last executing test programs: 12m20.223229871s ago: executing program 32 (id=45): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) socket$inet(0x2, 0x2, 0x1) socket$inet6(0xa, 0x3, 0xff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000177000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES32=r0], 0x0) 10m18.153601026s ago: executing program 33 (id=313): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = memfd_secret(0x80000) ioctl$int_out(r3, 0x5460, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 8m47.13961263s ago: executing program 6 (id=547): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000340)='[', 0x1}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x23, 0x200000b, r2}}], 0x20, 0x404a055}, 0x0) 8m46.870964179s ago: executing program 6 (id=548): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r0]) 8m43.449846938s ago: executing program 6 (id=562): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040845}, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x82) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000063, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) 8m42.285640254s ago: executing program 6 (id=564): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m41.659585715s ago: executing program 6 (id=569): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000000100)=0x43, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000010", 0x5}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 8m40.627438398s ago: executing program 6 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x8000, 0x1, 0x59455247, 0x8, 0xc, [{0x6fc0, 0xd9}, {0x8, 0x3}, {0xe, 0x3ff}, {0x8}, {0x1, 0x8147}, {0x6, 0xd}, {0x80000001, 0xfffffff8}, {0x145, 0xf9}], 0x4, 0x3, 0x2, 0x1, 0x2}}) 8m24.56263902s ago: executing program 34 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x8000, 0x1, 0x59455247, 0x8, 0xc, [{0x6fc0, 0xd9}, {0x8, 0x3}, {0xe, 0x3ff}, {0x8}, {0x1, 0x8147}, {0x6, 0xd}, {0x80000001, 0xfffffff8}, {0x145, 0xf9}], 0x4, 0x3, 0x2, 0x1, 0x2}}) 6m26.904439635s ago: executing program 1 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000e280), 0x58a, 0x42, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x9, 0xe, 0x8000, 0x0, 0x4, 0x3, 0xc, 0x1f}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6m25.355739964s ago: executing program 1 (id=928): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m24.353753976s ago: executing program 1 (id=935): request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3\x9f*sgrVen:De', 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x149102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb7ca369a926ac3a0}, 0x40040) r1 = socket$inet6(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001340)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) r2 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m20.591795326s ago: executing program 1 (id=942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x4, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x3, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 6m18.5813569s ago: executing program 1 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x402, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000000, 0x13, r4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m16.436491029s ago: executing program 1 (id=950): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4685, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x15, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000041, &(0x7f0000b63fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000000)={0x7, 0x0, 0x3}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x2, 0x2, 0x4d55ba80e15bd3de, 0xffff, 0x8}, 0x20) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}}, 0x4000000) 6m9.244602028s ago: executing program 5 (id=966): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x400d0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 6m6.576859743s ago: executing program 7 (id=971): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', 0x0, 0x0) r3 = socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000"], 0x1c}], 0x1}, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe00, 0x0) ioctl$SNDCTL_SYNTH_ID(r8, 0xc08c5114, &(0x7f0000000100)={"489189309bdd73a0587ec99088cd1e57dd3e72e600ffffffffffffffff00", 0x3, 0x1, 0x1, 0x9fdd, 0x4, 0x2, 0x3ff, 0x1, [0x3fe, 0xf3f1, 0xe, 0x9, 0xa4a5e6da, 0x6, 0x200, 0x3, 0x9, 0x4, 0x1, 0x664, 0x200, 0xfffffffa, 0xd264, 0xffff, 0x40, 0x3, 0x5]}) 6m5.396395251s ago: executing program 7 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_vm_readv(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/209, 0xd1}], 0x3, &(0x7f0000000040)=[{0xffffffffffffffff}], 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "c71858483faeb31832392e3ae432d3e126d25e0a8733af7304992c5ef3b1ce4893fb839daec74114da7f092a616be0a7a27b3f3d90b1f3706d3f8d1eb8b3978e", 0x39}, 0x48, 0xfffffffffffffffb) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r5 = syz_socket_connect_nvme_tcp() close(r5) io_uring_setup(0x3fbf, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 6m5.310805324s ago: executing program 5 (id=974): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="54b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}], 0x1, 0x20000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m4.057898183s ago: executing program 7 (id=975): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x7, 0xa, 0x4, 0xffffffff, 0x7f, 0x8001, 0xfffff000, 0x3}, 0x20) r2 = dup(r0) write$binfmt_elf64(r2, &(0x7f0000000a40)=ANY=[], 0x1279) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000780), 0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fb, 0x8001, 0xffff1896, 0xe3, 0x24, 0xffffffb7, 0x1a}, 0x9c) 6m3.699562515s ago: executing program 5 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000e280), 0x58a, 0x42, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x9, 0xe, 0x8000, 0x0, 0x4, 0x3, 0xc, 0x1f}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6m2.953682849s ago: executing program 7 (id=978): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040845}, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x82) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfc) socket$kcm(0x2, 0x200000000000001, 0x106) set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000063, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) 6m1.535560354s ago: executing program 5 (id=980): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000100)={0x0, 0x70, 0x180000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210020000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$vim2m(0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) write(r2, &(0x7f0000000300), 0x0) close(0xffffffffffffffff) tee(r1, 0xffffffffffffffff, 0x3ff, 0xe) write$binfmt_script(0xffffffffffffffff, 0x0, 0xd9) write(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0x1b}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00e4e72455b62ba1a0ebca200398f817"], 0x0, 0x0}, 0x0) 6m1.531023375s ago: executing program 7 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x888000, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 6m1.332385621s ago: executing program 35 (id=950): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4685, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x15, &(0x7f0000002080)=ANY=[@ANYBLOB="f729a482fc098c1ffc25dcf3ae440aeb39cba4c440d6369694035a8ad7a19df8036db5b1abf814e7f7539c2c59f2733edcb525f3abb6eb455fba777724e1ad850e22147bdddf8e06e6fcf1676f6879f199b6bfcc580935fb1d6eb6bd0668ccc60a4423e3c197067b50003d84369cb1d2893045bef320ebc2443ff3560aaf62993fed165366799758a5db32f8adf7272e7df8498256e3f9d17ab130ba23d186ceef4ffb11c46a619e45048b2ac1eed44e9d2f10555f4668deef07d0f8ce4abb833b08c7888b1b99930412f3436263f2d47ffc924386439f5fbbe2810668ace25d2c44b6b801663fd090b64427c12576176ebffae6499e7d0c6bd98deb77ba5d67fd4abf81ad156687452546c6d51f5ff27755e787f4b1b531414a0aab797bdd9c0b5f30315987201055bbb9ac4caae7e72b66d4aafcde1c6585c4d52a6be5de99b1c10d5432a7fc50d3acee2987716a9447cdb2c3e1ef762b1cf49a7e068a5f68c5616ee32dece460fb84af8f8c5e37d2bb11e9cd69987e231ffac0369ec83eb7d2154d19ab9e5462be880d91f3240b6cd0f5fa8075f46bfbf7c144e16622c1fb1173a9a1af067174e933659e6b3dc28235b3ec535c249057785737f240b97dab8d2eb7c3a2f69c419edcae54ade6d2b1e7857ac41076726aa45a277d1d408298cf2c9d64f20abfc58c71c86a97e698ac41128fac4cd4cdd6ecfb3ea64f0a4fd42214bbf82dbad4073a9b25f975e05444d9a398d242435b7ef09c4ab30fa0f6dac92910f58d7b5a6ea6d52821500bdbbe143c63e27a20cb93fe728e7cf246832e816a9c6245f7c9c20ae78d7c3b11866ec96f4e12490c3cf628cbd592ac847bf6b444f28fb68f34801656c03e42466195ff5a64c86e048d8258fff2654137564bbab36486fac28af162fbb0e6294a7f2afd32d0c590cf7f02e7ccab220dd0039a72b6f1ebe7e55de5ed907804aebe2bf7f62ee2605eb56e3d3af37788822cd4c9fe85b329d792c1422901887cb034d9686ed16daa1aada6ffdaddcac4a7145f6a098d61adbdbe6e9a99225271ff73237c694adecd1e16db45947cc0c47b5c51fa4b86171ad70ec2a1248a2a4ffcae50b7b3111b8cf1fb058f8a76a3ed8201fbedd72e96570e68626091e3e0ac17017476d75c6d97392cda155128dc90ce33690703cbf46449b9f15c4943994fa1685ef2ee7b50e600c304359c97d30436987983b989f1fc28af93821c6e92abb20b77f34c9ccce7416cc076cb210139ba20e36cf5308bbe4f8e15e23d11ac3e10281f82b18f5d6065172810b537261bcc08e330ec0b86036c8d2053aed5f6339377654b672579d2db5e117ad9870e7f8e0d27f15864110f4c43156ac2ea8303e7b9ff90dae7531dc156b6e03dea382744efebac7ebcea19486f0f6588e86fbde8b2802f5f040dd6a228b9655cde03b994c16e34ef13eb8ed3908ac579f91a2c013edf86ad37d9733f67653bf95c7c6b08795adde66ad5be828e3ca36b38ca51d354b2e37352f3a7ce81d307bab961fdec999944a374c060a2f8f267871992737667e0aa19937841381690dd5788e9e95af03c8006a9747da0d4ca3fd0c19149e58bdc5327515b3440832e831f6622a14ba9e5411c5c9159629bda674bf342524595dff8a9581305df1b211455cc8d9e859356a1ec4ef1a3582eda33f843b4622d5277ad9f3b1dd00fa983481e8367a2b70e6e1a9059b5306210df27d09ac651c6f0a3274bbc2c8014dac56e69b450c43b3e04ba433f6e4edf4c4718dcedd16271c41ae9df4f817be8c871f631330a7c8eec4cf3e551eff5bb000da6f6d5e2b178c0b86563d1734a4342cdc5b8f1829d59d608de0b6160b10600aa8f3c81d92d9fe2e2c8af5415ef6b298d178135fd726632bfbc70d4ffb1653d1b6d290d2b61711015038e8242df777d3e86e348de0ed0c7612b3131ae4f4ffbb8b56881d7e598aba8f09122366578a66355b574ae134ae179b482bea9699ca2e4c067ff1339a2c01fbc9d8af4cb863cb12b8f27831186af9ce2c39ebd5cbfd0776b57ef1c2f06e386451c3d34f1675d6476cacb48ebfaa7d6313691374680a32ca0b6b12f1aae2f01bab75d41f69c2286aa49d1d48171aa5d9857d77b7c0e2abc037f15f360ec5bc0b649a1a0d365085cfd5003099d6a55f407f46552ee08091c1fcb28669ef3f438b3195f24cb53cc7ae72e045471be9fb111c975e1c08e59ad8fb03cf469565866e2c65f7e2207bce0e77974a81e1d8b8f6185996d5e5f7a8e15fff0f3e624e7621fc07eaaa2d91fa3784b2cc6bf23e04405167a10166f0143b780fd74df4db04e0e620ba5edb6b436b211e4ece05ef3898f5a66e0b9f4b549cf8d7fc68268fdc4ec06756678eb70a99e7ac9fdffd33c04c2315deb96c379a33845219bfa78665ab6763bdff67350aecef340d9762043638cee91bad5c6329c35385b142d76d7fafd8292c578c9ae264b07d9527ac394701e1748b6a3917789d29d8b241a1650a206f16add5a98303e12d00db478f443fcac053a44f8023f3b5440046536f0e2029442123662978c513ba333ca1eac610fc90dce8f86db32f44a81f4551a6162c7fdcef6f5f59a54c71744000030a75b12aa2234ad5e6e4fd5bdd54bd71ae237746eb006155627d071c0480a6c82d371db4870b07366a2e7c6994d2edd3e7fdc45a7d78ac454593dc7fca8029bcdb5558e5a6fc3bdabee61437333ea128cc341bb38e370564be281cccb058af12db427ba35c00626cbb507ddd2aba52b6e10e9409244743d62140200868023306cc2d9918ce8248a2ef22c05164fcb257122c933f4ae25f7337c298751aae76f5f0ef08b7cbb2cfc621aae6f8e4a1a12f53be2510da90b133de043a318f9219caac9b33366a4aec79c2a0f9b9501ec3dba5b7a8819e93a2bab5666b6062088ef5fdec61339267958b605c32d08ecd24d784dae1cc6264fc52ca962dd3d1c5675c7c4bffa1ed44973031f5658472d3761ed8b67125b4bc2071266cb4c25c0dee8426fd73e68d402f51e5f43f03ce8afa860760b25f4a7957bc6321dcff49da29f9cde31ed0f1db84a53ad06cd77389d6bf1251c3854b9eee5c567cf48bde8dc092f1752a241d251cfb5c67197ccbbf871161417467ab36aa800eb587f29ff72644e4f54ee570c548aac6357b98084f4037d1c10e8f4978d1241e329de17fb3cac8464ab588e5b8fdeebe9c5f915d17169d75cd2dc91f222a4e7d2c34ce958471ae6323fa5826b94a2d7b7847ce83a951b1410246aa9a183a43aedd8dd8fd5da635dfdbe0777aaa410f2ddf29bef6235b66637d9c496cbebf122652c0f34e13f4d110dbdcd340eddf357a332347ac940708c1767c5eb88b1a30b335d692855e1af56308714179590bb0952a2208d292615d924726b817a0a648cabb17e9470b3cd55c285d533c3371b57f9276751e9f3bd01fea52ebb0612aee4a7751d117738ce134d38c65a89664c53143d8c1d08bff7eb678cc05347e8a8f6863831e0d6277b4488ef5fb72b26d14be8b1f1cc57dcb1e42a95fcc5e1d1a8e3ea2b5362821fc2b9d2ab6a57b7543901a3269c12010dc96fc620e33cfeb1dbc16db590fea0c39e1eff17089c9719ed5aeeb096f88e83b62acf72d2eaf6a8f6b6d9b70afc0c6b01ddeea2b053ce2cb29766f2ef2d5bfb4c852731b3b69ca1d88c1c654446d6d194c456c25580c3c84e0cd0d4ba594ff43588f45ecb7740221bd39a464b2e9c66eb39404acd6a99504ece1bcff36a14929b0bd1b9a1fe51c13c127008a840161985f3a038ac91fbd2c06a50d8ba6a67be2c1a04de4bfc828964c4bad66483a75fba82c0f9c303057915cd3bffbd4b49d825597a5f94121d9079b31e60624dfbf10166c2a6f494553c06083a76741a8f7e88f14fade4074ca7ed0368b7a58f6ff7798f1618a5197d2c2456eab7a28b00ee11e8d50aff24459c1aa1d0ebe484ef0b3de0c16961b68ece67a13204824cf711d9b2354592bb07401ad9b36dda956bf3d2057fbdc9df3e81555a0d93388ff110e81eeed69647e0e16e95c04509ea6a0780b1307fbf0f457b8dc151157a16b740a9f197335448a268af20d01cbd13a069da67c899e0360be2fad257172f86c4b77bfb5dabf46fed3e8a3ba7f95ec84577f099c9d8304ba361b41a040cf80b75cc80bccc64ce787dedf425965f0d9caab4cf39d8d1125ada75e007f7ef512ec417ebd2e985e54cb5a985492ba428122cf82f56e18f772aa3d99acc553eee8c7311cb25d92e276f9fbac9b2bab80be5ce5cd44a7725e0a73f67ffe72ad0088e832cf8783544d4ab2b2b10cccc08c819c4ce015e209c65898a92f02ede5d09ec44e6f6a56d82bca99e36c4edd964e55874725561a295fdbde2d88c028aa53a32721cd8fd9b7c83abb0e7653f8561f6baafb4c9bbc9582e4e9c19e211bc5c570bf8337746d214bcbec1203cfa77e2131bd9555ea8089fd0ec6190c29ed166154b965694a9da9a83d7df0298d48a62133cf1c595699e0dfec39ca0d5f12d9627b9c492fc17cb7d8fcded7beed07f4952cedd0a90d77f22e49140cbf9c5f951b95c90df3cc397a349527df5497b4e431eed94af512c1db7f07e9c0377a0181e0f3ca4c803000f828dc9ecdfeb0bd5fe7f04a5f9046b5d85bf22425f241a8a742372a3fa77d829c3216330a32cb9be8f54afee3eaeb972f848d92441f94ccb895311f2ea287cbeb4ae821a04450f8f40aa05de454db84c611712e6a53ffe644e7e75d7fc64a50f869d4965d0dcf5b92f35aa29ecabee15409601d7d53e4ff627ecf6a9c09c9fc5c97c74ebb6bbb3fda0e14616351438af34ca4a8c28c26efffa2f0b2cb30894ee9a5ad82c7b69750cabfc803f695c1367a479c258345da668c2f2054cdae383403555dea50a359537378091c144442d968a8cd4487a3d40e5fa5f090e86fb270ad36a87faf0ecc9e1b76459c66b46055d78da553578c8a1927ec9e2a50fabafd71226debd273f1f9a76e755b49462cdd83fce302ba0faef17cd09f4d026b6d0cf2cfe3d0f3785bb7a9710cd2672334faa3b1efbd911ab23a910bd18c7d911983f5745fd82aa8a25f0f39b800a21400a0b36df525bb4d09a4e7dcc1e16a96b26e773d1b6ccb057f9b76f344cd2ac46dbcaf02edcb164b707c6c1beb8d62265e033e9ebc22de8a10a58bf41b1c4aa1fbd3b2b520706dbe59910078d262c0cdb81bb6bdd698150159cd2e553a37d8115aa2aeb583db1b97df31b47de6e9d1766f78feb4f2aaabe73e2075e7ca1b91695addc6e84f2f8871cf1f28e4279c5388a164153484df58475b522f915385f6d2e03c6dabfcc17bc8ebe30f703fbb05a15219fe150ba57cd4c5204a6bbbba73b7949bdd5d5c27e93196db5c130abe7b1ac2d4b680dbbac19707a396a9be7fe61fd35f3b4be3e0909fc7f0c33f4a1ad6336cbf3f38e9bf1228cfa67c7fd52c718052e4f2fd6e200fa4ba244003040480e22508d98ffcb3247c0a699cd8172171a14c9aca7961316f1cae26ddae2d74749846f9fec535f7fde1e75971a71acf785dbd7d97bc3100326346d94abd1349bed26de72eaad6c0c4bea74d9bb0c6b6b7ac527e3d27dc40ec14f7aeb515a2b9fe1272431c735bd0d8daf372350f1075b48057b3725ec2700e90d6a0af454256256b55b7658e26fa9b33b1a91d4d559aeda71394a0c9dd576b8f274af520442eb67021c9e21b2ec4880329a692d7842640d6d7dc519a4a9eeb473b414f6ab07968bbeb97f12b47acdb32950a43653f2f02c"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000041, &(0x7f0000b63fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000000)={0x7, 0x0, 0x3}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x2, 0x2, 0x4d55ba80e15bd3de, 0xffff, 0x8}, 0x20) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}}, 0x4000000) 6m1.150148316s ago: executing program 7 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_vm_readv(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/209, 0xd1}], 0x3, &(0x7f0000000040)=[{0xffffffffffffffff}], 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "c71858483faeb31832392e3ae432d3e126d25e0a8733af7304992c5ef3b1ce4893fb839daec74114da7f092a616be0a7a27b3f3d90b1f3706d3f8d1eb8b3978e", 0x39}, 0x48, 0xfffffffffffffffb) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r5 = syz_socket_connect_nvme_tcp() close(r5) io_uring_setup(0x3fbf, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 5m56.596647882s ago: executing program 5 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x888000, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 5m56.307116291s ago: executing program 5 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x430, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c) openat$zero(0xffffff9c, &(0x7f0000000000), 0x18100, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') 5m45.963352641s ago: executing program 36 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_vm_readv(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/209, 0xd1}], 0x3, &(0x7f0000000040)=[{0xffffffffffffffff}], 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "c71858483faeb31832392e3ae432d3e126d25e0a8733af7304992c5ef3b1ce4893fb839daec74114da7f092a616be0a7a27b3f3d90b1f3706d3f8d1eb8b3978e", 0x39}, 0x48, 0xfffffffffffffffb) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r5 = syz_socket_connect_nvme_tcp() close(r5) io_uring_setup(0x3fbf, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 5m40.257577033s ago: executing program 37 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x430, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c) openat$zero(0xffffff9c, &(0x7f0000000000), 0x18100, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') 5m13.248296325s ago: executing program 0 (id=1080): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x30}}, 0x0) 5m12.327120754s ago: executing program 0 (id=1081): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8000000008, 0xfffffffffffffffd}) 5m11.807692231s ago: executing program 0 (id=1082): timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000020101020000f9ffffffffffffff0001040019"], 0x18}, 0x1, 0x0, 0x0, 0x2000c098}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x364, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x34c, 0x1, 0x0, 0x1, [@nested={0x348, 0x1d, 0x0, 0x1, [@nested={0x342, 0xa8, 0x0, 0x1, [@generic="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", @generic]}]}]}]}, 0x364}}, 0xc000) read$FUSE(r4, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x2b0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x280, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc, 0x0, 0x0, 0x1b}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffff1, 0x8, 0x354779fa, 0x15, 0xf, 0xc, 0x6}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x401, 0x8, 0x16, 0x1f, 0x19, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xc}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffffffc}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) 5m8.365777871s ago: executing program 0 (id=1086): io_uring_setup(0x4685, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x0, 0x3}, 0x8) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x2, 0x2, 0x4d55ba80e15bd3de, 0xffff, 0x8}, 0x20) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) 5m5.2757364s ago: executing program 0 (id=1094): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 5m4.887332002s ago: executing program 0 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250800"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 4m49.698511386s ago: executing program 38 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250800"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 25.556270805s ago: executing program 4 (id=1932): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x7, 0xa, 0x4, 0xffffffff, 0x7f, 0x8001, 0xfffff000, 0x3}, 0x20) r2 = dup(r0) write$binfmt_elf64(r2, &(0x7f0000000a40)=ANY=[], 0x1279) write$cgroup_pid(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fb, 0x8001, 0xffff1896, 0xe3, 0x24, 0xffffffb7, 0x1a}, 0x9c) 25.165087858s ago: executing program 4 (id=1935): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x200, 0xc, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e4, 0x3, 0x0, 0x1, [{0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "cc5ca22e2f05d5eeb67e218a1fe76ea334b41a2e3e54c818065b86d6733cc197f59200438a6a26f448fb5ee4c7a9bdc08d42aa0afbe7518c774ad1386e36e6ea4cca59709880d472398014ae46e0c19f89e7a371920dcdb0d4"}, @NFTA_DATA_VALUE={0x69, 0x1, "21fb531cc5583d3a5d7f37217744548acb2e7aa187b27007965bbeb91cd3f340fdc15f70c99e61135c6eed71e04e3710c315d6fa611db07d54b63fb7869f57bc8a613d8298529055f892b2c201babf412dfe6fbc33fcb324eb2843ef1251a124331cde6995"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x228}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 19.478670689s ago: executing program 4 (id=1946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x7, 0xa, 0x4, 0xffffffff, 0x7f, 0x8001, 0xfffff000, 0x3}, 0x20) r2 = dup(r0) write$binfmt_elf64(r2, &(0x7f0000000a40)=ANY=[], 0x1279) write$cgroup_pid(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fb, 0x8001, 0xffff1896, 0xe3, 0x24, 0xffffffb7, 0x1a}, 0x9c) 19.232173437s ago: executing program 4 (id=1948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 17.961771848s ago: executing program 8 (id=1951): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) listen(r1, 0x800) r4 = accept(r1, &(0x7f0000000280)=@nfc, &(0x7f00000000c0)=0xfffffffffffffcea) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 14.624239504s ago: executing program 2 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 13.308023296s ago: executing program 2 (id=1963): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x24, r0, 0x801, 0x402, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 8.007622545s ago: executing program 2 (id=1970): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300000000"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"/34], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.007292465s ago: executing program 3 (id=1971): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x7, 0xa, 0x4, 0xffffffff, 0x7f, 0x8001, 0xfffff000, 0x3}, 0x20) r2 = dup(r0) write$binfmt_elf64(r2, &(0x7f0000000a40)=ANY=[], 0x1279) write$cgroup_pid(r2, &(0x7f0000000780), 0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 8.007015825s ago: executing program 4 (id=1972): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x200, 0xc, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e4, 0x3, 0x0, 0x1, [{0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "cc5ca22e2f05d5eeb67e218a1fe76ea334b41a2e3e54c818065b86d6733cc197f59200438a6a26f448fb5ee4c7a9bdc08d42aa0afbe7518c774ad1386e36e6ea4cca59709880d472398014ae46e0c19f89e7a371920dcdb0d4"}, @NFTA_DATA_VALUE={0x69, 0x1, "21fb531cc5583d3a5d7f37217744548acb2e7aa187b27007965bbeb91cd3f340fdc15f70c99e61135c6eed71e04e3710c315d6fa611db07d54b63fb7869f57bc8a613d8298529055f892b2c201babf412dfe6fbc33fcb324eb2843ef1251a124331cde6995"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x228}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 7.978092846s ago: executing program 8 (id=1973): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x5, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x5, 0x4, 0x4cb6, 0x0, 0x1, 0x80000000, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x7, 0x1, 0xeb, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0x3, 0x3, 0x20101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x10001, 0x40001, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x2, 0x8, 0x9, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x6, 0xa39a, 0x8, 0x76, 0x2, 0xffffffff, 0x3, 0xa, 0x40, 0x4, 0x4, 0x1, 0x0, 0x6, 0x8001, 0x7, 0x5a6, 0x3, 0x9, 0x3, 0x7d1b, 0x5, 0x5, 0x4, 0x6, 0x2, 0x2, 0x8, 0x69c, 0x6, 0x8244, 0x9, 0xacf, 0xedb, 0xe772, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x5, 0x10006, 0x4, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x6, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0x1, 0x8, 0x3ff, 0x2, 0x0, 0x8001, 0x33, 0x5, 0x0, 0x6, 0xaf, 0x1, 0x403, 0x80000001, 0x0, 0x2, 0x6, 0x1, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x7, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xffffffff, 0x46, 0xa5f, 0xfff, 0x2, 0x3, 0xf, 0x1, 0x3db1], [0x0, 0x1, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x400008, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x1, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0xfffffff9, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x19460, 0x24, 0x5, 0x9, 0xffffffff, 0x7ffffffc, 0x5c6, 0x9, 0xfffffffe, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffefff, 0x5, 0x7]}, 0x45c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.747595164s ago: executing program 3 (id=1975): syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) r3 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000006161616161616161616161616161616161616161616161616161616161616161313131313131312e3131313131313131313131313131313131313131"], 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r3, 0x0, 0x0) gettid() r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r4, 0x0, 0x0, 0x0) 5.360146109s ago: executing program 2 (id=1976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) shutdown(r0, 0x1) 5.311774131s ago: executing program 8 (id=1977): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0xc, 0xfffffffe, 0x80000000}) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 3.987040584s ago: executing program 9 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.889238168s ago: executing program 4 (id=1980): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x9, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000065c000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x28004010}, 0x20041040) close_range(r0, 0xffffffffffffffff, 0x0) 2.794604791s ago: executing program 9 (id=1981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a280000000b0a010400000000000000000a0000090900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 2.722683614s ago: executing program 3 (id=1982): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05292a20"], 0x8) socket$can_bcm(0x1d, 0x2, 0x2) 2.664201355s ago: executing program 2 (id=1983): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) listen(r1, 0x800) r4 = accept(r1, &(0x7f0000000280)=@nfc, &(0x7f00000000c0)=0xfffffffffffffcea) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 2.455648772s ago: executing program 9 (id=1984): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c00)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0x4008af13, &(0x7f00000000c0)={0x1, 0x2}) 2.330547266s ago: executing program 3 (id=1985): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 2.090401624s ago: executing program 9 (id=1986): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000440)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 1.929586639s ago: executing program 3 (id=1987): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"/34], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.712677946s ago: executing program 9 (id=1988): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 1.499607123s ago: executing program 8 (id=1989): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r3) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69000000000001000000180000000200861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r4) 436.788366ms ago: executing program 8 (id=1990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000400)={0x1c, r1, 0x43ea4d35e0958cf7, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 210.078994ms ago: executing program 3 (id=1991): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x3) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r1, 0x8) 163.608345ms ago: executing program 8 (id=1992): syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) r3 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000006161616161616161616161616161616161616161616161616161616161616161313131313131312e3131313131313131313131313131313131313131"], 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r3, 0x0, 0x0) gettid() r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r4, 0x0, 0x0, 0x0) 81.198878ms ago: executing program 2 (id=1993): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = msgget$private(0x0, 0x184) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 0s ago: executing program 9 (id=1994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x1, 0x62e98893, 0x2, 0xfffffbff, 0x2}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ts going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.286177][ T8537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.975800][ T8537] device hsr_slave_0 entered promiscuous mode [ 510.168951][ T8537] device hsr_slave_1 entered promiscuous mode [ 511.883917][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 511.953284][ T4319] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 512.156450][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 512.175509][ T4319] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 512.212817][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.230161][ T56] device hsr_slave_0 left promiscuous mode [ 512.249835][ T4319] usb 1-1: Product: syz [ 512.254182][ T4319] usb 1-1: Manufacturer: syz [ 512.258828][ T4319] usb 1-1: SerialNumber: syz [ 512.272273][ T56] device hsr_slave_1 left promiscuous mode [ 512.289603][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.303237][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.317455][ T4319] usb 1-1: config 0 descriptor?? [ 512.339563][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.356981][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.375842][ T56] device bridge_slave_1 left promiscuous mode [ 512.392401][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.404380][ T56] device bridge_slave_0 left promiscuous mode [ 512.410696][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.496347][ T56] device veth1_macvtap left promiscuous mode [ 512.504052][ T56] device veth0_macvtap left promiscuous mode [ 512.510384][ T56] device veth1_vlan left promiscuous mode [ 512.518617][ T56] device veth0_vlan left promiscuous mode [ 512.531873][ T4319] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 513.101832][ T56] bond1 (unregistering): Released all slaves [ 513.839474][ T56] team0 (unregistering): Port device team_slave_1 removed [ 513.892613][ T56] team0 (unregistering): Port device team_slave_0 removed [ 513.940507][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.953927][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 513.976492][ T4319] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 513.987857][ T4319] usb 1-1: USB disconnect, device number 21 [ 514.029353][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.390341][ T56] bond0 (unregistering): Released all slaves [ 514.492492][ T8645] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 514.894756][ T8537] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 514.905995][ T8537] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 514.946315][ T8537] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 514.966730][ T8537] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 515.119994][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.139881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 515.169559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.191974][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.212674][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 515.249049][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.271938][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.279255][ T5198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.319099][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 515.345646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 515.383784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.400746][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.407986][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.430416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 515.440417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 515.476239][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 515.509399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.529152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.586612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.622395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 515.639031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.677120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.706593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.718492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.752255][ T8537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 516.100658][ T8681] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 516.109878][ T8681] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 517.313908][ T4259] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 517.513117][ T4259] usb 5-1: Using ep0 maxpacket: 32 [ 517.520595][ T4259] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 517.553925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.561463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.579534][ T4259] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 517.596038][ T8537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.623575][ T4259] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 517.632704][ T4259] usb 5-1: config 1 has no interface number 0 [ 517.680692][ T4259] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.712413][ T4259] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 517.763177][ T4259] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 517.783700][ T8703] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 517.802888][ T4259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.869751][ T4259] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 517.889736][ T8703] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.070956][ T4259] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 518.494100][ T4358] usb 5-1: USB disconnect, device number 11 [ 518.500955][ T4358] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 518.572493][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.592867][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.603456][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.611916][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.621169][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 518.628741][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 518.701175][ T8717] lo speed is unknown, defaulting to 1000 [ 520.198877][ T8717] chnl_net:caif_netlink_parms(): no params data found [ 520.221386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 520.239556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.367718][ T8537] device veth0_vlan entered promiscuous mode [ 520.375931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.392415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.414245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.422438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.439067][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.446588][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.457537][ T8717] device bridge_slave_0 entered promiscuous mode [ 520.472819][ T8537] device veth1_vlan entered promiscuous mode [ 520.500274][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.508117][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.521335][ T8717] device bridge_slave_1 entered promiscuous mode [ 520.578388][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.592695][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.672533][ T8717] team0: Port device team_slave_0 added [ 520.673795][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 520.715464][ T8717] team0: Port device team_slave_1 added [ 520.740629][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 520.775846][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 520.850726][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.880408][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.948200][ T8537] device veth0_macvtap entered promiscuous mode [ 520.962014][ T8537] device veth1_macvtap entered promiscuous mode [ 520.978635][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.993178][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.030840][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.090244][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.122795][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.162340][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.224446][ T8769] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 521.288671][ T8769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.319154][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 521.331261][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 521.357791][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.376923][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.396265][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.410978][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.430108][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.442265][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.462602][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.527477][ T8717] device hsr_slave_0 entered promiscuous mode [ 521.553972][ T8717] device hsr_slave_1 entered promiscuous mode [ 521.579413][ T8717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.588818][ T8717] Cannot create hsr debugfs directory [ 521.614493][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.629999][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 521.978092][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.945073][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.973131][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.027641][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.070924][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.135538][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 523.145562][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.157021][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.329032][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 523.364188][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.403202][ T8537] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.412064][ T8537] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.425420][ T8537] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.438132][ T8537] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.760868][ T4931] device hsr_slave_0 left promiscuous mode [ 523.788868][ T4931] device hsr_slave_1 left promiscuous mode [ 523.836970][ T4931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.863292][ T4931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.886902][ T4931] device bridge_slave_1 left promiscuous mode [ 523.906968][ T4931] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.938629][ T4931] device bridge_slave_0 left promiscuous mode [ 523.959747][ T4931] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.034799][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.055827][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.064667][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.074701][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.082406][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 524.090195][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.283110][ T4316] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 524.464921][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 524.472140][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.488563][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.501492][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 524.517434][ T4316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 524.529771][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.561743][ T4316] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 524.608171][ T4316] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 524.618229][ T4316] usb 1-1: Manufacturer: syz [ 524.652875][ T4316] usb 1-1: config 0 descriptor?? [ 525.093082][ T4316] rc_core: IR keymap rc-hauppauge not found [ 525.099077][ T4316] Registered IR keymap rc-empty [ 525.118162][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.179376][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.214139][ T4316] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 525.228574][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 525.257151][ T4316] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 525.333190][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.363171][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.393238][ T4931] team0 (unregistering): Port device team_slave_1 removed [ 525.422638][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.478136][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.534677][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.598539][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.676873][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.753919][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.798761][ T4931] team0 (unregistering): Port device team_slave_0 removed [ 525.806827][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.874822][ T4316] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.957609][ T4316] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 526.072141][ T4316] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 526.184750][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 526.211111][ T4316] usb 1-1: USB disconnect, device number 22 [ 526.522655][ T4931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.333343][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 527.373886][ T4931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.273180][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 528.423955][ T4931] bond0 (unregistering): Released all slaves [ 528.660585][ T8832] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 528.819307][ T8807] lo speed is unknown, defaulting to 1000 [ 528.993514][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.001423][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.032629][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.184340][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.192513][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.221131][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 529.389622][ T8717] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 529.437409][ T8717] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 529.484437][ T8717] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 529.542952][ T8717] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 529.847272][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.983'. [ 529.856481][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.983'. [ 530.430422][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 530.659232][ T8807] chnl_net:caif_netlink_parms(): no params data found [ 530.884494][ T8872] netlink: 'syz.8.1044': attribute type 12 has an invalid length. [ 531.618962][ T4931] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.740330][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.850688][ T4931] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.920226][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.987752][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.008544][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.032654][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.093750][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.116197][ T8807] device bridge_slave_0 entered promiscuous mode [ 532.156770][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.416554][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.503589][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 532.711181][ T8807] device bridge_slave_1 entered promiscuous mode [ 533.321799][ T4931] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.457944][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.522482][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.579540][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.586836][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.774659][ T4931] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.831600][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.860733][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.918819][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.131108][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.138367][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.088771][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 535.164375][ T8913] blktrace: Concurrent blktraces are not allowed on loop8 [ 535.172748][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 535.869192][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 535.927181][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.972530][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 536.079063][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 536.138842][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 536.181429][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.226271][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 536.294556][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.341720][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 536.372171][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 536.464677][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 536.577932][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 536.623896][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.719195][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 536.924669][ T8807] team0: Port device team_slave_0 added [ 537.772194][ T8807] team0: Port device team_slave_1 added [ 538.886695][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.955865][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.077811][ T8807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.262796][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.273276][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.408888][ T8807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.249528][ T8807] device hsr_slave_0 entered promiscuous mode [ 540.332915][ T8807] device hsr_slave_1 entered promiscuous mode [ 540.403113][ T8807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.433314][ T8807] Cannot create hsr debugfs directory [ 540.654113][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.670911][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.702789][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.190691][ T8977] blktrace: Concurrent blktraces are not allowed on loop16 [ 541.203216][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1062'. [ 541.931394][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1062'. [ 542.577288][ T4318] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 543.543396][ T4318] usb 9-1: Using ep0 maxpacket: 16 [ 543.592560][ T4318] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.663684][ T4318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.923211][ T8988] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 543.940880][ T8988] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 544.030020][ T4318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 544.185395][ T4318] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 544.195825][ T4318] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.213242][ T4318] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 544.222369][ T4318] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 544.316315][ T4318] usb 9-1: Manufacturer: syz [ 545.035041][ T4318] usb 9-1: config 0 descriptor?? [ 545.043358][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 545.093724][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 546.723164][ T4318] rc_core: IR keymap rc-hauppauge not found [ 546.853778][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 546.853796][ T26] audit: type=1326 audit(1780125564.309:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 546.884051][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.004076][ T26] audit: type=1326 audit(1780125564.309:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.073266][ T33] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 547.124843][ T26] audit: type=1326 audit(1780125564.309:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.195708][ T4318] Registered IR keymap rc-empty [ 547.200761][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.220233][ T26] audit: type=1326 audit(1780125564.309:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.244548][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.252351][ T26] audit: type=1326 audit(1780125564.309:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.283885][ T4318] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 547.295808][ T33] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 547.322805][ T33] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 0 [ 547.343561][ T4318] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 547.363260][ T33] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.370387][ T26] audit: type=1326 audit(1780125564.309:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.414328][ T33] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 547.434651][ T33] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 547.434694][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.442874][ T33] usb 5-1: Product: syz [ 547.442893][ T33] usb 5-1: Manufacturer: syz [ 547.442909][ T33] usb 5-1: SerialNumber: syz [ 547.463413][ T26] audit: type=1326 audit(1780125564.309:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.491288][ T33] usb 5-1: config 0 descriptor?? [ 547.522777][ T33] usb 5-1: selecting invalid altsetting 0 [ 547.544564][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.571658][ T26] audit: type=1326 audit(1780125564.309:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.603510][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.647457][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.676009][ T26] audit: type=1326 audit(1780125564.309:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.738302][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.812708][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.861438][ T4358] usb 5-1: USB disconnect, device number 13 [ 547.883967][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 547.919675][ T26] audit: type=1326 audit(1780125564.309:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.8.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 547.943825][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.950765][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 548.085867][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 548.173612][ T4318] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 548.518101][ T4318] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 548.768537][ T4318] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 548.800781][ T4318] usb 9-1: USB disconnect, device number 2 [ 548.830659][ T8717] device veth0_vlan entered promiscuous mode [ 548.845035][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 548.913515][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 548.976105][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.003529][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.211521][ T8717] device veth1_vlan entered promiscuous mode [ 550.370604][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 550.412807][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.413481][ T4319] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 550.548779][ T8717] device veth0_macvtap entered promiscuous mode [ 550.795449][ T4931] device hsr_slave_0 left promiscuous mode [ 550.859890][ T4931] device hsr_slave_1 left promiscuous mode [ 550.922671][ T4931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.003672][ T9060] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 551.027959][ T4931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.132586][ T4931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.234080][ T4931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.296163][ T4931] device bridge_slave_1 left promiscuous mode [ 551.302477][ T4931] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.312632][ T4931] device bridge_slave_0 left promiscuous mode [ 551.319021][ T4931] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.354387][ T4931] device veth1_macvtap left promiscuous mode [ 551.360511][ T4931] device veth0_macvtap left promiscuous mode [ 551.367910][ T4931] device veth1_vlan left promiscuous mode [ 551.379620][ T4931] device veth0_vlan left promiscuous mode [ 551.463200][ T4319] usb 9-1: Using ep0 maxpacket: 16 [ 551.484363][ T4319] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.495578][ T4319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.507242][ T4319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 551.519241][ T4319] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 551.529380][ T4319] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.561889][ T4319] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 551.579299][ T4319] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 551.592482][ T4319] usb 9-1: Manufacturer: syz [ 551.763972][ T4319] usb 9-1: config 0 descriptor?? [ 552.743130][ T4319] rc_core: IR keymap rc-hauppauge not found [ 552.749424][ T4319] Registered IR keymap rc-empty [ 552.755476][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 552.783566][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 552.813961][ T4319] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 552.828753][ T4319] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input22 [ 552.853227][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 552.883543][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 552.913173][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 552.943182][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 552.977851][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.019631][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.061262][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.096123][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.133206][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.177929][ T4319] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.189872][ T4931] team0 (unregistering): Port device team_slave_1 removed [ 553.214467][ T4319] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 553.224160][ T4319] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 553.237843][ T4319] usb 9-1: USB disconnect, device number 3 [ 553.281018][ T4931] team0 (unregistering): Port device team_slave_0 removed [ 553.340542][ T4931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.392725][ T4931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.905391][ T4931] bond0 (unregistering): Released all slaves [ 554.080837][ T8717] device veth1_macvtap entered promiscuous mode [ 554.815727][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 554.834214][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 554.971458][ T9078] IPv6: Can't replace route, no match found [ 555.120136][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.163072][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.204828][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.376947][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.387295][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.398779][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.411851][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.424072][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.437233][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.447822][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.507843][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.433554][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.453469][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.474920][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.487914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 556.507357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.551258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.566940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.582536][ T8807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 556.613680][ T8717] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.622458][ T8717] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.638966][ T8717] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.647872][ T8717] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.666169][ T8807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 557.024221][ T8807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 557.789376][ T8807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 557.953978][ T9102] loop8: detected capacity change from 0 to 8 [ 557.964706][ T7479] Dev loop8: unable to read RDB block 8 [ 557.970360][ T7479] loop8: unable to read partition table [ 558.007412][ T7479] loop8: partition table beyond EOD, truncated [ 558.029578][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.050527][ T9102] Dev loop8: unable to read RDB block 8 [ 558.061681][ T9102] loop8: unable to read partition table [ 558.067510][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.097021][ T9102] loop8: partition table beyond EOD, truncated [ 558.123625][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 558.144954][ T9102] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 558.228061][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.257689][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.337215][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 558.412722][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.469492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 558.483963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 558.507988][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.536669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 558.562735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 558.601361][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.608677][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.869616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 559.593110][ T9124] CIFS: iocharset name too long [ 560.098261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 560.117566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 560.178005][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.185248][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.276639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 561.828432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 561.854863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 561.891882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 561.918805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 561.954322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 562.042130][ T8807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.081250][ T8807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.123951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 562.145680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 562.209335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 562.332074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 562.507899][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.515106][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.555145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 562.579025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.483550][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.507792][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 565.669179][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.809571][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 565.857855][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 565.910190][ T9176] device dummy0 entered promiscuous mode [ 565.920489][ T9175] device dummy0 left promiscuous mode [ 565.947110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 565.974294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.026650][ T8807] device veth0_vlan entered promiscuous mode [ 566.048431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.074737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.137764][ T8807] device veth1_vlan entered promiscuous mode [ 566.218571][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 566.239198][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 566.267209][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 566.303531][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 566.325183][ T8807] device veth0_macvtap entered promiscuous mode [ 566.374112][ T8807] device veth1_macvtap entered promiscuous mode [ 566.432284][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.444193][ T9172] CIFS: iocharset name too long [ 566.468494][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.499057][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.530224][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.567526][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.582708][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.598724][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.609480][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.629725][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.662161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 566.672472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 566.686620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 566.698433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 566.712904][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.730255][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.757905][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.776424][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.788815][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.819880][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.864210][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.114861][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.197010][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.805759][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.824135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 567.954231][ T8807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.963913][ T8807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.973676][ T8807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.982439][ T8807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.128612][ T5025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.141147][ T5025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.196528][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.352495][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.374878][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.467466][ T9212] blktrace: Concurrent blktraces are not allowed on loop8 [ 568.710163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 572.773387][ T22] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 572.883858][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1125'. [ 572.967147][ T22] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.998203][ T22] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 573.031923][ T22] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.075954][ T22] usb 9-1: config 1 interface 1 has no altsetting 0 [ 573.097711][ T22] usb 9-1: New USB device found, idVendor=0763, idProduct=2008, bcdDevice= 0.40 [ 573.113218][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.132417][ T22] usb 9-1: Product: syz [ 573.138375][ T22] usb 9-1: Manufacturer: syz [ 573.153796][ T22] usb 9-1: SerialNumber: syz [ 573.434670][ T22] usb 9-1: selecting invalid altsetting 0 [ 573.441641][ T22] usb 9-1: 0:2 : does not exist [ 573.511566][ T22] usb 9-1: USB disconnect, device number 4 [ 573.884662][ T7479] udevd[7479]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.061624][ T9273] CIFS: iocharset name too long [ 578.174444][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 578.185419][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 578.195047][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.214189][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.224010][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 578.231359][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.475694][ T3042] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 578.549435][ T9301] lo speed is unknown, defaulting to 1000 [ 578.703137][ T3042] usb 9-1: Using ep0 maxpacket: 32 [ 578.775194][ T3042] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 578.935885][ T3042] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 579.022568][ T3042] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 579.044379][ T3042] usb 9-1: config 1 has no interface number 0 [ 579.050816][ T3042] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.071735][ T3042] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 579.191165][ T3042] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 579.313712][ T3042] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.387160][ T3042] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 579.600798][ T3042] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 580.082827][ T3042] usb 9-1: USB disconnect, device number 5 [ 580.104037][ T3042] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 580.250050][ T4412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.263184][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 580.639882][ T4412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.906566][ T4412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.792046][ T4412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.301545][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 583.405168][ T9301] chnl_net:caif_netlink_parms(): no params data found [ 583.671094][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.695381][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.725463][ T9301] device bridge_slave_0 entered promiscuous mode [ 583.797878][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.808614][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.829393][ T9301] device bridge_slave_1 entered promiscuous mode [ 583.957024][ T9301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.981629][ T9301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.060889][ T9301] team0: Port device team_slave_0 added [ 584.083557][ T9301] team0: Port device team_slave_1 added [ 584.475511][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.482548][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.609286][ T9301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.626345][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.643047][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.750680][ T9301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.096603][ T9301] device hsr_slave_0 entered promiscuous mode [ 585.126652][ T9301] device hsr_slave_1 entered promiscuous mode [ 585.139331][ T9301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.206580][ T9301] Cannot create hsr debugfs directory [ 585.263284][ T9371] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1148'. [ 585.383628][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 587.401753][ T3042] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 587.464989][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 587.603194][ T3042] usb 5-1: Using ep0 maxpacket: 32 [ 587.612642][ T3042] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 587.662887][ T3042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.671923][ T3042] usb 5-1: Product: syz [ 587.682677][ T3042] usb 5-1: Manufacturer: syz [ 587.687727][ T3042] usb 5-1: SerialNumber: syz [ 587.701684][ T3042] usb 5-1: config 0 descriptor?? [ 587.710158][ T3042] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 587.743171][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 587.949844][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.974890][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 588.000356][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.020209][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 588.029608][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.054101][ T7] usb 4-1: config 0 descriptor?? [ 588.130318][ T3042] gspca_topro: reg_w err -71 [ 588.186541][ T3042] gspca_topro: Sensor soi763a [ 588.206838][ T3042] usb 5-1: USB disconnect, device number 14 [ 588.928075][ T4412] device hsr_slave_0 left promiscuous mode [ 588.990859][ T4412] device hsr_slave_1 left promiscuous mode [ 589.001916][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.021217][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.034016][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.051727][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.072834][ T4412] device bridge_slave_1 left promiscuous mode [ 589.079522][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.116149][ T4412] device bridge_slave_0 left promiscuous mode [ 589.122479][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.391631][ T4316] usb 4-1: USB disconnect, device number 3 [ 589.450929][ T4412] device veth1_macvtap left promiscuous mode [ 589.461262][ T4412] device veth0_macvtap left promiscuous mode [ 589.469633][ T4412] device veth1_vlan left promiscuous mode [ 589.525996][ T4412] device veth0_vlan left promiscuous mode [ 591.293038][ T4316] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 591.335259][ T4412] bond4 (unregistering): Released all slaves [ 591.493072][ T4316] usb 4-1: Using ep0 maxpacket: 32 [ 591.511323][ T4316] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 591.530657][ T4316] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 591.550973][ T4316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 591.571296][ T4316] usb 4-1: config 1 has no interface number 0 [ 591.581511][ T4316] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 591.623040][ T4316] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 591.647290][ T4316] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 591.658535][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.692659][ T4316] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 591.830846][ T4412] bond3 (unregistering): Released all slaves [ 591.903901][ T4316] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 592.336586][ T126] usb 4-1: USB disconnect, device number 4 [ 592.356493][ T126] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 592.439787][ T4412] bond2 (unregistering): Released all slaves [ 592.513346][ T4412] bond1 (unregistering): (slave geneve2): Releasing active interface [ 592.977118][ T4412] bond1 (unregistering): Released all slaves [ 594.512215][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 594.607266][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 594.681697][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.791587][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.348046][ T4412] bond0 (unregistering): Released all slaves [ 595.674233][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1164'. [ 597.336293][ T9301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 597.477273][ T9301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 598.459059][ T9484] random: crng reseeded on system resumption [ 598.558954][ T9301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 598.618566][ T9301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 598.938055][ T9301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.006596][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.039311][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.072794][ T9301] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.107462][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.156416][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.205108][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.212365][ T5198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.248314][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.300947][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.348095][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.423926][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.431126][ T5198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.503641][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 599.534314][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 599.587841][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 599.627114][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.669044][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 599.708652][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 599.751137][ T9301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 599.783220][ T9301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.825711][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 599.845200][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.964385][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.174226][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 600.186827][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.234414][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 603.826507][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 603.835664][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.869668][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.953207][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 603.989145][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 604.056083][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 604.070060][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 604.116415][ T9301] device veth0_vlan entered promiscuous mode [ 604.130594][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.149261][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 604.178534][ T9301] device veth1_vlan entered promiscuous mode [ 604.290932][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 604.309314][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 604.353420][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 604.393213][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 604.436899][ T9301] device veth0_macvtap entered promiscuous mode [ 604.499849][ T9301] device veth1_macvtap entered promiscuous mode [ 604.586759][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.609717][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.648436][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.680896][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.730059][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.796540][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.847162][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.898668][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.931585][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.974630][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 605.003758][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 605.033888][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 605.073974][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 605.111587][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.142589][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.173008][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.224188][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.263163][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.294074][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.325070][ T9301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.368291][ T9301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.428049][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.472323][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 605.482444][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 605.528620][ T9301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.568691][ T9301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.602748][ T9301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.642309][ T9301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.093236][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.156260][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.186823][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 608.274584][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.309244][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.355992][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 608.718898][ T9592] CIFS: iocharset name too long [ 609.800900][ T9602] overlayfs: unrecognized mount option "smackfstransmute=*\*)&:{" or missing value [ 613.549852][ T9636] binder_alloc: 9635: pid 9635 spamming oneway? 2 buffers allocated for a total size of 5120 [ 613.640701][ T9638] binder_alloc: 9635: pid 9635 spamming oneway? 3 buffers allocated for a total size of 5128 [ 613.665638][ T9637] hub 8-0:1.0: USB hub found [ 613.688447][ T9637] hub 8-0:1.0: 1 port detected [ 617.050778][ T9671] netlink: 'syz.4.1231': attribute type 2 has an invalid length. [ 622.992755][ T9761] netlink: 'syz.3.1245': attribute type 2 has an invalid length. [ 623.086065][ T9759] netlink: 'syz.4.1246': attribute type 13 has an invalid length. [ 623.103753][ T9759] netlink: 'syz.4.1246': attribute type 17 has an invalid length. [ 623.432253][ T9759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.040725][ T9778] Bluetooth: MGMT ver 1.22 [ 624.114380][ T9778] netlink: 'syz.2.1250': attribute type 4 has an invalid length. [ 624.122214][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1250'. [ 624.209419][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.215852][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.843224][ T7] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 625.866860][ T9810] 0: reclassify loop, rule prio 0, protocol 700 [ 626.053213][ T7] usb 10-1: Using ep0 maxpacket: 8 [ 626.076518][ T7] usb 10-1: config 0 has no interfaces? [ 626.131578][ T7] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 626.160526][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.193483][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 626.199721][ T4283] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 626.219821][ T7] usb 10-1: config 0 descriptor?? [ 626.452327][ T7] usb 10-1: USB disconnect, device number 2 [ 627.422602][ T9830] netlink: 'syz.3.1263': attribute type 2 has an invalid length. [ 627.975733][ T9843] CIFS: iocharset name too long [ 631.154254][ T9896] CIFS: iocharset name too long [ 631.213194][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 631.911468][ T9889] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 631.937772][ T9889] CIFS mount error: No usable UNC path provided in device string! [ 631.937772][ T9889] [ 631.948419][ T9889] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 634.360658][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 635.566250][ T9937] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 635.741863][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 635.741880][ T26] audit: type=1326 audit(1780125653.269:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 635.900846][ T26] audit: type=1326 audit(1780125653.269:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 636.016484][ T26] audit: type=1326 audit(1780125653.309:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc8d75d68e code=0x7ffc0000 [ 636.119221][ T26] audit: type=1326 audit(1780125653.309:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 636.218651][ T26] audit: type=1326 audit(1780125653.309:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 636.418706][ T26] audit: type=1326 audit(1780125653.309:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 636.623075][ T26] audit: type=1326 audit(1780125653.309:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 636.721284][ T26] audit: type=1326 audit(1780125653.309:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 636.746173][ T26] audit: type=1326 audit(1780125653.309:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 637.159739][ T9955] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 637.880018][ T26] audit: type=1326 audit(1780125653.309:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.8.1288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 638.622004][ T9972] lo speed is unknown, defaulting to 1000 [ 638.903403][ T4318] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 639.105140][ T4318] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.136059][ T4318] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.177649][ T4318] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 639.207309][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 639.238524][ T4318] usb 5-1: SerialNumber: syz [ 639.655601][ T4318] usb 5-1: 0:2 : does not exist [ 640.474049][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1301'. [ 640.809538][ T4318] usb 5-1: USB disconnect, device number 15 [ 641.034258][ T7479] udevd[7479]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.383035][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 642.573116][ T4318] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 642.580862][ T126] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 642.803246][ T126] usb 10-1: Using ep0 maxpacket: 32 [ 642.808650][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 642.832256][ T126] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 642.841472][ T4318] usb 5-1: config 0 has no interfaces? [ 642.864816][ T4318] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 642.880756][ T126] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 642.909989][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.924781][ T126] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 642.970983][ T4318] usb 5-1: config 0 descriptor?? [ 642.983350][ T126] usb 10-1: config 1 has no interface number 0 [ 643.011063][ T126] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.047786][ T126] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 643.107443][ T126] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 643.150214][ T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.212572][ T4318] usb 5-1: USB disconnect, device number 16 [ 643.249090][ T126] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 643.418516][ T126] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 643.680014][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 643.680030][ T26] audit: type=1326 audit(1780125661.209:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 643.830503][ T26] audit: type=1326 audit(1780125661.259:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc8d75d68e code=0x7ffc0000 [ 643.856196][ T26] audit: type=1326 audit(1780125661.259:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 643.880795][ T26] audit: type=1326 audit(1780125661.259:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 643.907458][ T3042] usb 10-1: USB disconnect, device number 3 [ 643.915537][ T26] audit: type=1326 audit(1780125661.259:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 643.987584][ T26] audit: type=1326 audit(1780125661.259:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 644.040798][ T3042] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 644.127014][ T26] audit: type=1326 audit(1780125661.259:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 644.151948][ T26] audit: type=1326 audit(1780125661.279:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 644.187218][ T26] audit: type=1326 audit(1780125661.279:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 644.306918][ T26] audit: type=1326 audit(1780125661.279:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.8.1309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc8d79ce59 code=0x7ffc0000 [ 644.684440][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 644.890780][T10048] fuse: Bad value for 'fd' [ 645.485107][T10055] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 645.749076][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 645.788724][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 645.851632][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 645.869046][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 645.967807][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1321'. [ 646.503024][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 646.523087][ T4319] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 646.843749][ T4319] usb 9-1: Using ep0 maxpacket: 8 [ 646.854042][ T4319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 646.888141][ T4319] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 646.916490][ T4319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.948435][ T4319] usb 9-1: config 0 descriptor?? [ 647.175308][ T4319] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 647.572439][T10091] netlink: 'syz.8.1324': attribute type 1 has an invalid length. [ 647.594062][T10091] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1324'. [ 647.615453][ T4417] usb 9-1: USB disconnect, device number 6 [ 649.283631][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 649.283651][ T26] audit: type=1326 audit(1780125666.169:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.2.1330" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 649.326985][ T26] audit: type=1326 audit(1780125666.169:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.2.1330" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 649.351214][ T26] audit: type=1326 audit(1780125666.339:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.2.1330" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 649.563425][ T26] audit: type=1326 audit(1780125666.339:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.2.1330" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 649.563609][ T26] audit: type=1326 audit(1780125666.339:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.2.1330" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 649.563770][ T26] audit: type=1326 audit(1780125666.479:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.2.1330" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 650.128884][T10122] tty tty39: ldisc open failed (-12), clearing slot 38 [ 654.514003][T10192] input: syz1 as /devices/virtual/input/input23 [ 656.463094][ T4318] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 656.525629][T10227] binder: 10198:10227 ioctl c0306201 0 returned -14 [ 656.663174][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 656.985279][ T4318] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 657.023893][ T4318] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 657.060129][ T4318] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 657.086567][ T4318] usb 5-1: config 1 has no interface number 0 [ 657.108891][ T4318] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 657.306063][ T4318] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 657.384692][ T4318] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 657.404215][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.434330][ T4318] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 657.619973][T10235] can0: slcan on ttyS3. [ 657.659114][ T4318] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 660.252009][ T126] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 660.263717][ T4318] usb 5-1: USB disconnect, device number 17 [ 660.316736][ T4318] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 660.744221][T10233] can0 (unregistered): slcan off ttyS3. [ 660.939442][T10274] netlink: 'syz.9.1369': attribute type 1 has an invalid length. [ 660.986498][T10274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.037811][T10274] bond1: (slave geneve2): making interface the new active one [ 661.080949][T10274] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 661.130505][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 662.183187][ T4417] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 662.423270][ T4417] usb 10-1: Using ep0 maxpacket: 32 [ 662.437846][ T4417] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 662.559400][ T4417] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 662.641315][ T4417] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 662.682997][ T4417] usb 10-1: config 1 has no interface number 0 [ 662.699997][ T4417] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 662.728228][ T4417] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 662.782421][ T4417] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 662.803170][ T4417] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.904051][ T4417] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 663.062320][ T4417] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 663.487947][ T4320] usb 10-1: USB disconnect, device number 4 [ 663.597071][ T4320] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 664.393776][T10342] netlink: 'syz.9.1383': attribute type 1 has an invalid length. [ 664.418932][T10342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.561234][T10349] device syzkaller0 entered promiscuous mode [ 667.020722][T10372] capability: warning: `syz.4.1391' uses 32-bit capabilities (legacy support in use) [ 667.348455][T10384] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 667.467938][T10384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.523141][ T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 667.532030][T10389] bond1: (slave geneve2): making interface the new active one [ 667.561323][T10389] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 667.574398][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 667.743041][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 667.750573][ T126] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 667.786102][ T126] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 667.810841][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 667.826281][ T126] usb 3-1: config 1 has no interface number 0 [ 667.832773][ T126] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.857194][ T126] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 667.912338][ T126] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 668.368003][ T26] audit: type=1326 audit(1780125685.899:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 668.472293][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.786974][ T26] audit: type=1326 audit(1780125685.899:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 668.851550][ T126] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 669.044046][ T126] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 669.075507][ T26] audit: type=1326 audit(1780125685.999:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f647975d68e code=0x7ffc0000 [ 669.498504][ T126] usb 3-1: USB disconnect, device number 8 [ 669.595678][ T126] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 669.787843][ T26] audit: type=1326 audit(1780125685.999:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 669.885002][ T26] audit: type=1326 audit(1780125685.999:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 669.920262][ T26] audit: type=1326 audit(1780125685.999:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 670.102661][ T26] audit: type=1326 audit(1780125685.999:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 671.003488][ T26] audit: type=1326 audit(1780125685.999:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 671.185803][ T26] audit: type=1326 audit(1780125685.999:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 671.419465][ T26] audit: type=1326 audit(1780125685.999:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.4.1397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 672.141252][T10436] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 672.292548][T10436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 674.805020][T10485] can0: slcan on ttyS3. [ 675.584289][T10495] ieee802154 phy0 wpan0: encryption failed: -22 [ 675.642213][T10498] ieee802154 phy0 wpan0: encryption failed: -22 [ 675.663656][T10482] can0 (unregistered): slcan off ttyS3. [ 675.848505][T10503] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 675.916668][T10503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 675.951884][T10506] bond1: (slave geneve2): making interface the new active one [ 676.006368][T10506] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 676.015755][ T33] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 676.025817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 676.214851][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.253414][ T33] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 676.280743][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.330921][ T33] usb 3-1: config 0 descriptor?? [ 677.416894][ T33] usbhid 3-1:0.0: can't add hid device: -71 [ 677.453120][ T33] usbhid: probe of 3-1:0.0 failed with error -71 [ 677.529372][ T33] usb 3-1: USB disconnect, device number 9 [ 678.203200][ T33] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 678.423650][ T33] usb 3-1: Using ep0 maxpacket: 32 [ 678.515595][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.563633][ T33] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 678.605136][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.671351][ T33] usb 3-1: config 0 descriptor?? [ 678.833321][ T33] usb 3-1: can't set config #0, error -71 [ 678.845227][ T33] usb 3-1: USB disconnect, device number 10 [ 679.393066][ T33] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 679.589024][ T33] usb 3-1: Using ep0 maxpacket: 32 [ 679.861780][T10541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.879437][ T33] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 680.037008][ T33] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 680.079156][ T33] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 680.121282][ T33] usb 3-1: config 1 has no interface number 0 [ 680.146984][ T33] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 680.176507][ T33] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 680.191477][ T33] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 680.211524][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.451385][ T33] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 681.590297][ T33] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 682.297999][ T33] usb 3-1: USB disconnect, device number 11 [ 682.485021][ T33] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 685.386272][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.392668][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.315569][T10593] netlink: 'syz.3.1444': attribute type 2 has an invalid length. [ 687.690408][T10603] device syzkaller0 entered promiscuous mode [ 688.333057][ T4375] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 688.523422][ T4375] usb 9-1: Using ep0 maxpacket: 32 [ 688.531603][ T4375] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 688.591902][ T4375] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 688.668657][ T4375] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 688.763100][ T4375] usb 9-1: config 1 has no interface number 0 [ 688.815108][ T4375] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.193254][ T4375] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 689.405770][ T4375] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 689.470741][ T4375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.541286][ T4375] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 689.740592][ T4375] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 690.120686][T10647] CIFS: iocharset name too long [ 690.160648][ T4375] usb 9-1: USB disconnect, device number 7 [ 690.172119][ T4375] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 690.182256][T10653] netlink: 'syz.2.1460': attribute type 2 has an invalid length. [ 694.113691][T10701] 9pnet_virtio: no channels available for device syz [ 694.311479][T10711] CIFS: iocharset name too long [ 697.013139][ T4375] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 697.233600][ T4375] usb 10-1: Using ep0 maxpacket: 32 [ 697.241147][ T4375] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 697.271688][ T4375] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 697.303033][ T4375] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 697.332635][ T4375] usb 10-1: config 1 has no interface number 0 [ 697.353146][ T4375] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.384899][ T4375] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 697.423912][ T4375] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 697.453026][ T4375] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.530529][ T4375] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 697.733930][ T4375] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 698.803842][ T4417] snd_usb_pod 10-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 698.834009][ T4375] usb 10-1: USB disconnect, device number 5 [ 698.863257][ T4375] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 698.879251][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 698.879266][ T26] audit: type=1326 audit(1780125716.409:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 699.075712][ T26] audit: type=1326 audit(1780125716.449:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ee855d68e code=0x7ffc0000 [ 699.209513][ T26] audit: type=1326 audit(1780125716.449:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 699.282276][ T26] audit: type=1326 audit(1780125716.449:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 699.306772][ T26] audit: type=1326 audit(1780125716.449:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 699.346735][ T26] audit: type=1326 audit(1780125716.449:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 699.882770][ T26] audit: type=1326 audit(1780125716.449:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 699.912407][ T26] audit: type=1326 audit(1780125716.449:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 699.937313][ T26] audit: type=1326 audit(1780125716.449:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 699.962212][ T26] audit: type=1326 audit(1780125716.449:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ee859ce59 code=0x7ffc0000 [ 704.614415][T10834] CIFS: iocharset name too long [ 704.793267][T10831] device syzkaller0 entered promiscuous mode [ 706.272688][T10866] binder_alloc: 10865: binder_alloc_buf, no vma [ 706.729624][T10877] syz.4.1518 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 709.252400][T10896] CIFS: iocharset name too long [ 710.069093][T10919] binder_alloc: 10916: binder_alloc_buf, no vma [ 713.290412][T10973] CIFS: iocharset name too long [ 713.762586][T10980] binder_alloc: 10979: binder_alloc_buf, no vma [ 716.373164][ T3042] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 716.563075][ T3042] usb 3-1: Using ep0 maxpacket: 32 [ 716.571490][ T3042] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 716.625516][ T3042] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 716.738417][ T3042] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 716.835959][ T3042] usb 3-1: config 1 has no interface number 0 [ 716.908598][ T3042] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.957930][ T3042] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 716.995233][T11031] netlink: 'syz.9.1553': attribute type 2 has an invalid length. [ 717.015679][ T3042] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 717.058706][ T3042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.104042][ T3042] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 717.292390][ T3042] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 717.723825][T11049] CIFS: iocharset name too long [ 717.740134][ T4417] usb 3-1: USB disconnect, device number 12 [ 718.440626][ T4417] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 719.149847][T11068] overlayfs: failed to resolve './file1': -2 [ 720.058789][T11090] CIFS: iocharset name too long [ 721.165009][T11103] netlink: 'syz.3.1572': attribute type 2 has an invalid length. [ 721.626202][T11115] binder_alloc: 11114: binder_alloc_buf, no vma [ 722.620788][T11130] CIFS: iocharset name too long [ 724.605397][T11167] binder_alloc: 11165: binder_alloc_buf, no vma [ 724.836992][T11173] netlink: 'syz.2.1590': attribute type 2 has an invalid length. [ 724.999715][T11180] binder: BINDER_SET_CONTEXT_MGR already set [ 725.031208][T11180] binder: 11178:11180 ioctl 4018620d 200000000040 returned -16 [ 728.011141][T11194] CIFS: iocharset name too long [ 728.258267][T11208] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 729.334049][T11218] device syzkaller0 entered promiscuous mode [ 729.929086][T11238] netlink: 'syz.2.1607': attribute type 2 has an invalid length. [ 729.966672][T11239] binder: BINDER_SET_CONTEXT_MGR already set [ 729.992969][T11239] binder: 11237:11239 ioctl 4018620d 200000000040 returned -16 [ 730.246286][T11244] CIFS: iocharset name too long [ 732.120617][T11263] netlink: 'syz.9.1612': attribute type 1 has an invalid length. [ 732.992815][T11263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 733.359640][T11282] device syzkaller0 entered promiscuous mode [ 733.583263][T11294] CIFS: iocharset name too long [ 734.156413][T11303] netlink: 'syz.4.1625': attribute type 2 has an invalid length. [ 735.674756][T11339] netlink: 'syz.9.1632': attribute type 1 has an invalid length. [ 736.358667][T11339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 737.044624][T11358] device syzkaller0 entered promiscuous mode [ 738.593351][T11396] binder: BINDER_SET_CONTEXT_MGR already set [ 738.609424][T11396] binder: 11395:11396 ioctl 4018620d 200000000040 returned -16 [ 738.775904][T11402] binder: BINDER_SET_CONTEXT_MGR already set [ 738.789633][T11402] binder: 11401:11402 ioctl 4018620d 200000000040 returned -16 [ 739.235692][T11418] CIFS: iocharset name too long [ 740.441615][T11428] device syzkaller0 entered promiscuous mode [ 740.950595][T11441] binder: BINDER_SET_CONTEXT_MGR already set [ 740.960932][T11441] binder: 11439:11441 ioctl 4018620d 200000000040 returned -16 [ 742.083121][ T4259] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 742.273150][ T4259] usb 4-1: Using ep0 maxpacket: 32 [ 742.490560][ T4259] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 742.614307][ T4259] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 742.932705][ T4259] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 742.993395][ T4259] usb 4-1: config 1 has no interface number 0 [ 742.999600][ T4259] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.255336][ T4259] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 743.268625][ T4259] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 743.279054][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.191832][ T4259] usb 4-1: can't set config #1, error -71 [ 745.205600][ T4259] usb 4-1: USB disconnect, device number 5 [ 745.467914][T11490] device syzkaller0 entered promiscuous mode [ 745.533245][T11499] binder: BINDER_SET_CONTEXT_MGR already set [ 745.539477][T11499] binder: 11498:11499 ioctl 4018620d 200000000040 returned -16 [ 747.048300][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.060335][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.747418][T11530] CIFS: iocharset name too long [ 758.726700][T11631] CIFS: iocharset name too long [ 759.319114][T11642] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1701'. [ 762.016778][T11664] device syzkaller0 entered promiscuous mode [ 764.772374][T11695] overlayfs: failed to resolve './file1': -2 [ 764.988424][T11698] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 770.923582][T11718] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1720'. [ 771.893176][ T5966] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 772.113109][ T5966] usb 3-1: Using ep0 maxpacket: 32 [ 772.604664][ T5966] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 772.620499][ T5966] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 772.629642][ T5966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 772.673200][ T5966] usb 3-1: config 1 has no interface number 0 [ 772.679390][ T5966] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 772.753653][ T5966] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 772.797825][ T5966] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 772.811789][T11805] device syzkaller0 entered promiscuous mode [ 772.826003][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.835143][T11807] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1751'. [ 772.869973][ T5966] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 773.070328][ T5966] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 773.499776][ T5966] usb 3-1: USB disconnect, device number 13 [ 773.509249][ T5966] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 776.508030][T11818] netlink: 'syz.8.1753': attribute type 2 has an invalid length. [ 785.422537][T12100] input: syz1 as /devices/virtual/input/input25 [ 785.551527][T12103] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1764'. [ 785.813125][ T5966] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 786.542940][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 786.550011][ T5966] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 786.603280][ T5966] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 786.611964][ T5966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 786.663436][ T5966] usb 5-1: config 1 has no interface number 0 [ 786.669630][ T5966] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 786.804638][ T5966] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 786.894400][ T5966] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 787.188045][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.466884][ T5966] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 787.645194][T12122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1770'. [ 787.661362][ T5966] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 787.918035][T12141] netlink: 'syz.8.1773': attribute type 2 has an invalid length. [ 788.085319][ T5966] usb 5-1: USB disconnect, device number 18 [ 788.097801][ T5966] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 791.523111][ T5966] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 791.618703][T12202] device syzkaller0 entered promiscuous mode [ 791.713250][ T5966] usb 10-1: Using ep0 maxpacket: 32 [ 791.723653][ T5966] usb 10-1: config 0 has no interfaces? [ 791.767001][ T5966] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 791.777058][ T5966] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.795471][ T5966] usb 10-1: config 0 descriptor?? [ 791.833720][ T4417] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 792.009011][ T5966] usb 10-1: USB disconnect, device number 6 [ 792.023502][ T4417] usb 4-1: Using ep0 maxpacket: 32 [ 792.031251][ T4417] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 792.040259][ T4417] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 792.049495][ T4417] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 792.059819][ T4417] usb 4-1: config 1 has no interface number 0 [ 792.084247][ T4417] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.150714][ T4417] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 792.172201][ T4417] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 792.182500][ T4417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.201483][ T4417] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 792.288968][T12215] netlink: 'syz.8.1790': attribute type 2 has an invalid length. [ 792.449583][ T4417] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 793.268150][ T4417] usb 4-1: USB disconnect, device number 6 [ 793.275260][ T4417] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 794.556822][T12245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1797'. [ 794.606846][T12248] device syzkaller0 entered promiscuous mode [ 794.642812][T12249] binder: 12247:12249 ioctl 4018620d 0 returned -22 [ 795.408176][T12276] netlink: 'syz.2.1806': attribute type 2 has an invalid length. [ 795.602976][ T5966] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 795.793090][ T5966] usb 9-1: Using ep0 maxpacket: 32 [ 795.808676][ T5966] usb 9-1: config 0 has no interfaces? [ 795.822377][ T5966] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 795.953820][ T5966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.238022][ T5966] usb 9-1: config 0 descriptor?? [ 796.570467][ T3042] usb 9-1: USB disconnect, device number 8 [ 796.653156][ T126] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 796.693551][T12293] binder: 12292:12293 ioctl 4018620d 0 returned -22 [ 796.863109][ T126] usb 10-1: Using ep0 maxpacket: 32 [ 796.871191][ T126] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 796.893341][ T126] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 796.959224][ T126] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 797.032664][ T126] usb 10-1: config 1 has no interface number 0 [ 797.085972][T12303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1813'. [ 797.151892][ T126] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 797.439730][ T126] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 797.662166][T12307] binder: 12306:12307 ioctl 4018620d 0 returned -22 [ 797.692528][ T126] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 797.778947][ T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.817060][ T126] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 798.068606][ T126] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 798.208157][T12314] device syzkaller0 entered promiscuous mode [ 798.995912][ T3042] usb 10-1: USB disconnect, device number 7 [ 799.002752][ T3042] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 799.738884][T12343] netlink: 'syz.3.1822': attribute type 2 has an invalid length. [ 800.500890][T12349] binder: 12348:12349 ioctl 4018620d 0 returned -22 [ 800.556453][T12351] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1825'. [ 804.783039][ T4338] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 804.813292][T12372] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 804.965460][T12381] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 805.804622][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 805.874175][T12379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.209555][T12410] binder: 12409:12410 ioctl 4018620d 0 returned -22 [ 806.283093][ T126] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 806.458592][T12420] netlink: 'syz.9.1840': attribute type 2 has an invalid length. [ 806.482941][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 806.490859][ T126] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 806.607744][ T126] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 807.374224][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 807.499082][ T126] usb 5-1: config 1 has no interface number 0 [ 807.528821][ T126] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 807.540239][ T126] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 807.561955][ T126] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 807.614260][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1842'. [ 807.626788][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.696423][ T126] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 807.884093][ T126] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 807.985884][T12432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1843'. [ 808.274943][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.281370][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.307513][ T126] usb 5-1: USB disconnect, device number 19 [ 808.321227][ T126] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 808.363231][ T22] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 808.552979][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 808.561069][ T22] usb 3-1: config 0 has no interfaces? [ 808.577360][ T22] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 808.622661][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.706082][ T22] usb 3-1: config 0 descriptor?? [ 808.898436][T12449] netlink: 'syz.9.1848': attribute type 1 has an invalid length. [ 808.939507][ T22] usb 3-1: USB disconnect, device number 15 [ 809.050484][T12449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.010219][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1848'. [ 811.640908][T12475] netlink: 'syz.3.1854': attribute type 2 has an invalid length. [ 811.890762][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1856'. [ 813.232061][T12497] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 813.335041][T12497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 814.012552][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 814.012678][ T26] audit: type=1326 audit(1780125831.519:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 814.045325][ T26] audit: type=1326 audit(1780125831.519:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 814.097288][ T26] audit: type=1326 audit(1780125831.519:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bfe35d68e code=0x7ffc0000 [ 814.208244][ T26] audit: type=1326 audit(1780125831.519:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 814.416375][ T26] audit: type=1326 audit(1780125831.519:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 814.483017][ T22] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 814.542516][ T26] audit: type=1326 audit(1780125831.519:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 814.668297][ T26] audit: type=1326 audit(1780125831.529:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 814.722975][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 814.729900][ T26] audit: type=1326 audit(1780125831.529:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 816.317071][ T22] usb 5-1: config 0 has no interfaces? [ 816.322650][ T22] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 816.433026][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.473065][ T26] audit: type=1326 audit(1780125831.529:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 816.499322][ T22] usb 5-1: config 0 descriptor?? [ 816.640943][ T26] audit: type=1326 audit(1780125831.529:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.3.1865" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfe39ce59 code=0x7ffc0000 [ 816.783032][ T22] usb 5-1: USB disconnect, device number 20 [ 818.078053][T12551] netlink: 'syz.4.1872': attribute type 2 has an invalid length. [ 818.117845][T12556] overlayfs: missing 'lowerdir' [ 819.333064][T12567] netlink: 'syz.2.1877': attribute type 4 has an invalid length. [ 819.932202][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 819.932217][ T26] audit: type=1326 audit(1780125837.459:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 820.021371][T12583] fuse: Unknown parameter 'fd0x0000000000000007' [ 820.130359][ T26] audit: type=1326 audit(1780125837.459:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 820.257242][ T26] audit: type=1326 audit(1780125837.459:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f647975d68e code=0x7ffc0000 [ 820.393395][ T26] audit: type=1326 audit(1780125837.459:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 820.518752][ T26] audit: type=1326 audit(1780125837.459:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 820.622636][ T26] audit: type=1326 audit(1780125837.489:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 820.722998][ T4318] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 821.553804][ T26] audit: type=1326 audit(1780125837.499:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 821.633192][ T4318] usb 9-1: Using ep0 maxpacket: 32 [ 821.641406][ T4318] usb 9-1: config 0 has no interfaces? [ 821.672590][ T4318] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 821.712174][ T4318] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.745642][ T26] audit: type=1326 audit(1780125837.499:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 821.789675][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 821.823757][ T4318] usb 9-1: config 0 descriptor?? [ 822.038526][ T4318] usb 9-1: USB disconnect, device number 9 [ 823.828029][ T26] audit: type=1326 audit(1780125837.499:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 823.921657][T12620] overlayfs: missing 'lowerdir' [ 823.967409][ T26] audit: type=1326 audit(1780125837.499:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1879" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647979ce59 code=0x7ffc0000 [ 824.094199][T12622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.173818][T12626] netlink: 'syz.8.1889': attribute type 2 has an invalid length. [ 824.755790][T12636] 9pnet_fd: Insufficient options for proto=fd [ 825.242260][T12634] can0: slcan on ttyS3. [ 825.333261][T12632] can0 (unregistered): slcan off ttyS3. [ 825.389955][T12639] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 825.706196][T12649] binder: BINDER_SET_CONTEXT_MGR already set [ 825.804032][T12649] binder: 12647:12649 ioctl 4018620d 200000000040 returned -16 [ 826.673320][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1898'. [ 826.991684][T12667] overlayfs: missing 'lowerdir' [ 828.167623][T12677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.280282][T12687] netlink: 'syz.8.1904': attribute type 2 has an invalid length. [ 828.826337][T12695] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 829.104209][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1911'. [ 829.252947][ T4338] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 830.152993][ T4338] usb 9-1: Using ep0 maxpacket: 8 [ 830.160098][ T4338] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 830.192126][ T4338] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 830.252487][ T4338] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 830.562240][ T4338] usb 9-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 830.573467][ T4338] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 830.589794][ T4338] usb 9-1: config 168 interface 0 has no altsetting 0 [ 830.611727][ T4338] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 830.630388][ T4338] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 830.673003][ T4338] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 830.685076][ T4338] usb 9-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 830.696292][ T4338] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 830.710114][ T4338] usb 9-1: config 168 interface 0 has no altsetting 0 [ 830.719672][ T4338] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 830.805831][ T4338] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 830.817979][ T4338] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 830.832547][ T4338] usb 9-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 830.843966][ T4338] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 830.860272][ T4338] usb 9-1: config 168 interface 0 has no altsetting 0 [ 830.871007][ T4338] usb 9-1: string descriptor 0 read error: -22 [ 830.877744][ T4338] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 830.887815][ T4338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.907725][ T4338] adutux 9-1:168.0: interrupt endpoints not found [ 832.761886][ T4338] usb 9-1: USB disconnect, device number 10 [ 833.053897][T12733] overlayfs: missing 'lowerdir' [ 833.837507][T12747] netlink: 'syz.2.1919': attribute type 2 has an invalid length. [ 834.978715][T12750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.082494][T12783] overlayfs: missing 'lowerdir' [ 837.581950][ T4288] block nbd9: Receive control failed (result -32) [ 837.594928][T12775] block nbd9: shutting down sockets [ 840.239901][T12819] netlink: 'syz.3.1934': attribute type 2 has an invalid length. [ 840.412979][ T7] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 841.443037][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 841.450109][ T7] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 841.491531][ T7] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 841.562894][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 841.572089][ T7] usb 5-1: config 1 has no interface number 0 [ 841.604693][T12835] binder: 12834:12835 ioctl c0306201 0 returned -14 [ 841.637327][ T7] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 841.713183][ T7] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 842.377877][ T7] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 842.439916][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.619646][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 842.818097][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 843.232097][ T7] usb 5-1: USB disconnect, device number 21 [ 843.258257][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 843.292527][T12852] overlayfs: missing 'lowerdir' [ 845.307760][T12867] device syzkaller0 entered promiscuous mode [ 847.714574][T12898] binder: 12896:12898 ioctl c0306201 0 returned -14 [ 847.998560][T12902] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 848.495172][T10806] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 848.682962][T10806] usb 10-1: Using ep0 maxpacket: 32 [ 848.689878][T10806] usb 10-1: config 0 has no interfaces? [ 848.709421][T10806] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 848.752684][T10806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.782592][T10806] usb 10-1: config 0 descriptor?? [ 849.797391][ T3042] usb 10-1: USB disconnect, device number 8 [ 855.084787][T12890] netlink: 'syz.8.1951': attribute type 2 has an invalid length. [ 855.093813][T12960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1968'. [ 855.716418][ T126] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 857.552956][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 857.561244][ T126] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 857.671744][ T126] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 857.680537][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 857.689585][ T126] usb 5-1: config 1 has no interface number 0 [ 857.695867][ T126] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.706889][ T126] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 857.732969][ T126] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 857.799846][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.990789][ T126] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 858.155235][ T126] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 858.424644][ T4338] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 858.577842][ T126] usb 5-1: USB disconnect, device number 22 [ 858.723089][ T4338] usb 3-1: Using ep0 maxpacket: 32 [ 859.291773][ T4338] usb 3-1: config 0 has no interfaces? [ 859.303348][ T126] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 859.333100][ T4338] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 859.392946][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.450773][ T4338] usb 3-1: config 0 descriptor?? [ 859.780094][ T3042] usb 3-1: USB disconnect, device number 16 [ 860.671394][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1981'. [ 860.915087][T13027] netlink: 'syz.2.1983': attribute type 2 has an invalid length. [ 861.336170][T13037] overlayfs: missing 'lowerdir' [ 968.862823][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 968.869887][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13013/1:b..l P13068/1:b..l [ 968.879589][ C0] (detected by 0, t=10503 jiffies, g=75229, q=88 ncpus=2) [ 968.886786][ C0] task:cmp state:R running task stack:24048 pid:13068 ppid:13008 flags:0x00004002 [ 968.898568][ C0] Call Trace: [ 968.901946][ C0] [ 968.904929][ C0] __schedule+0x11d1/0x40e0 [ 968.909539][ C0] ? do_syscall_64+0x4c/0xa0 [ 968.914158][ C0] ? __sched_text_start+0x8/0x8 [ 968.919019][ C0] ? lock_chain_count+0x20/0x20 [ 968.923897][ C0] ? lock_chain_count+0x20/0x20 [ 968.928766][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 968.934071][ C0] preempt_schedule_irq+0xbb/0x160 [ 968.939195][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 968.944929][ C0] ? rcu_is_watching+0x11/0xa0 [ 968.949764][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 968.955589][ C0] irqentry_exit+0x63/0x70 [ 968.960037][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 968.966017][ C0] RIP: 0010:mt_validate+0x2ced/0x4cb0 [ 968.971454][ C0] Code: 09 fa 66 f7 85 db 0f 84 df 00 00 00 e8 9c f6 66 f7 49 bf 00 00 00 00 00 fc ff df e9 f2 00 00 00 e8 88 f6 66 f7 b8 50 00 00 00 <49> 01 c7 4c 8b ac 24 00 01 00 00 48 8b 04 24 49 8d 1c c7 48 89 d8 [ 968.991100][ C0] RSP: 0018:ffffc900046d71a0 EFLAGS: 00000246 [ 968.997205][ C0] RAX: 0000000000000080 RBX: ffffffff8bb1aae8 RCX: dffffc0000000000 [ 969.005176][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 969.013154][ C0] RBP: ffffc900046d7350 R08: ffff88802c57bb80 R09: 0000000000000004 [ 969.021128][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 969.029102][ C0] R13: 0000000000000001 R14: 0000000000000005 R15: ffff88801d2b5000 [ 969.037096][ C0] ? mt_validate+0x110/0x4cb0 [ 969.041812][ C0] ? mt_cache_shrink+0x20/0x20 [ 969.046598][ C0] validate_mm_mt+0xe2/0x440 [ 969.051293][ C0] ? __split_vma+0x500/0x500 [ 969.055902][ C0] validate_mm+0xe1/0x2e0 [ 969.060242][ C0] ? vma_expand+0x880/0x880 [ 969.064760][ C0] ? vma_set_page_prot+0x135/0x3a0 [ 969.069887][ C0] mmap_region+0x78a/0x1ca0 [ 969.074408][ C0] ? file_mmap_ok+0x170/0x170 [ 969.079106][ C0] ? cap_mmap_addr+0x165/0x2e0 [ 969.083938][ C0] ? file_mmap_ok+0x11c/0x170 [ 969.088622][ C0] do_mmap+0x964/0xfd0 [ 969.092703][ C0] ? mlock_future_check+0x100/0x100 [ 969.097908][ C0] ? ima_file_free+0x3e0/0x3e0 [ 969.102710][ C0] ? common_file_perm+0x171/0x1c0 [ 969.107775][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 969.112411][ C0] ? account_locked_vm+0xe0/0xe0 [ 969.117358][ C0] ? vm_brk_flags+0x209/0x590 [ 969.122043][ C0] ? vm_mmap+0x66/0xb0 [ 969.126127][ C0] elf_map+0x19e/0x2f0 [ 969.130251][ C0] load_elf_interp+0x46d/0xd40 [ 969.135036][ C0] load_elf_binary+0x1a60/0x2800 [ 969.139987][ C0] ? load_elf_binary+0x871/0x2800 [ 969.145036][ C0] ? load_script+0x850/0x850 [ 969.149633][ C0] ? do_raw_read_unlock+0x39/0x70 [ 969.154693][ C0] ? load_misc_binary+0x60a/0xbe0 [ 969.159837][ C0] bprm_execve+0xaea/0x17e0 [ 969.164413][ C0] ? alloc_bprm+0x730/0x730 [ 969.168932][ C0] do_execveat_common+0x51b/0x6c0 [ 969.173974][ C0] __x64_sys_execve+0x8e/0xa0 [ 969.178664][ C0] do_syscall_64+0x4c/0xa0 [ 969.183091][ C0] ? clear_bhb_loop+0x60/0xb0 [ 969.187783][ C0] ? clear_bhb_loop+0x60/0xb0 [ 969.192471][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.198370][ C0] RIP: 0033:0x7fc38dabf107 [ 969.202810][ C0] RSP: 002b:00007fff4ab5c648 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 969.211243][ C0] RAX: ffffffffffffffda RBX: 0000556d6e86d1a8 RCX: 00007fc38dabf107 [ 969.219234][ C0] RDX: 0000556d6e868e28 RSI: 0000556d6e86d1a8 RDI: 0000556d6e868eb0 [ 969.227228][ C0] RBP: 0000556d6e868eb0 R08: 00007fff4ab60de4 R09: 0000000000000210 [ 969.235201][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000556d6e868e28 [ 969.243192][ C0] R13: 00007fc38dc84e8b R14: 0000556d6e868e28 R15: 0000000000000000 [ 969.251181][ C0] [ 969.254204][ C0] task:syz.8.1977 state:R running task stack:23032 pid:13013 ppid:8537 flags:0x00004000 [ 969.264977][ C0] Call Trace: [ 969.268255][ C0] [ 969.271193][ C0] __schedule+0x11d1/0x40e0 [ 969.275729][ C0] ? __sched_text_start+0x8/0x8 [ 969.280615][ C0] ? preempt_schedule+0xbc/0xd0 [ 969.285478][ C0] preempt_schedule_common+0x82/0xd0 [ 969.290779][ C0] preempt_schedule+0xbc/0xd0 [ 969.295464][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 969.301106][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 969.306147][ C0] preempt_schedule_thunk+0x16/0x18 [ 969.311402][ C0] _raw_spin_unlock+0x36/0x40 [ 969.316100][ C0] filemap_map_pages+0xf06/0x11c0 [ 969.321196][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 969.326249][ C0] ? filemap_map_pages+0x1af/0x11c0 [ 969.331464][ C0] ? filemap_read_folio+0x770/0x770 [ 969.336674][ C0] ? count_memcg_event_mm+0x8a/0x3c0 [ 969.341967][ C0] ? follow_page_pte+0x398/0x16b0 [ 969.347041][ C0] handle_mm_fault+0x2991/0x3ee0 [ 969.351990][ C0] ? numa_migrate_prep+0x250/0x250 [ 969.357123][ C0] __get_user_pages+0x40d/0xec0 [ 969.361994][ C0] ? populate_vma_page_range+0x2b0/0x2b0 [ 969.367653][ C0] ? up_write+0x1bb/0x420 [ 969.371986][ C0] ? get_dump_page+0xe7/0x680 [ 969.376677][ C0] ? down_read_killable+0x1cc/0x340 [ 969.381885][ C0] ? generic_file_write_iter+0x1d9/0x2e0 [ 969.387549][ C0] get_dump_page+0x190/0x680 [ 969.392154][ C0] ? fault_in_readable+0x1f0/0x1f0 [ 969.397280][ C0] ? iov_iter_bvec+0x4a/0x1f0 [ 969.402019][ C0] dump_user_range+0x123/0x850 [ 969.406811][ C0] ? dump_skip+0x40/0x40 [ 969.411068][ C0] ? dump_emit+0x74/0xe0 [ 969.415331][ C0] ? dump_emit+0xa2/0xe0 [ 969.419579][ C0] ? elf_core_dump+0x2a8b/0x35d0 [ 969.424564][ C0] elf_core_dump+0x30a6/0x35d0 [ 969.429347][ C0] ? load_elf_binary+0x2800/0x2800 [ 969.434485][ C0] ? verify_lock_unused+0x140/0x140 [ 969.439691][ C0] ? mas_next_entry+0xe41/0xed0 [ 969.444586][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 969.450064][ C0] ? 0xffffffffff600000 [ 969.454231][ C0] ? getname_kernel+0x142/0x2f0 [ 969.459125][ C0] do_coredump+0x165b/0x22f0 [ 969.463757][ C0] ? nfs_stat_to_errno+0x190/0x190 [ 969.468924][ C0] ? lock_chain_count+0x20/0x20 [ 969.473795][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 969.479006][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 969.484214][ C0] get_signal+0x10aa/0x1350 [ 969.488818][ C0] arch_do_signal_or_restart+0xc4/0x1350 [ 969.494508][ C0] ? _raw_spin_unlock+0x40/0x40 [ 969.499371][ C0] ? get_sigframe_size+0x10/0x10 [ 969.504319][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 969.510320][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 969.515838][ C0] exit_to_user_mode_loop+0x70/0x110 [ 969.521134][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 969.526705][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 969.532186][ C0] exc_page_fault+0x88/0x100 [ 969.536791][ C0] asm_exc_page_fault+0x22/0x30 [ 969.541664][ C0] RIP: 0033:0x7fcc8d79ce61 [ 969.546086][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 969.552156][ C0] RAX: 0000000000000000 RBX: 00007fcc8da16090 RCX: 00007fcc8d79ce59 [ 969.560133][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 969.568108][ C0] RBP: 00007fcc8d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 969.576082][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 969.584056][ C0] R13: 00007fcc8da16128 R14: 00007fcc8da16090 R15: 00007ffdbafcd798 [ 969.592045][ C0] [ 969.595071][ C0] rcu: rcu_preempt kthread starved for 10551 jiffies! g75229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 969.606266][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 969.616234][ C0] rcu: RCU grace-period kthread stack dump: [ 969.622117][ C0] task:rcu_preempt state:R running task stack:27760 pid:16 ppid:2 flags:0x00004000 [ 969.632906][ C0] Call Trace: [ 969.636212][ C0] [ 969.639153][ C0] __schedule+0x11d1/0x40e0 [ 969.643685][ C0] ? __sched_text_start+0x8/0x8 [ 969.648548][ C0] ? __mod_timer+0x91e/0xd00 [ 969.653222][ C0] schedule+0xb9/0x180 [ 969.657315][ C0] schedule_timeout+0x184/0x2d0 [ 969.662176][ C0] ? console_conditional_schedule+0x40/0x40 [ 969.668098][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 969.674047][ C0] ? update_process_times+0x1b0/0x1b0 [ 969.679451][ C0] ? prepare_to_swait_event+0x335/0x350 [ 969.685158][ C0] rcu_gp_fqs_loop+0x303/0x1340 [ 969.690052][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 969.694912][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 969.701073][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 969.706288][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 969.711063][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 969.716968][ C0] ? finish_swait+0xc3/0x1d0 [ 969.721587][ C0] rcu_gp_kthread+0x99/0x3b0 [ 969.726186][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 969.731302][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 969.737202][ C0] ? __kthread_parkme+0x162/0x1c0 [ 969.742299][ C0] kthread+0x29d/0x330 [ 969.746397][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 969.751514][ C0] ? kthread_blkcg+0xd0/0xd0 [ 969.756119][ C0] ret_from_fork+0x1f/0x30 [ 969.760563][ C0] [ 969.763588][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 969.769925][ C0] Sending NMI from CPU 0 to CPUs 1: [ 969.775153][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10