overlay" ino=730 res=0 errno=0 [ 417.057246][ T8191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 417.160560][ T8191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.195525][ T8191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 417.515431][ T8191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.607665][ T8191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.297495][ T8191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.317635][ T8191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 418.362235][ T8191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.337800][ T8524] loop0: detected capacity change from 0 to 1024 [ 420.990274][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.250147][ T8524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.575234][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.592871][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.592989][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.635143][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.635268][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.008207][ T31] audit: type=1800 audit(1786470327.771:26): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.595" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 422.569921][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.649216][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.649886][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.377627][ T8599] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 427.377685][ T8599] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 427.377719][ T8599] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 427.428804][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.987856][ T31] audit: type=1800 audit(1786470333.741:27): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.607" name="file0" dev="overlay" ino=760 res=0 errno=0 [ 428.608005][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 428.882004][ T8613] loop0: detected capacity change from 0 to 1024 [ 428.964342][ T8613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.392318][ T31] audit: type=1800 audit(1786470335.151:28): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.609" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 430.054017][ T8191] veth0_vlan: entered promiscuous mode [ 430.088372][ T8191] veth1_vlan: entered promiscuous mode [ 430.104236][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.282272][ T8633] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 430.508822][ T8191] veth0_macvtap: entered promiscuous mode [ 430.539539][ T8191] veth1_macvtap: entered promiscuous mode [ 430.593440][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.593956][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.629988][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.671080][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.792941][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 430.825845][ T89] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.826207][ T89] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.826465][ T89] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.826497][ T89] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.077241][ T25] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.080275][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.080322][ T25] usb 2-1: config 0 has no interfaces? [ 431.080355][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.136801][ T25] usb 2-1: config 0 descriptor?? [ 431.987707][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.987793][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.107008][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.107046][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.320881][ T5712] usb 2-1: USB disconnect, device number 18 [ 433.478771][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 433.490244][ T8657] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 433.579037][ T8663] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 433.579091][ T8663] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 433.579120][ T8663] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 433.693899][ T25] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 433.876722][ T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 433.952685][ T25] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 433.952746][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.977490][ T25] usb 6-1: config 0 has no interface number 0 [ 433.979364][ T25] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 433.979407][ T25] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.983968][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.123506][ T25] usb 6-1: config 0 descriptor?? [ 434.205950][ T25] ldusb 6-1:0.55: Interrupt in endpoint not found [ 434.640569][ T25] usb 6-1: USB disconnect, device number 2 [ 435.202038][ T5830] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 435.351495][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 435.353844][ T5830] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 435.357855][ T5830] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 435.358067][ T5830] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 435.358142][ T5830] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.358227][ T5830] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 435.370176][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.370371][ T5830] usb 2-1: Product: syz [ 435.370598][ T5830] usb 2-1: Manufacturer: syz [ 435.370640][ T5830] usb 2-1: SerialNumber: syz [ 435.688552][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 435.769749][ T5830] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input28 [ 436.046758][ T8680] loop5: detected capacity change from 0 to 1024 [ 436.281445][ T5830] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 436.291052][ T5830] (id 0x00) [ 436.346366][ T8688] comedi comedi3: pcl818: I/O base address or length out of range [ 436.727635][ T5830] rc_core: IR keymap rc-imon-pad not found [ 436.727719][ T5830] Registered IR keymap rc-empty [ 436.798794][ T5830] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 436.810094][ T5830] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 436.856876][ T5830] imon:send_packet: packet tx failed (-71) [ 436.899165][ T5830] imon 2-1:155.0: remote input dev register failed [ 436.907205][ T5830] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 437.021579][ T8680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.239068][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.264563][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.381581][ T8695] overlay: ./file0 is not a directory [ 437.987046][ T5830] imon 2-1:155.0: unable to initialize intf0, err 0 [ 437.987088][ T5830] imon:imon_probe: failed to initialize context! [ 437.987119][ T5830] imon 2-1:155.0: unable to register, err -19 [ 437.991281][ T5830] usb 2-1: USB disconnect, device number 19 [ 438.744179][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 439.045331][ T93] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 439.288518][ T93] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 439.307473][ T93] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 439.307547][ T93] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.307640][ T93] usb 4-1: config 0 has no interface number 0 [ 439.307822][ T93] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 439.307914][ T93] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.308096][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.429708][ T93] usb 4-1: config 0 descriptor?? [ 439.516860][ T93] ldusb 4-1:0.55: Interrupt in endpoint not found [ 440.105343][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.113859][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.126281][ T93] usb 4-1: USB disconnect, device number 9 [ 445.530772][ T8191] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.895466][ T5712] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 446.581629][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 446.591436][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 446.655353][ T5712] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 446.686394][ T5712] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 446.686442][ T5712] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 446.686468][ T5712] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.686492][ T5712] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 446.818927][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.818990][ T5712] usb 2-1: Product: syz [ 446.819017][ T5712] usb 2-1: Manufacturer: syz [ 446.819034][ T5712] usb 2-1: SerialNumber: syz [ 446.856533][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 446.867219][ T5712] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input30 [ 446.893422][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 446.906145][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 446.906247][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.940798][ T9] usb 5-1: config 0 descriptor?? [ 446.946824][ T8737] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 447.051220][ T8747] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 447.079487][ T8747] binder: 8741:8747 ioctl c0306201 0 returned -14 [ 447.162087][ T5712] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 447.172122][ T5712] (id 0x00) [ 448.038687][ T8732] comedi comedi3: pcl818: I/O base address or length out of range [ 448.153292][ T5712] rc_core: IR keymap rc-imon-pad not found [ 448.153324][ T5712] Registered IR keymap rc-empty [ 448.153456][ T5712] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 448.153475][ T5712] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 448.154007][ T5712] imon:send_packet: packet tx failed (-71) [ 448.181507][ T5712] imon 2-1:155.0: remote input dev register failed [ 448.181719][ T5712] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 448.208124][ T9] hid_parser_main: 453 callbacks suppressed [ 448.208179][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208212][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208263][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208293][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208319][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208352][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208402][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208428][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208453][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.208478][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 448.258263][ T9] asus 0003:0B05:1ABE.0002: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 448.309545][ T5712] imon 2-1:155.0: unable to initialize intf0, err 0 [ 448.309578][ T5712] imon:imon_probe: failed to initialize context! [ 448.325520][ T5712] imon 2-1:155.0: unable to register, err -19 [ 448.359593][ T5712] usb 2-1: USB disconnect, device number 20 [ 448.441004][ T8756] loop0: detected capacity change from 0 to 1024 [ 448.519753][ T8756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.065976][ T30] usb 5-1: USB disconnect, device number 14 [ 450.555698][ T30] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 450.736539][ T30] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 450.740358][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.744279][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.745687][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.831554][ T30] usb 2-1: config 0 descriptor?? [ 452.760871][ T30] usbhid 2-1:0.0: can't add hid device: -71 [ 452.780775][ T30] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 452.899086][ T30] usb 2-1: USB disconnect, device number 21 [ 453.249907][ T8783] loop3: detected capacity change from 0 to 1024 [ 453.345041][ T8783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.520885][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.819541][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 454.819673][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.819704][ T5622] Tainted: [L]=SOFTLOCKUP [ 454.819711][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.819724][ T5622] Workqueue: hci3 hci_rx_work [ 454.819776][ T5622] Call Trace: [ 454.819785][ T5622] [ 454.819797][ T5622] dump_stack_lvl+0xe8/0x150 [ 454.819829][ T5622] sysfs_create_dir_ns+0x271/0x2a0 [ 454.819855][ T5622] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 454.819881][ T5622] ? do_raw_spin_unlock+0xf5/0x200 [ 454.819913][ T5622] kobject_add_internal+0x622/0xcd0 [ 454.819941][ T5622] kobject_add+0x163/0x240 [ 454.819967][ T5622] ? __pfx_kobject_add+0x10/0x10 [ 454.819994][ T5622] ? get_device_parent+0x366/0x3a0 [ 454.820020][ T5622] device_add+0x3fa/0xb80 [ 454.820042][ T5622] hci_conn_add_sysfs+0xd5/0x210 [ 454.820073][ T5622] le_conn_complete_evt+0xfb7/0x1690 [ 454.820101][ T5622] ? le_conn_complete_evt+0x190/0x1690 [ 454.820125][ T5622] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 454.820148][ T5622] ? __mutex_unlock_slowpath+0x731/0x900 [ 454.820182][ T5622] ? skb_pull_data+0xf0/0x200 [ 454.820211][ T5622] hci_le_conn_complete_evt+0x187/0x470 [ 454.820239][ T5622] hci_event_packet+0x67a/0xf10 [ 454.820265][ T5622] ? irqentry_exit+0x218/0x910 [ 454.820299][ T5622] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 454.820329][ T5622] ? __pfx_hci_event_packet+0x10/0x10 [ 454.820360][ T5622] ? hci_send_to_monitor+0x61/0x590 [ 454.820381][ T5622] ? hci_rx_work+0xc0/0x1020 [ 454.820414][ T5622] ? kasan_check_range+0x97/0x2c0 [ 454.820451][ T5622] hci_rx_work+0x3ee/0x1020 [ 454.820486][ T5622] ? process_scheduled_works+0x97e/0x1630 [ 454.820514][ T5622] process_scheduled_works+0xc4e/0x1630 [ 454.820569][ T5622] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.820600][ T5622] ? assign_work+0x3cf/0x5d0 [ 454.820630][ T5622] worker_thread+0xa47/0xfb0 [ 454.820682][ T5622] kthread+0x388/0x470 [ 454.820701][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 454.820724][ T5622] ? __pfx_kthread+0x10/0x10 [ 454.820744][ T5622] ret_from_fork+0x514/0xb70 [ 454.820778][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 454.820807][ T5622] ? __switch_to+0xc89/0x1420 [ 454.820836][ T5622] ? __pfx_kthread+0x10/0x10 [ 454.820856][ T5622] ret_from_fork_asm+0x1a/0x30 [ 454.820901][ T5622] [ 454.820968][ T5622] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 454.821005][ T5622] Bluetooth: hci3: failed to register connection device [ 455.428876][ T8808] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 455.442244][ T8808] binder: 8806:8808 ioctl c0306201 0 returned -14 [ 456.238422][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.481928][ T8811] syz.4.659 uses obsolete (PF_INET,SOCK_PACKET) [ 456.893503][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 457.749434][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.749748][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.891482][ T30] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 458.042121][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 458.042924][ T30] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 458.043976][ T30] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 458.044032][ T30] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 458.044056][ T30] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.044081][ T30] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 458.061136][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.061161][ T30] usb 2-1: Product: syz [ 458.061175][ T30] usb 2-1: Manufacturer: syz [ 458.061196][ T30] usb 2-1: SerialNumber: syz [ 458.088704][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 458.093109][ T5712] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 458.139273][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input32 [ 458.313176][ T30] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 458.313218][ T30] (id 0x00) [ 458.326340][ T5712] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 458.338090][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.349641][ T5712] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.362677][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.380647][ T5712] usb 5-1: config 0 descriptor?? [ 458.493955][ T30] rc_core: IR keymap rc-imon-pad not found [ 458.493993][ T30] Registered IR keymap rc-empty [ 458.494100][ T30] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 458.494118][ T30] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 458.971550][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 459.170294][ T5713] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 459.342439][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 459.737056][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input33 [ 460.649264][ T30] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:22> initialized [ 460.802829][ T5713] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 460.808089][ T5713] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 460.808121][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.808140][ T5713] usb 6-1: config 0 has no interface number 0 [ 460.808174][ T5713] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.808194][ T5713] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.808233][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.840291][ T5713] usb 6-1: config 0 descriptor?? [ 460.873516][ T5713] ldusb 6-1:0.55: Interrupt in endpoint not found [ 460.990641][ T5712] usbhid 5-1:0.0: can't add hid device: -71 [ 460.990764][ T5712] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 460.991808][ T5713] usb 2-1: USB disconnect, device number 22 [ 461.027263][ T5712] usb 5-1: USB disconnect, device number 15 [ 461.074118][ T8836] imon:display_open: could not find interface for minor 0 [ 461.112603][ T30] usb 6-1: USB disconnect, device number 3 [ 462.892466][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 462.892512][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.892543][ T5622] Tainted: [L]=SOFTLOCKUP [ 462.892551][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.892564][ T5622] Workqueue: hci3 hci_rx_work [ 462.892598][ T5622] Call Trace: [ 462.892606][ T5622] [ 462.892615][ T5622] dump_stack_lvl+0xe8/0x150 [ 462.892649][ T5622] sysfs_create_dir_ns+0x271/0x2a0 [ 462.892732][ T5622] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 462.892761][ T5622] ? do_raw_spin_unlock+0xf5/0x200 [ 462.892796][ T5622] kobject_add_internal+0x622/0xcd0 [ 462.892827][ T5622] kobject_add+0x163/0x240 [ 462.892853][ T5622] ? __pfx_kobject_add+0x10/0x10 [ 462.892881][ T5622] ? get_device_parent+0x366/0x3a0 [ 462.892908][ T5622] device_add+0x3fa/0xb80 [ 462.892932][ T5622] hci_conn_add_sysfs+0xd5/0x210 [ 462.892965][ T5622] le_conn_complete_evt+0xfb7/0x1690 [ 462.892994][ T5622] ? le_conn_complete_evt+0x190/0x1690 [ 462.893019][ T5622] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 462.893044][ T5622] ? __mutex_unlock_slowpath+0x731/0x900 [ 462.893080][ T5622] ? skb_pull_data+0xf0/0x200 [ 462.893110][ T5622] hci_le_conn_complete_evt+0x187/0x470 [ 462.893145][ T5622] hci_event_packet+0x67a/0xf10 [ 462.893182][ T5622] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 462.893214][ T5622] ? __pfx_hci_event_packet+0x10/0x10 [ 462.893251][ T5622] ? audit_update_watch+0x2a0/0xee0 [ 462.893280][ T5622] ? hci_send_to_monitor+0xe2/0x590 [ 462.893308][ T5622] hci_rx_work+0x3ee/0x1020 [ 462.893345][ T5622] ? process_scheduled_works+0x97e/0x1630 [ 462.893373][ T5622] process_scheduled_works+0xc4e/0x1630 [ 462.893431][ T5622] ? __pfx_process_scheduled_works+0x10/0x10 [ 462.893465][ T5622] ? assign_work+0x3cf/0x5d0 [ 462.893501][ T5622] worker_thread+0xa47/0xfb0 [ 462.893555][ T5622] kthread+0x388/0x470 [ 462.893576][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 462.893601][ T5622] ? __pfx_kthread+0x10/0x10 [ 462.893623][ T5622] ret_from_fork+0x514/0xb70 [ 462.893657][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 462.893697][ T5622] ? __switch_to+0xc89/0x1420 [ 462.893728][ T5622] ? __pfx_kthread+0x10/0x10 [ 462.893750][ T5622] ret_from_fork_asm+0x1a/0x30 [ 462.893798][ T5622] [ 462.894638][ T5622] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 462.894693][ T5622] Bluetooth: hci3: failed to register connection device [ 462.996840][ T8851] loop1: detected capacity change from 0 to 1024 [ 463.118037][ T8858] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 463.205020][ T8858] binder: 8853:8858 ioctl c0306201 0 returned -14 [ 463.892031][ T8851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.971529][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 467.301899][ C0] [ 467.304244][ C0] ================================ [ 467.309362][ C0] WARNING: inconsistent lock state [ 467.314476][ C0] syzkaller #0 Tainted: G L [ 467.320428][ C0] -------------------------------- [ 467.325510][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 467.332404][ C0] syz.4.676/8882 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 467.338630][ C0] ffff88806862c260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 467.348014][ C0] {SOFTIRQ-ON-W} state was registered at: [ 467.353711][ C0] lock_acquire+0x115/0x350 [ 467.358285][ C0] lock_sock_nested+0x41/0x100 [ 467.363115][ C0] x25_bind+0x209/0x450 [ 467.367346][ C0] __sys_bind+0x2e3/0x410 [ 467.371832][ C0] __x64_sys_bind+0x7a/0x90 [ 467.376420][ C0] do_syscall_64+0x166/0x510 [ 467.381081][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.387036][ C0] irq event stamp: 1948 [ 467.391163][ C0] hardirqs last enabled at (1948): [] __local_bh_enable_ip+0xd0/0x130 [ 467.401012][ C0] hardirqs last disabled at (1947): [] __local_bh_enable_ip+0x71/0x130 [ 467.410816][ C0] softirqs last enabled at (1778): [] __irq_exit_rcu+0xca/0x220 [ 467.420116][ C0] softirqs last disabled at (1781): [] __irq_exit_rcu+0xca/0x220 [ 467.429395][ C0] [ 467.429395][ C0] other info that might help us debug this: [ 467.437435][ C0] Possible unsafe locking scenario: [ 467.437435][ C0] [ 467.444866][ C0] CPU0 [ 467.448234][ C0] ---- [ 467.451491][ C0] lock(sk_lock-AF_X25); [ 467.455889][ C0] [ 467.459318][ C0] lock(sk_lock-AF_X25); [ 467.463817][ C0] [ 467.463817][ C0] *** DEADLOCK *** [ 467.463817][ C0] [ 467.471937][ C0] locks held by syz.4.676/8882: 5, last CPU#0: [ 467.478068][ C0] #0: ffff88802bfbb6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 467.487137][ C0] #1: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 467.496706][ C0] #2: ffff888026d33cd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 467.507147][ C0] #3: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x500 [ 467.517495][ C0] #4: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 467.527689][ C0] [ 467.527689][ C0] stack backtrace: [ 467.533595][ C0] CPU: 0 UID: 0 PID: 8882 Comm: syz.4.676 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.544344][ C0] Tainted: [L]=SOFTLOCKUP [ 467.548678][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.559176][ C0] Call Trace: [ 467.562454][ C0] [ 467.565291][ C0] dump_stack_lvl+0xe8/0x150 [ 467.569892][ C0] print_usage_bug+0x28b/0x2e0 [ 467.574656][ C0] valid_state+0xbe/0xf0 [ 467.578890][ C0] mark_lock_irq+0x36/0x380 [ 467.583466][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.589532][ C0] mark_lock+0x117/0x190 [ 467.593861][ C0] __lock_acquire+0x6b7/0x2e50 [ 467.598639][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 467.603960][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 467.608978][ C0] ? lock_acquire+0x115/0x350 [ 467.613638][ C0] lock_acquire+0x115/0x350 [ 467.618126][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 467.623226][ C0] ? x25_kill_by_neigh+0x103/0x250 [ 467.628318][ C0] lock_sock_nested+0x41/0x100 [ 467.633065][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 467.638181][ C0] x25_kill_by_neigh+0x10d/0x250 [ 467.643101][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 467.648458][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 467.653901][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 467.659349][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 467.665233][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 467.670595][ C0] lapbeth_napi_poll+0x42/0x90 [ 467.675347][ C0] __napi_poll+0xaa/0x330 [ 467.679682][ C0] net_rx_action+0x61d/0xf50 [ 467.684263][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 467.689377][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 467.695516][ C0] handle_softirqs+0x225/0x840 [ 467.700267][ C0] ? __irq_exit_rcu+0xca/0x220 [ 467.705110][ C0] __irq_exit_rcu+0xca/0x220 [ 467.709686][ C0] irq_exit_rcu+0x9/0x30 [ 467.713904][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 467.719523][ C0] [ 467.722613][ C0] [ 467.725524][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.731479][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 467.737180][ C0] Code: 1b 00 00 b8 ff ff ff ff 65 0f c1 05 6c 7e 96 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 467.756863][ C0] RSP: 0018:ffffc900049af2e0 EFLAGS: 00000206 [ 467.763013][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080000001 [ 467.771053][ C0] RDX: 0000000000000000 RSI: ffffffff8e4dae69 RDI: ffffffff8c4c8980 [ 467.779004][ C0] RBP: 00000000ffffffff R08: d600000000000000 R09: 0000000000000000 [ 467.787049][ C0] R10: 0000000000000000 R11: ffffffff8eb5c820 R12: 0000000000000246 [ 467.795128][ C0] R13: ffff888032958000 R14: ffffffff8eb5c820 R15: 0000000000000001 [ 467.803097][ C0] page_ext_lookup+0xe7/0x180 [ 467.807883][ C0] ? page_table_check_clear+0x124/0x500 [ 467.813519][ C0] page_table_check_clear+0x212/0x500 [ 467.818887][ C0] ? vm_normal_page+0x13c/0x2b0 [ 467.823743][ C0] __zap_vma_range+0x3a12/0x4f80 [ 467.828693][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 467.833975][ C0] ? mas_find+0x6d6/0xcb0 [ 467.838299][ C0] unmap_vmas+0x390/0x550 [ 467.842614][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 467.847455][ C0] ? mas_next_slot+0xc91/0xd70 [ 467.852221][ C0] exit_mmap+0x293/0x9f0 [ 467.856456][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 467.861209][ C0] ? __pfx_exit_aio+0x10/0x10 [ 467.865876][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 467.871072][ C0] __mmput+0x118/0x420 [ 467.875217][ C0] exit_mm+0x221/0x2d0 [ 467.879333][ C0] do_exit+0x6cd/0x2360 [ 467.883473][ C0] ? __pfx_do_exit+0x10/0x10 [ 467.888048][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 467.893053][ C0] do_group_exit+0x22d/0x2f0 [ 467.897624][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.902805][ C0] get_signal+0x121b/0x12c0 [ 467.907323][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 467.912928][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 467.919092][ C0] ? exc_page_fault+0x6a/0xc0 [ 467.923780][ C0] exit_to_user_mode_loop+0x104/0x750 [ 467.929132][ C0] ? rcu_is_watching+0x15/0xb0 [ 467.933897][ C0] do_syscall_64+0x328/0x510 [ 467.938503][ C0] ? trace_irq_disable+0x3b/0x140 [ 467.943534][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.949601][ C0] ? clear_bhb_loop+0x70/0xc0 [ 467.954264][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.960145][ C0] RIP: 0033:0x7f71a119e0d9 [ 467.964581][ C0] Code: Unable to access opcode bytes at 0x7f71a119e0af. [ 467.971589][ C0] RSP: 002b:00007f71a20610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 467.980006][ C0] RAX: fffffffffffffe00 RBX: 00007f71a1426098 RCX: 00007f71a119e0d9 [ 467.988144][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f71a1426098 [ 467.996124][ C0] RBP: 00007f71a1426090 R08: 0000000000000000 R09: 0000000000000000 [ 468.004087][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.012686][ C0] R13: 00007f71a1426128 R14: 00007ffc0fb18160 R15: 00007ffc0fb18248 [ 468.020751][ C0] [ 468.023826][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 468.023840][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8882, name: syz.4.676 [ 468.023850][ C0] preempt_count: 101, expected: 0 [ 468.023857][ C0] RCU nest depth: 3, expected: 0 [ 468.023864][ C0] INFO: lockdep is turned off. [ 468.023869][ C0] Preemption disabled at: [ 468.023873][ C0] [<0000000000000000>] 0x0 [ 468.023894][ C0] CPU: 0 UID: 0 PID: 8882 Comm: syz.4.676 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.023908][ C0] Tainted: [L]=SOFTLOCKUP [ 468.023912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.023919][ C0] Call Trace: [ 468.023925][ C0] [ 468.023929][ C0] dump_stack_lvl+0xe8/0x150 [ 468.023946][ C0] __might_resched+0x378/0x4d0 [ 468.023962][ C0] lock_sock_nested+0x56/0x100 [ 468.023977][ C0] x25_kill_by_neigh+0x10d/0x250 [ 468.023989][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 468.024001][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 468.024014][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 468.024026][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 468.024037][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 468.024051][ C0] lapbeth_napi_poll+0x42/0x90 [ 468.024064][ C0] __napi_poll+0xaa/0x330 [ 468.024078][ C0] net_rx_action+0x61d/0xf50 [ 468.024095][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 468.024110][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 468.024127][ C0] handle_softirqs+0x225/0x840 [ 468.024141][ C0] ? __irq_exit_rcu+0xca/0x220 [ 468.024154][ C0] __irq_exit_rcu+0xca/0x220 [ 468.024166][ C0] irq_exit_rcu+0x9/0x30 [ 468.024178][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 468.024193][ C0] [ 468.024196][ C0] [ 468.024200][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 468.024212][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 468.024228][ C0] Code: 1b 00 00 b8 ff ff ff ff 65 0f c1 05 6c 7e 96 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 468.024237][ C0] RSP: 0018:ffffc900049af2e0 EFLAGS: 00000206 [ 468.024246][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080000001 [ 468.024253][ C0] RDX: 0000000000000000 RSI: ffffffff8e4dae69 RDI: ffffffff8c4c8980 [ 468.024260][ C0] RBP: 00000000ffffffff R08: d600000000000000 R09: 0000000000000000 [ 468.024267][ C0] R10: 0000000000000000 R11: ffffffff8eb5c820 R12: 0000000000000246 [ 468.024274][ C0] R13: ffff888032958000 R14: ffffffff8eb5c820 R15: 0000000000000001 [ 468.024286][ C0] page_ext_lookup+0xe7/0x180 [ 468.024300][ C0] ? page_table_check_clear+0x124/0x500 [ 468.024313][ C0] page_table_check_clear+0x212/0x500 [ 468.024325][ C0] ? vm_normal_page+0x13c/0x2b0 [ 468.024338][ C0] __zap_vma_range+0x3a12/0x4f80 [ 468.024383][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 468.024397][ C0] ? mas_find+0x6d6/0xcb0 [ 468.024412][ C0] unmap_vmas+0x390/0x550 [ 468.024426][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 468.024436][ C0] ? mas_next_slot+0xc91/0xd70 [ 468.024455][ C0] exit_mmap+0x293/0x9f0 [ 468.024464][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 468.024478][ C0] ? __pfx_exit_aio+0x10/0x10 [ 468.024491][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 468.024507][ C0] __mmput+0x118/0x420 [ 468.024519][ C0] exit_mm+0x221/0x2d0 [ 468.024528][ C0] do_exit+0x6cd/0x2360 [ 468.024538][ C0] ? __pfx_do_exit+0x10/0x10 [ 468.024548][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 468.024563][ C0] do_group_exit+0x22d/0x2f0 [ 468.024572][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.024585][ C0] get_signal+0x121b/0x12c0 [ 468.024602][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 468.024618][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.024633][ C0] ? exc_page_fault+0x6a/0xc0 [ 468.024648][ C0] exit_to_user_mode_loop+0x104/0x750 [ 468.024657][ C0] ? rcu_is_watching+0x15/0xb0 [ 468.024669][ C0] do_syscall_64+0x328/0x510 [ 468.024684][ C0] ? trace_irq_disable+0x3b/0x140 [ 468.024693][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.024703][ C0] ? clear_bhb_loop+0x70/0xc0 [ 468.024714][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.024724][ C0] RIP: 0033:0x7f71a119e0d9 [ 468.024732][ C0] Code: Unable to access opcode bytes at 0x7f71a119e0af. [ 468.024737][ C0] RSP: 002b:00007f71a20610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 468.024747][ C0] RAX: fffffffffffffe00 RBX: 00007f71a1426098 RCX: 00007f71a119e0d9 [ 468.024755][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f71a1426098 [ 468.024761][ C0] RBP: 00007f71a1426090 R08: 0000000000000000 R09: 0000000000000000 [ 468.024767][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.024773][ C0] R13: 00007f71a1426128 R14: 00007ffc0fb18160 R15: 00007ffc0fb18248 [ 468.024784][ C0] [ 468.025349][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 468.633214][ T8886] loop0: detected capacity change from 0 to 1024 [ 468.713071][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.767241][ T8886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.391659][ T31] audit: type=1800 audit(1786470375.151:29): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.678" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 469.677401][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.901662][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 470.053235][ T10] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 470.054472][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.054502][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.054538][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.059842][ T10] usb 2-1: config 0 descriptor?? [ 470.506926][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 470.507047][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 470.510296][ T10] usb 2-1: USB disconnect, device number 23