last executing test programs: 3m57.006263558s ago: executing program 3 (id=1016): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000097000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa4ba, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xb, 0x0, 0x0, 0xd, 0x73, &(0x7f0000000340)=""/115, 0x40f00, 0x79, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0xe, 0x3, 0x800}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) r5 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) 3m54.833494451s ago: executing program 3 (id=1022): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x1f}, &(0x7f00000000c0)=0x8) 3m54.673039411s ago: executing program 3 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x2}) 3m53.040603717s ago: executing program 3 (id=1030): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, &(0x7f0000000180)='\x00', 0x160) 3m52.80581278s ago: executing program 3 (id=1034): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x30, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3m50.801480054s ago: executing program 3 (id=1037): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000680)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) fchdir(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000005288bda0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0xd0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x289e0cb5, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="33a4bfa1c7ca0a7e0c9807a6f245d46884a4a96722a6b6af28f94fc57aa13201dc4abf70d4ef5f5b9e7b", @ANYBLOB="74a3f1cf3bec369e8fd2be2626aac5fb9306b245063926142d284d52bae4e58a06641129ebaafe2432f254d54a7d018dc8cb38deaa9ad107", @ANYRES8=r5, @ANYRES64=r2, @ANYBLOB="b05d796020b1ba3325fd8017310ba613f8ab46e7b8b238a01539f5813cb0e4be772954355a820ed0c5e2f7351a68625c040d9c5da2765f3497d61b4bd5672d9afa60117b55dec4214292ccb116864b60acb7767fc37a5060f0ed6ba0cca2d925cd96befda25dea62425ba8b0d6fadd5e7667c728b031ff0d8afa6d124fd768680e90427eb28b3a55347d2b5fffbdcbc46c4c4cc0b36d331a13a1eaf6647d2bb3d600"/173], 0x0, 0x1000, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="38000300010003", 0x7) prctl$PR_SCHED_CORE(0x1f, 0x0, 0x0, 0x0, 0x0) 3m49.433009323s ago: executing program 32 (id=1037): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000680)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) fchdir(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000005288bda0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0xd0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x289e0cb5, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="33a4bfa1c7ca0a7e0c9807a6f245d46884a4a96722a6b6af28f94fc57aa13201dc4abf70d4ef5f5b9e7b", @ANYBLOB="74a3f1cf3bec369e8fd2be2626aac5fb9306b245063926142d284d52bae4e58a06641129ebaafe2432f254d54a7d018dc8cb38deaa9ad107", @ANYRES8=r5, @ANYRES64=r2, @ANYBLOB="b05d796020b1ba3325fd8017310ba613f8ab46e7b8b238a01539f5813cb0e4be772954355a820ed0c5e2f7351a68625c040d9c5da2765f3497d61b4bd5672d9afa60117b55dec4214292ccb116864b60acb7767fc37a5060f0ed6ba0cca2d925cd96befda25dea62425ba8b0d6fadd5e7667c728b031ff0d8afa6d124fd768680e90427eb28b3a55347d2b5fffbdcbc46c4c4cc0b36d331a13a1eaf6647d2bb3d600"/173], 0x0, 0x1000, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="38000300010003", 0x7) prctl$PR_SCHED_CORE(0x1f, 0x0, 0x0, 0x0, 0x0) 19.08911817s ago: executing program 5 (id=1817): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x44010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() stat(0x0, &(0x7f00000006c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 19.045150839s ago: executing program 4 (id=1818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r7, 0x701}, 0x14}}, 0x0) 16.31164379s ago: executing program 5 (id=1821): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)={0x30, r4, 0x301, 0x0, 0x400000, {{0x5}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xa7, 0x27}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x6040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x28040085) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$packet_buf(r7, 0x107, 0x5, &(0x7f00000004c0)=""/163, &(0x7f0000000040)=0xa3) userfaultfd(0x80001) r8 = timerfd_create(0x7, 0x80000) timerfd_gettime(r8, &(0x7f0000000200)) 16.029803521s ago: executing program 4 (id=1823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0xd, 0x18, 0x0, 0x100, 0x9, 0x9, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0xa, 0x8a, 0x7, 0x13, 0x33, '\x00', 0x8, 0x4}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000680)={0x2, 0x0, @ioapic={0xdddd0000, 0x2, 0x5, 0x4, 0x0, [{0x4, 0x85, 0x7, '\x00', 0x7}, {0x2, 0x80, 0x0, '\x00', 0x8}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x2, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x3, '\x00', 0x2}, {0x5, 0x1, 0x7, '\x00', 0x1}, {0xf0, 0x7, 0xf7, '\x00', 0xf3}, {0x0, 0xe, 0x40, '\x00', 0x5}, {0x80, 0x34, 0x3, '\x00', 0xd}, {0x96, 0x0, 0x2, '\x00', 0xf}, {0xbe, 0x1, 0x4, '\x00', 0x6}, {0x8, 0x5, 0xe, '\x00', 0x7f}, {0xa6, 0x0, 0x11, '\x00', 0x18}, {0x19, 0x8, 0x0, '\x00', 0x2}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0x0, 0x9, '\x00', 0x2}, {0x5, 0x8, 0x81}, {0xb0, 0x7, 0x80, '\x00', 0x2}, {0xfd, 0x0, 0x5, '\x00', 0x7f}, {0x2, 0x3, 0xe5, '\x00', 0x2}, {0xe, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xc, '\x00', 0x1}, {0x6, 0x11, 0x5}, {0x5, 0x9, 0x1, '\x00', 0x8}]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x8301, 0x0) 13.697063523s ago: executing program 1 (id=1825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000040)={0xb}) 12.953332041s ago: executing program 5 (id=1826): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100060}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000000c0)=0xc, 0x4) sendmmsg$inet6(r3, &(0x7f0000004880)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000003c0)="a4de72125546e578", 0x8}, {&(0x7f0000000000)="5ccacfca73", 0x5}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x100, 0x0) 11.35689902s ago: executing program 4 (id=1829): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000680)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000005288bda0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0xd0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="33a4bfa1c7ca0a7e0c9807a6f245d46884a4a96722a6b6af28f94fc57aa13201dc4abf70d4ef5f5b9e7b", @ANYBLOB="74a3f1cf3bec369e8fd2be2626aac5fb9306b245063926142d284d52bae4e58a06641129ebaafe2432f254d54a7d018dc8cb38deaa9ad107", @ANYRES8=r6, @ANYRES64=r2, @ANYBLOB="b05d796020b1ba3325fd8017310ba613f8ab46e7b8b238a01539f5813cb0e4be772954355a820ed0c5e2f7351a68625c040d9c5da2765f3497d61b4bd5672d9afa60117b55dec4214292ccb116864b60acb7767fc37a5060f0ed6ba0cca2d925cd96befda25dea62425ba8b0d6fadd5e7667c728b031ff0d8afa6d124fd768680e90427eb28b3a55347d2b5fffbdcbc46c4c4cc0b36d331a13a1eaf6647d2bb3d600"/173], 0x0, 0x1000, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="38000300010003", 0x7) prctl$PR_SCHED_CORE(0x1f, 0x0, 0x0, 0x0, 0x0) 11.356207299s ago: executing program 5 (id=1830): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote}}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x0, r6}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6}, 0x10) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) 11.217630478s ago: executing program 0 (id=1832): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r\x00'], 0x8) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="6115033a2a"], 0x8) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000002380)={0xa, 0x4e23, 0x59, @loopback, 0x2}, 0x1c) mount$pvfs2(&(0x7f00000001c0), 0x0, &(0x7f0000000300), 0x20, &(0x7f0000000280)={[{'#'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '++'}}]}) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x2000) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8.817432641s ago: executing program 2 (id=1833): socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xa89) 8.78568743s ago: executing program 4 (id=1834): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xf, 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.63054449s ago: executing program 1 (id=1835): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x4f4e, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 8.264794474s ago: executing program 2 (id=1836): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x5890c0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x480a}}, 0x20}, 0x1, 0x2}, 0x240000c4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) 7.627292437s ago: executing program 0 (id=1837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@private=0xa010101, @multicast1, 0x0, "2634784b05261d78b092f1d1f2669e6c7c2effe3ff0000000000012000", 0x0, 0x0, 0x5}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$llc(0x1a, 0x3, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/202) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000240)=0x2, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@none, 0x1, 0x9, "82e33e", 0x9, 0x2}, {@any, 0x60, 0x3, "964f1a", 0x71e6, 0xe4}]}}}, 0x20) 7.503364053s ago: executing program 4 (id=1838): r0 = socket(0x2b, 0x80801, 0x1) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x210102, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x453, 0x4, 0x70bd2d, 0xa0000000, "af"}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_open_procfs(0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) 7.382412593s ago: executing program 1 (id=1839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) 6.686190563s ago: executing program 2 (id=1840): capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setpriority(0x2, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000500), &(0x7f00000002c0)=r4}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 6.677418748s ago: executing program 0 (id=1841): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 6.409213559s ago: executing program 2 (id=1842): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000008540), 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x70) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40084503, &(0x7f0000ffcffc)) 5.58002273s ago: executing program 1 (id=1843): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x1, 0xffffffffffffff2f, 0x10}, @generic={0x4, 0x3, 0xb, 0x5, 0x5eb1}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x9, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x5, 0x4, 0x1, 0x7}, {0x4, 0x4, 0x1, 0x6}], 0x10, 0x1000, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000580)=r4, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r3, &(0x7f0000001300), 0x8f) recvmmsg(r3, 0x0, 0x0, 0x40000002, 0x0) writev(r3, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) 5.151160623s ago: executing program 5 (id=1844): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000680)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000005288bda0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0xd0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="33a4bfa1c7ca0a7e0c9807a6f245d46884a4a96722a6b6af28f94fc57aa13201dc4abf70d4ef5f5b9e7b", @ANYBLOB="74a3f1cf3bec369e8fd2be2626aac5fb9306b245063926142d284d52bae4e58a06641129ebaafe2432f254d54a7d018dc8cb38deaa9ad107", @ANYRES8=r6, @ANYRES64=r2, @ANYBLOB="b05d796020b1ba3325fd8017310ba613f8ab46e7b8b238a01539f5813cb0e4be772954355a820ed0c5e2f7351a68625c040d9c5da2765f3497d61b4bd5672d9afa60117b55dec4214292ccb116864b60acb7767fc37a5060f0ed6ba0cca2d925cd96befda25dea62425ba8b0d6fadd5e7667c728b031ff0d8afa6d124fd768680e90427eb28b3a55347d2b5fffbdcbc46c4c4cc0b36d331a13a1eaf6647d2bb3d600"/173], 0x0, 0x1000, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="38000300010003", 0x7) prctl$PR_SCHED_CORE(0x1f, 0x0, 0x0, 0x0, 0x0) 4.86862588s ago: executing program 0 (id=1845): mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, &(0x7f0000002100)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) 4.867975362s ago: executing program 1 (id=1846): socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2.280798042s ago: executing program 2 (id=1847): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r\x00'], 0x8) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="6115033a2a"], 0x8) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000002380)={0xa, 0x4e23, 0x59, @loopback, 0x2}, 0x1c) mount$pvfs2(&(0x7f00000001c0), 0x0, &(0x7f0000000300), 0x20, &(0x7f0000000280)={[{'#'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '++'}}]}) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x2000) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2.280214914s ago: executing program 5 (id=1848): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x6, 0x88, {}, {}, 0x1000, 0x8000000000000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28) open(0x0, 0x143c62, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)='trans=rdma,') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.278091613s ago: executing program 4 (id=1849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1c, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900ef080000000000000000021880000000ff0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 1.85698037s ago: executing program 1 (id=1850): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"1a17924ab218eacb15a3fccf929e2dd2497903c1f853d95b995c65e99449ff953fa11c7723b2149ecdaa7f833f60e13b19a66e963f7e8da4297ebbfdda5b36fb4d01bd02e6c652dc4d99e2cb82c2a1d4a45e4c89ba9994e82f854bbc34a40b3a58aa256c9b4512fbf91b9846446c4909e4ec53982e7d7fd11ee0bdeab0bb4c469c9665dde8cb58f0ca148223b6cc4e2f306cfbeccedec8db5212f2fc4e14f836c68bdace4db1afbde9d463e5ac24567925b5fdf0e3af1a52dbd7669fe9227302c8f635bc2ddbf5bd7dccd7b92a9bd5c7363375a57851c2bc72509f2005f138f5a59cf85e9ddb1c972c89d50806e8941b7059cd3eca77527a7f20af70841b4d6f026614bdbb276a6814cc74d91856b968c5fdb52674d892a90d01ab91841b6811def78bdac9bc6f9df2598569fbdfef75079832b2750801dc83fd1987713c61136ac9e5f2f7e67f302109bb9a7fea75290b506a89a19d7e0e472937a8c9ecfe16ef6eb88c7a88a060756196d55d6a3d3f7cdf9915d22b6b3af69ec55017b821ec0621e8a59414efc2b46977a85846b53ae75a350947afcafbdef7233cc371bc2a6f29c0315b352ac2741c81df534303ddb30a4408db5679d05d245259c245c9d7f861711cc287cfd0462b948512623b921060386c587fd166df29e71ecfc8ed90031e95b2af1406b5ae73f6084e39e88194e3d37dc801982656b5b66342d74100f9f5b8c94c1e91b626bbf426a07b4be91dbdb76a6e40d0b788f89359e462e69bc4499fd4f9aa1e7f0c3f73a996b6ecef606c7651286e1f18a6823eed7191cd542057eaaf09aa32e8ce370c09050278b85fd359b8ca23e66e9d294ec57b3ddd90409d9b1ca28c6993b244f8ca46f6bf478ff22fb1df53e33abdda4b2b1e5cff7de19957bdc8e7ca39e4762204b1f9f33b9375b7282422b91841706751038e42023ba45c1cd0998c1794c1c2a5ff65466189bbb27bcbf01e5a48bfd8b6845f7d5c87d977df4ded5273ebf56b96c50b4eadc44bfaa0994259eeb1031644415fa9d729753d2138b06f9b7b624d9eeb1ef71dfdff0b639078f058c7a070451c4670af0c6eb1202f77be82faba9b6287995066b5f7e59b7967706d8d8c5bde48137e13df537ae54664fe4e8460b1bdf5b92a1dcf39ee1726bc6690d0ac5f799bcfab918c59cb132c45054ba17b8a44d505ad3eaeee95b4275b25b2087da8902552727a1e739014df348cfa3a1102661c35a6a38df6c410f5343577955dd57de5af089e3f1bcdf96d4ef1d5944243470b0ed10616144cccc5cac44e36fefd9441120c5d047867af0ea353da21fc0ae73b78b84d53a62efeb94ea8d441cc698c92fd7b36cf41472d036c5093bbdf943620c29ffa3b21ef4a0bb9274912b046834ee6f855ceadf18fb488040d5829ab6e8bf69a90315f7f84d002ac4e929e9f1010a8486746bd316799ba3a65744980c388202324ba50768c77a8481ba74d135da7507048c82714a8234837b69922126e4084a68f7418bfd26417cade786c7f8185e2492e3b64eb9d2c2c721504c7b4aeb383503f745fd69315c56b5b0158decd1b1606a63366b7e2d2b9124b6efca4480c703c8f37d6ddff55b0ec15f2ce6be6c902d06aec2ccabeba13b442b608076c33d19e690ab66cf6678d679758d22fb5d8d963f25d00c45576f8b2938543080297b9cb6c305e3131d2f412f00370c285251909f8ebefc3d18a23e25a183997b08251450b29fff32781e6a70e6e070ab3921f3f809392deb732d6f30cc034b5f77d41218bca86d515b16da0457dbf7aaefdcef9d5358e7b4f1e5d1a410f55449e765609d122f938fd57b71482244dff0523067cabfd322fc47aca1c331112e3d969f5fe3594c3c7adea7c36e9b9af6754cdea5ccf05b139f783d4b24540c50a6a9f7dff472d47c87c151d8439b5740cd1f423335dae2680050bd44766159cba66666b7dbc9e190130494327a0d8c9dbed5c8b831ce2b2bb236353ff7175a48b61a0f3209fa3db44f07a21a485ef1682a33cdf632ac2d6ca993b6cd90913e31704bb851711e1f2b5ebb19baaba102dd42d550933e9dfc17311665fef4d0206d7debbcbbd97efafffb905bf9a77b8eeb67d5f8bef8526f6f8607672bb3c50b14e16c264265594e05fa481f724290abdc9f60a899f26033236e3b90548c24288a7b627b51c4d7c638c359ec6325b0d79e1d69cf18cd9136a263b6aa84ad062b9831fc7c201b7ccec7d3b7ea2132ee4579632bf614bcde285527c36ef8a8e12651ef34a677a8d2f84360afa2f2245e4e0d61a12e8e446045fae61375082f983363795f11848edad24b3f7ae53f0eeb329fa62b6d7b446e3b2c1257981f9c0c3ea371c71021af834a285203b2e3177ddf5251044ea215c048f78701dec36a94ca3c435278d1fd889996adf5ea7c8db62f2b1331bc22c4b7798d587a5c4e619b7b576e19d92996bc0bdc0c8c15374e11b6eeda0e18b35aac4b96db9cdba025080bf5bea4ffdf4fa3c93ec5feede0a140f7f6727ef255783565935d59d348aaa6d12c060afd5f6d084346309d8cbf54b33050ecccf30ae083c4034165880214a94a5296427e2fcb6d90692a82212b6b8d86c6d163f0643944aaba4af1171aed463994f1374e1ec1654b89b04e9d635074e8d131bc2443daf1caad455671470329a287f4c711cb907403d5c05184cd3a647823b5b9c6dc4451fdde92dc1cb87010197026458b40d4809ab60aca1af6bb3702a3e0506cdd21faa6d9909f4ed74723de75fc48d44314fa3cc0c8e8ea226ec1d5875b9595aeacdff0a9f75b4a60dde781c58179f997ecb6479c91ecacc65bfe293a2d26c21ae7c1d7be1241cc1c4ea86a6cf8d93012bd98508aae8db723ff167026298cab227b7d0062c27ccc8e81df7268423ad063638760b44e77147ee9bd84140166ae2bfd592f845ca68c719f7520ae3c9988cc89db73bf93ad6f2f7d9394b2288f0176723acd167081ade4e066a26832f7b655cd874aa5026a7369bb9912c90599d1407f0488a9c540a31997890f5433bd1df91ba13a9e0721c9a707eac7cff1c3efef6cd716779c7ad631c3560caa2031d9d2591329c1867d0d5f96b5897cac2c6a381f0ce5c27969c2b3e7d188e1e896d815b01a3e177933817325953140272ad718a36ae522d43de109ba92255ee66d2a14897f2b2014dc9a495c108727e0eef54df617e269e43a0c48d28a91aaf14d58719e21ea39c1c534e39a1dfabb61377b55d2f69fe79c7d5111b8b952c388925ea8ab1503ae68bce95a34a10a85aa0e5da52add14b93eaac5861a6504e23dda8034e809253c1071ddda934663faac454cd378c5725f5c6f4d943779994357185e512a4b6993156e624f25d86d24e7254d3e9b231aa80ed5a32e108cb528d402f93e58c25ac937420ff7dcd7d9ec2126c7fe7cefa47c038f23de40523d5e026fe3bb4cfd3040f9bd9631cf5a2cde1e20a6032703cd64c2ad97ea95d05a7aa3ea3b3b9d5a86961116dd1338c0a2caae0ceab3178ac7736dfa8a949cd81d261748e6678cb730b57468fb2b7e22c5eb08ad496e76775dce0c31950a596580ad7d6c3fd9ce90dded340f20b77fe53e81fb6e2a7a6c450b8ac9009c7c077893f704457a90401fb758c0769fbfd38e40ae692e410b889bbf0b09a32dc731b6768c0fa3963a5b6279b6a5db611174339f3218fff567f6cfb7377ddc8e2c730da35cc3ec680a6bc95010dd03834caab7afb2c0023ad9ce3aae3c0fd1ece42ea840bf5fc798a0b5fbe7692f13549cdba4a0b68f722ef6877856a76fc3c39f7cfd760675a9f341d9f09f381972be9171e50455ed13e665e61a03b0c2a79276a871c25fc5c486639a71a8dfdf36174373b8995014752aba3026045be6b43074ac3824d687bbf5f6544228cea52791828f54980ee9f728534ea32edd205aaace717adcf61ce28f92719048d44b09812bcfd2d22cc9d7a45ed6b4634756f6b3189908c71728c373ea94aa5c74ce4a73c20138b8cb21db6e2dfb35329b86b1805a5208dd370b8342ca8aa3cbd3e7a3ec79d7b8ee677b04e19c524ddc6de0b22443ac15de908f61719399d0f9890ca2b0283a7db914944f424af10ba0ec9e3e253c060d7b28552eaae5eed1e906f8f93c2195293deabdad6cb38ddab51603e4a96ef1e086de911fb716ffbca467294d9e66e5d0f8225bc28d6c074c4ffba76706f61b0b386b7e4b6500a15fad291f34f6c84f1596a97512f31196a529a7a5725437c038e17d531da3838c8aef3bade6bc1d4c7624560d4fba72e5f8be2c5dc905e1e4bcb2aa7eddb275408ef4288ac69c7a18ae58fb26c2f5a6964f051b81d2e426fc2a5d8617050341b96d5a746e3419fbe94bd3752403868b655c2dba6f48ef109a2e6ec0041842fae52bfab70481ecfe8d27f3d5e444f1b941d871c8057cbe35df68665bc3aadea02d203b106d1179a428daa7d9fea9dbddd8955bb289a92ec790de74cd6a1edf925ab85471633dedf8ba46abe456963a2381addce2aa16c06dd80bb54d8e53d7c82607916af175061da29122afde8687add6b6f42233b76a1164893dcc1ec3dcf935576d2d0f3ab3b1adbace086da915234b4f9bad0afc2915608fc4f6611dc3b91d7e0e48cb0a0f3fdc70ef70ef82043afbd3325f0f6186390ab28ca9f0009184637530d79f0c5a77c6e912afbe6533988f543fc6c02d3d44fbdb0e2ebfad2680184f1ed451991667df958a71fb41cf4367bdb931389ea8b6340e225b312a09dadd8e2ac2d200db6e75323d48c73c6b819e13f92b01bf405e796a2e10b863e773598abcbcc196987e18b19530337809b56480778207103a12acfff1c0ad62846088251a1a0d0d6b300059a99698c84ccac78d53eb32e3984001978db7679960b4d75d71b49696909826c66320526fe02a060265821d15b8b2337121a201402a118ec03ff0d4f3dfa48f2dadd20b510ecdf4e6440b5b2466b9bf28e32327189f0405245694a6371dbe4eae7a8293cdc15193c284123d64690120634f808096a8f3f7a04a5bac9dd86c09f2e4e87c7d7c98d0b370e84ea5f265730f5480eb1375d4f82c7d4efbb6e58c5a92848331b2becd2531f6c456b5d0e690b102dd8faec55bde56f95727f4abf52c58543faaeb9cefd39bba788bd7e2b02b27ecbc1679a1ac00823c83e1ae29690cd25544d3ae0a8db25e963e9fb5bd94987637ac3546b9b312bf04d5c6211c135e806525d423fde9ccb5ef7962ec1e056e6f29adaeebb331f6c234586d1fe21577f56d620c6942a29d4915772144cc60008d1236db21100d5a3112c29396b9e18cdb5b104bed2df2b6ea72c9aa03bb6082f3eb07f0eae359864967a749492d21005b0d39c9613c20b1e21700ab66a4f5ca03ec08d67b95f759252d758743820ba243032e1708447fbaebc27e1316af4cf547cef3ac4966a1f04dd07012f257a0204107c23a0046b12493d9784b24dc561c1f88e591056bcc3b338ab1de65e5ad578021f26f93e9b12f00b5f8c8ae2db6b7b8f254303c7ff06514735974e65fb9a93dc79b115a12310040490ca11ef315340af104e20a2e22dcd132f7d7a61d9d3a12e832ee048a2170dbe03d747ed7402180eb964fde0ecb77e778b18a4e5a83479bb7e0ea0a7d5145ffed4607bd7e6b8f961625d5e3dcac2d4a05e71dc9c2e52195bd55aed4e6749dc1c329e2cda966d18e9bf882c05db627c1047fc71533bbba2c8a83d04db5bad6da349a9ad1992eb88e0274d32a16137e2396ad973c0ecbbc2d243e68b6959bf9b", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.569629847s ago: executing program 0 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 123.204754ms ago: executing program 0 (id=1852): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="840600", @ANYRES16, @ANYBLOB="000108000100ffdb", @ANYRES32=0x0, @ANYBLOB="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"], 0x684}, 0x1, 0x0, 0x0, 0x880}, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x93}, 0xe) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) 0s ago: executing program 2 (id=1853): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1100) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 3952][ T5876] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 323.724100][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 324.495114][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.513354][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.529496][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 324.553320][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.597708][ T5876] usb 4-1: config 0 descriptor?? [ 324.622910][ T5876] hub 4-1:0.0: USB hub found [ 324.864605][ T5876] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 325.861182][ T5876] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 326.092820][ T5876] usb 4-1: USB disconnect, device number 11 [ 326.381104][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 327.040827][ T5876] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 327.164624][ T5873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 327.233363][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 327.242984][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.264223][ T5876] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 327.290020][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.314659][ T52] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 327.314894][ T5876] usb 5-1: config 0 descriptor?? [ 327.354931][ T5873] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 327.365148][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.384287][ T5873] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 327.393710][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 327.401946][ T5873] usb 3-1: Product: syz [ 327.428286][ T5873] usb 3-1: Manufacturer: syz [ 327.432986][ T5873] usb 3-1: SerialNumber: syz [ 327.461169][ T5873] usb 3-1: config 0 descriptor?? [ 327.495193][ T5873] usb 3-1: selecting invalid altsetting 0 [ 327.503434][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 327.512612][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.540211][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.574851][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 327.597256][ T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 327.611513][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.679309][ T52] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 327.721553][ T52] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 327.754487][ T5876] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 327.754661][ T52] usb 4-1: Manufacturer: syz [ 327.761501][ T5876] holtek 0003:1241:5015.0009: item fetching failed at offset 3/5 [ 327.794201][ T52] usb 4-1: config 0 descriptor?? [ 327.817385][ T5876] holtek 0003:1241:5015.0009: parse failed [ 327.825328][ T5873] usb 3-1: USB disconnect, device number 8 [ 327.833484][ T5876] holtek 0003:1241:5015.0009: probe with driver holtek failed with error -22 [ 327.988678][ T5876] usb 5-1: USB disconnect, device number 12 [ 328.123548][ T52] rc_core: IR keymap rc-hauppauge not found [ 328.144673][ T52] Registered IR keymap rc-empty [ 328.150076][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.204848][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.243911][ T52] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 328.294596][ T52] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 328.320458][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.353960][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.447794][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.515480][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.628837][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.817460][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.943348][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.998678][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 329.080093][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 329.107815][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 329.144030][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 329.174136][ T52] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 329.205292][ T52] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 329.233311][ T52] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 329.254720][ T52] usb 4-1: USB disconnect, device number 12 [ 329.373545][ T5903] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 329.554639][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 329.561809][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.575532][ T5903] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.585316][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.598149][ T5903] usb 3-1: config 0 descriptor?? [ 329.626483][ T5873] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 329.694598][ T52] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 329.816919][ T5873] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 329.842654][ T5903] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 329.854558][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 329.861231][ T5873] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 329.881089][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.890501][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 329.901651][ T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 329.921056][ T5873] usb 2-1: config 0 descriptor?? [ 329.931162][ T8290] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 329.940516][ T52] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 329.961554][ T52] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 329.970210][ T52] usb 4-1: Product: syz [ 329.976414][ T52] usb 4-1: Manufacturer: syz [ 329.981135][ T52] usb 4-1: SerialNumber: syz [ 329.994635][ T52] usb 4-1: config 0 descriptor?? [ 330.001150][ T8288] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 330.025295][ T52] hub 4-1:0.0: bad descriptor, ignoring hub [ 330.031323][ T52] hub 4-1:0.0: probe with driver hub failed with error -5 [ 330.060996][ T5903] usb 3-1: USB disconnect, device number 9 [ 330.379779][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 330.604826][ T5903] usb 4-1: USB disconnect, device number 13 [ 330.901379][ T5873] hid (null): unknown global tag 0x13 [ 330.922880][ T5873] hid (null): bogus close delimiter [ 330.991091][ T5873] uclogic 0003:28BD:0078.000A: interface is invalid, ignoring [ 331.008397][ T8299] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 331.009623][ T12] bond0: (slave bond_slave_0): interface is now down [ 331.055476][ T5873] usb 2-1: USB disconnect, device number 8 [ 331.061824][ T12] bond0: (slave bond_slave_1): interface is now down [ 331.108272][ T12] bond0: now running without any active interface! [ 331.528637][ T8304] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.556111][ T5872] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5872 comm: kworker/0:3) [ 331.784700][ T52] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 332.907375][ T52] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 332.924995][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.933060][ T52] usb 4-1: Product: syz [ 332.965389][ T52] usb 4-1: Manufacturer: syz [ 332.970632][ T52] usb 4-1: SerialNumber: syz [ 333.000342][ T52] usb 4-1: config 0 descriptor?? [ 333.908558][ T8334] usb usb8: usbfs: process 8334 (syz.4.779) did not claim interface 0 before use [ 334.245210][ T52] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 334.249457][ T8341] serio: Serial port ptm0 [ 334.283311][ T52] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 334.314024][ T52] asix 4-1:0.0: probe with driver asix failed with error -71 [ 334.342169][ T52] usb 4-1: USB disconnect, device number 14 [ 334.394658][ T975] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 334.574404][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 334.588348][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.619045][ T975] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.658944][ T975] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.690664][ T975] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.702518][ T975] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 334.733289][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.754701][ T975] usb 3-1: config 0 descriptor?? [ 335.188035][ T975] kye 0003:0458:0153.000B: unexpected long global item [ 335.228973][ T975] kye 0003:0458:0153.000B: parse failed [ 335.287817][ T975] kye 0003:0458:0153.000B: probe with driver kye failed with error -22 [ 335.467301][ T5872] usb 3-1: USB disconnect, device number 10 [ 335.786093][ T5837] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 335.913867][ T978] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 336.073619][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 336.083738][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 336.101482][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 336.120777][ T978] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 336.130893][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.192304][ T978] usb 5-1: Product: syz [ 336.209918][ T978] usb 5-1: Manufacturer: syz [ 336.223931][ T978] usb 5-1: SerialNumber: syz [ 336.240366][ T978] usb 5-1: config 0 descriptor?? [ 336.284327][ T978] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 336.300171][ T978] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 336.390078][ T8385] kernel read not supported for file /rmdF¼ì (pid: 8385 comm: syz.3.800) [ 336.401500][ T30] audit: type=1800 audit(1742625302.700:10): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.800" name=726D64461716BCEC dev="mqueue" ino=18265 res=0 errno=0 [ 336.462317][ T975] kernel read not supported for file /rmdF¼ì (pid: 975 comm: kworker/1:2) [ 336.503506][ T52] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 336.877114][ T978] em28xx 5-1:0.0: chip ID is em28174 [ 336.884534][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 336.918369][ T52] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 336.929183][ T52] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 336.945113][ T52] usb 1-1: config 0 has no interface number 0 [ 336.951526][ T52] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.991508][ T52] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 337.019170][ T52] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 337.263125][ T5837] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 337.292029][ T52] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 337.303420][ T52] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 337.311614][ T52] usb 1-1: Product: syz [ 337.356978][ T52] usb 1-1: config 0 descriptor?? [ 337.370750][ T8383] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 337.613531][ T5872] usb 5-1: USB disconnect, device number 13 [ 337.620335][ T5872] em28xx 5-1:0.0: Disconnecting em28xx [ 337.659525][ T5872] em28xx 5-1:0.0: Freeing device [ 337.733385][ T8401] Illegal XDP return value 96 on prog (id 141) dev syz_tun, expect packet loss! [ 337.857599][ T8405] @: renamed from vlan0 (while UP) [ 338.221738][ T52] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input13 [ 338.731376][ T978] usb 1-1: USB disconnect, device number 9 [ 338.731527][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 339.215646][ T8424] syz.1.814 uses obsolete (PF_INET,SOCK_PACKET) [ 339.494478][ T5873] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 339.715077][ T5837] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 339.767815][ T8435] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 339.782823][ T5873] usb 3-1: config 7 has an invalid interface number: 34 but max is 0 [ 339.792685][ T5873] usb 3-1: config 7 has no interface number 0 [ 339.818468][ T5873] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 339.828173][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.841874][ T5873] usb 3-1: Product: syz [ 339.850060][ T5873] usb 3-1: Manufacturer: syz [ 339.860979][ T5873] usb 3-1: SerialNumber: syz [ 340.359913][ T8439] netlink: 'syz.4.820': attribute type 3 has an invalid length. [ 340.984589][ T5873] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 341.066162][ T5873] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 341.083195][ T5873] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 341.095424][ T5873] dvb_usb_cxusb 3-1:7.34: probe with driver dvb_usb_cxusb failed with error -22 [ 341.279740][ T5873] usb 3-1: USB disconnect, device number 11 [ 341.585334][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 341.615283][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 341.660618][ T8457] netlink: 72 bytes leftover after parsing attributes in process `syz.3.828'. [ 342.913509][ T978] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 343.093523][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 343.101538][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.119119][ T978] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 343.128477][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.139490][ T978] usb 5-1: config 0 descriptor?? [ 343.320580][ T8488] netlink: 1112 bytes leftover after parsing attributes in process `syz.3.839'. [ 343.563380][ T978] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.000C/input/input16 [ 343.668936][ T978] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.000C/input/input17 [ 343.713039][ T978] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.000C/input/input18 [ 343.771703][ T978] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.000C/input/input19 [ 343.840412][ T978] hid-udraw 0003:20D6:CB17.000C: hidraw0: USB HID v0.05 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 344.020780][ T978] usb 5-1: USB disconnect, device number 14 [ 345.376783][ T8524] input: syz0 as /devices/virtual/input/input20 [ 345.399203][ T8524] input: failed to attach handler leds to device input20, error: -6 [ 346.285882][ T8530] syzkaller1: entered promiscuous mode [ 346.292066][ T8530] syzkaller1: entered allmulticast mode [ 346.804035][ T8541] sp0: Synchronizing with TNC [ 346.943497][ T978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 347.313390][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 347.320595][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.332269][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.342516][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 347.357588][ T978] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 347.370473][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.443969][ T5874] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 347.471280][ T978] usb 3-1: config 0 descriptor?? [ 347.654044][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 347.709492][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.829924][ T5874] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 347.874338][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.014340][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 348.035265][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.045903][ T5874] usb 1-1: SerialNumber: syz [ 348.089977][ T5874] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 348.141628][ T5874] usb-storage 1-1:1.0: USB Mass Storage device detected [ 348.216917][ T5874] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 348.286241][ T978] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x2 [ 348.301087][ T5874] scsi host1: usb-storage 1-1:1.0 [ 348.337762][ T978] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0 [ 348.359283][ T5874] usb 1-1: USB disconnect, device number 10 [ 348.396177][ T978] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0 [ 348.442332][ T978] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0 [ 348.461531][ T978] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0 [ 348.480395][ T978] hid-multitouch 0003:045E:9994.000D: unknown main item tag 0x0 [ 348.533871][ T978] hid-multitouch 0003:045E:9994.000D: unbalanced collection at end of report description [ 348.571470][ T978] hid-multitouch 0003:045E:9994.000D: probe with driver hid-multitouch failed with error -22 [ 348.599463][ T978] usb 3-1: USB disconnect, device number 12 [ 350.124405][ T8587] IPVS: stopping master sync thread 8588 ... [ 350.132998][ T8588] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 351.613469][ T975] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 352.617959][ T8608] block nbd0: shutting down sockets [ 352.703347][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 352.721370][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.754033][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.839570][ T975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 352.918601][ T8626] netlink: 'syz.0.892': attribute type 9 has an invalid length. [ 352.928538][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.948751][ T975] usb 5-1: config 0 descriptor?? [ 353.538116][ T975] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 353.986362][ T975] usb 5-1: USB disconnect, device number 15 [ 354.723176][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.908'. [ 355.356412][ T8685] loop9: detected capacity change from 0 to 7 [ 355.386309][ T8685] Dev loop9: unable to read RDB block 7 [ 355.391987][ T8685] loop9: unable to read partition table [ 355.432860][ T8685] loop9: partition table beyond EOD, truncated [ 355.453740][ T8685] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 355.818239][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 357.851535][ T8743] netlink: 76 bytes leftover after parsing attributes in process `syz.1.941'. [ 357.953440][ T52] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 358.115023][ T52] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 358.145992][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.174503][ T52] usb 1-1: config 0 descriptor?? [ 358.192853][ T52] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 358.745450][ T52] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 358.908029][ T5873] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 359.142825][ T52] gspca_cpia1: usb_control_msg 02, error -71 [ 359.201447][ T52] gspca_cpia1: usb_control_msg 05, error -71 [ 359.450876][ T5873] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 359.471660][ T52] cpia1 1-1:0.0: unexpected systemstate: 00 [ 359.496412][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.513435][ T52] usb 1-1: USB disconnect, device number 11 [ 359.568625][ T5873] usb 3-1: Product: syz [ 359.572967][ T5873] usb 3-1: Manufacturer: syz [ 359.633614][ T5873] usb 3-1: SerialNumber: syz [ 359.651652][ T5873] usb 3-1: config 0 descriptor?? [ 359.664358][ T8770] Bluetooth: MGMT ver 1.23 [ 359.683707][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 359.897394][ T5873] usb 3-1: ignoring: probably an ADSL modem [ 359.903472][ T5874] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 359.922515][ T8782] futex_wake_op: syz.3.957 tries to shift op by 36; fix this program [ 360.065616][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 360.078531][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 360.091514][ T5874] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 360.101703][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 360.113019][ T5874] usb 5-1: Product: syz [ 360.121343][ T5874] usb 5-1: Manufacturer: syz [ 360.131562][ T5874] usb 5-1: SerialNumber: syz [ 360.142375][ T5874] usb 5-1: config 0 descriptor?? [ 360.152291][ T8772] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 360.317519][ T8791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.963'. [ 360.327318][ T5873] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 360.466527][ T5874] usb 5-1: USB disconnect, device number 16 [ 360.812839][ T8808] loop2: detected capacity change from 0 to 7 [ 360.823044][ T8808] Dev loop2: unable to read RDB block 7 [ 360.830928][ T8808] loop2: unable to read partition table [ 360.841730][ T8808] loop2: partition table beyond EOD, truncated [ 360.852708][ T8808] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 361.147103][ T8822] sctp: [Deprecated]: syz.0.973 (pid 8822) Use of int in max_burst socket option deprecated. [ 361.147103][ T8822] Use struct sctp_assoc_value instead [ 361.194048][ T5874] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 361.256920][ T8824] tipc: New replicast peer: 0.0.0.0 [ 361.262720][ T8824] tipc: Enabled bearer , priority 10 [ 361.288935][ T8824] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 361.358397][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 361.375013][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 361.394564][ T5874] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 361.408978][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.419177][ T5874] usb 2-1: Product: syz [ 361.446179][ T5874] usb 2-1: Manufacturer: syz [ 361.471480][ T5874] usb 2-1: SerialNumber: syz [ 361.529066][ T5874] usb 2-1: config 0 descriptor?? [ 361.545264][ T8813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.772317][ T8813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 362.067137][ T26] usb 3-1: USB disconnect, device number 13 [ 362.418336][ T8813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 362.464134][ T8813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 362.815223][ T8849] loop9: detected capacity change from 0 to 8 [ 362.827750][ T5874] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 362.857452][ T8849] Dev loop9: unable to read RDB block 8 [ 362.870522][ T8849] loop9: unable to read partition table [ 362.879013][ T8849] loop9: partition table beyond EOD, truncated [ 362.911216][ T8849] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 363.043195][ T5874] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 363.093410][ T26] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 363.095350][ T5874] usb 2-1: USB disconnect, device number 9 [ 363.284528][ T30] audit: type=1326 audit(1742625329.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 363.306669][ T30] audit: type=1326 audit(1742625329.570:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 363.383486][ T30] audit: type=1326 audit(1742625329.570:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 363.404819][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.493317][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 363.501027][ T26] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 363.516362][ T30] audit: type=1326 audit(1742625329.820:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f462eb29359 code=0x7ffc0000 [ 363.537581][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.547526][ T26] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 364.348804][ T26] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 364.350285][ T30] audit: type=1326 audit(1742625330.650:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f462eb29359 code=0x7ffc0000 [ 364.403747][ T26] usb 4-1: Product: syz [ 364.407986][ T26] usb 4-1: Manufacturer: syz [ 364.433564][ T26] usb 4-1: SerialNumber: syz [ 364.451869][ T26] usb 4-1: config 0 descriptor?? [ 364.456610][ T30] audit: type=1326 audit(1742625330.650:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 364.510962][ T8853] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 364.541734][ T30] audit: type=1326 audit(1742625330.650:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 364.611509][ T8877] bond0: option arp_validate: invalid value (1802661751) [ 364.622340][ T30] audit: type=1326 audit(1742625330.690:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f462eb29359 code=0x7ffc0000 [ 364.692520][ T30] audit: type=1326 audit(1742625330.690:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f462eb29359 code=0x7ffc0000 [ 364.714721][ T30] audit: type=1326 audit(1742625330.690:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8864 comm="syz.0.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f462eb29359 code=0x7ffc0000 [ 364.735943][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.745192][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 364.763002][ T8879] netlink: 'syz.2.996': attribute type 2 has an invalid length. [ 364.771365][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 364.838725][ T26] usb 4-1: USB disconnect, device number 15 [ 365.034611][ T5874] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 366.407258][ T5874] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 366.421488][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.453439][ T5874] usb 2-1: Product: syz [ 366.459416][ T5874] usb 2-1: Manufacturer: syz [ 366.469196][ T5874] usb 2-1: SerialNumber: syz [ 366.480258][ T5874] usb 2-1: config 0 descriptor?? [ 366.920141][ T5874] usb 2-1: f81604_write: reg: 105 data: 1 failed: -EPROTO [ 366.934735][ T5874] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 366.942560][ T5874] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 366.974181][ T5874] usb 2-1: USB disconnect, device number 10 [ 367.133785][ T5873] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 367.265082][ T978] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 367.438600][ T978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 367.481552][ T5873] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.494903][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 367.501827][ T5873] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 367.665782][ T8922] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 367.695662][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.113320][ T5873] usb 1-1: config 0 descriptor?? [ 368.243359][ T978] usb 3-1: config 1 has no interface number 0 [ 368.249629][ T978] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.278383][ T978] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 368.289310][ T978] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 105, setting to 64 [ 368.302386][ T978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.333445][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.341558][ T978] usb 3-1: Product: syz [ 368.366493][ T978] usb 3-1: Manufacturer: syz [ 368.371201][ T978] usb 3-1: SerialNumber: syz [ 369.469797][ T5873] hid-alps 0003:044E:1215.000F: unknown main item tag 0x0 [ 369.515806][ T5873] hid-alps 0003:044E:1215.000F: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 369.816837][ T5873] usb 1-1: USB disconnect, device number 12 [ 371.103638][ T978] cdc_ncm 3-1:1.1: bind() failure [ 371.126660][ T978] usb 3-1: USB disconnect, device number 14 [ 377.793899][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.974658][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.814600][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.002858][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.354857][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.588683][ T53] bond0: (slave netdevsim0): Releasing backup interface [ 379.689555][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.702149][ T5136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.716455][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.733879][ T5136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.754589][ T5136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 379.764473][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.053405][ T978] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 380.265566][ T978] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 380.285301][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.327740][ T978] usb 1-1: config 0 descriptor?? [ 380.370810][ T978] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 380.563499][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 380.773494][ T26] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 380.821254][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.838146][ T26] usb 2-1: Product: syz [ 380.843013][ T26] usb 2-1: Manufacturer: syz [ 380.857098][ T26] usb 2-1: SerialNumber: syz [ 380.943699][ T9069] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21 [ 381.025282][ T978] gp8psk: usb out operation failed. [ 381.031558][ T978] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 381.086937][ T978] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 381.163037][ T26] gspca_main: pac207-2.14.0 probing 093a:2476 [ 381.170055][ T26] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 381.187373][ T26] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 381.194557][ T26] usb 2-1: No valid video chain found. [ 381.202325][ T26] usb 2-1: USB disconnect, device number 11 [ 381.214468][ T978] usb 1-1: USB disconnect, device number 13 [ 381.475463][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.489183][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.495286][ T9074] input: syz1 as /devices/virtual/input/input22 [ 381.509844][ T53] bond0 (unregistering): Released all slaves [ 381.741247][ T53] tipc: Disabling bearer [ 381.761606][ T53] tipc: Left network mode [ 381.834765][ T5837] Bluetooth: hci0: command tx timeout [ 381.930530][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 381.938659][ T978] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 381.955411][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 382.118675][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.138650][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 382.165443][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 382.192364][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 382.233280][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 382.258113][ T978] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 382.273338][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.281433][ T978] usb 1-1: Product: syz [ 382.319134][ T978] usb 1-1: Manufacturer: syz [ 382.325962][ T978] usb 1-1: SerialNumber: syz [ 382.346851][ T978] usb 1-1: config 0 descriptor?? [ 382.359661][ T9084] bridge_slave_1 (unregistering): left allmulticast mode [ 382.371911][ T9084] bridge_slave_1 (unregistering): left promiscuous mode [ 382.384313][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.577813][ T978] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 382.788135][ T978] usb 1-1: USB disconnect, device number 14 [ 382.844942][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.852348][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.861286][ T9043] bridge_slave_0: entered allmulticast mode [ 382.869142][ T9043] bridge_slave_0: entered promiscuous mode [ 382.888752][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.896517][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.904317][ T9043] bridge_slave_1: entered allmulticast mode [ 382.912964][ T9043] bridge_slave_1: entered promiscuous mode [ 382.942203][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.955315][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.971946][ T53] hsr_slave_0: left promiscuous mode [ 382.979520][ T53] hsr_slave_1: left promiscuous mode [ 382.985751][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.995930][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.006353][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.014763][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.036742][ T53] veth1_macvtap: left promiscuous mode [ 383.042797][ T53] veth0_macvtap: left promiscuous mode [ 383.049488][ T53] veth1_vlan: left promiscuous mode [ 383.055317][ T53] veth0_vlan: left promiscuous mode [ 383.933476][ T5837] Bluetooth: hci0: command tx timeout [ 384.461042][ T53] team0 (unregistering): Port device team_slave_1 removed [ 384.517760][ T53] team0 (unregistering): Port device team_slave_0 removed [ 385.093272][ T9043] team0: Port device team_slave_0 added [ 385.108672][ T9043] team0: Port device team_slave_1 added [ 385.232978][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.253525][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.279446][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.353511][ T52] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 385.459970][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.686330][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.697698][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.732502][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.784418][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 385.847276][ T52] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.881954][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 385.900458][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 385.916639][ T52] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 385.930123][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.941975][ T9043] hsr_slave_0: entered promiscuous mode [ 385.948764][ T52] usb 2-1: config 0 descriptor?? [ 385.955830][ T26] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 385.956089][ T9043] hsr_slave_1: entered promiscuous mode [ 385.972399][ T9150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.982568][ T9043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.992061][ T9043] Cannot create hsr debugfs directory [ 385.999396][ T52] hub 2-1:0.0: USB hub found [ 385.999933][ T5837] Bluetooth: hci0: command tx timeout [ 386.124343][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 386.135784][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.166322][ T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 386.183270][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 386.207770][ T52] hub 2-1:0.0: 1 port detected [ 386.221927][ T26] usb 1-1: SerialNumber: syz [ 386.255586][ T26] usb 1-1: config 0 descriptor?? [ 386.268216][ T26] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 386.300249][ T26] usb 1-1: Failed to create links for entity 255 [ 386.322091][ T26] usb 1-1: Failed to register entities (-22). [ 386.517017][ T975] usb 1-1: USB disconnect, device number 15 [ 386.623359][ T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 386.803412][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.827957][ T9043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 386.847485][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.875549][ T26] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.901322][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.923362][ T26] usb 3-1: SerialNumber: syz [ 387.052243][ T9043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.112962][ T9043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 387.151166][ T9043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 387.185608][ T26] usb 3-1: 0:2 : does not exist [ 387.213517][ T26] usb 3-1: USB disconnect, device number 15 [ 387.294728][ T52] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 387.311381][ T52] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 387.354323][ T52] usbhid 2-1:0.0: can't add hid device: -32 [ 387.363623][ T52] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 387.425402][ T52] usb 2-1: USB disconnect, device number 12 [ 387.427180][ T8504] udevd[8504]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.562872][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.608817][ T9043] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.641718][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.648957][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.689769][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.697006][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.739400][ T9043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.075488][ T5837] Bluetooth: hci0: command tx timeout [ 388.175523][ T5837] Bluetooth: hci3: Unable to find connection for big 0x00 [ 388.346610][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.583477][ T975] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 388.601498][ T9226] IPVS: Scheduler module ip_vs_sip not found [ 388.614118][ T9231] IPVS: length: 24 != 16106127384 [ 388.756182][ T975] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 388.803437][ T975] usb 5-1: config 230 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.846690][ T975] usb 5-1: config 230 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 388.904180][ T975] usb 5-1: config 230 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.937520][ T975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.953266][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.972453][ T975] usb 5-1: Product: syz [ 389.001484][ T975] usb 5-1: Manufacturer: syz [ 389.008190][ T975] usb 5-1: SerialNumber: syz [ 389.065857][ T9248] tipc: Started in network mode [ 389.090658][ T9248] tipc: Node identity _, cluster identity 4711 [ 389.123703][ T9248] tipc: Enabling of bearer rejected, failed to enable media [ 389.173871][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 389.189955][ T9043] veth0_vlan: entered promiscuous mode [ 389.259546][ T9043] veth1_vlan: entered promiscuous mode [ 389.380374][ T26] usb 1-1: config 253 has an invalid interface number: 154 but max is 0 [ 389.412093][ T26] usb 1-1: config 253 has no interface number 0 [ 389.451858][ T9043] veth0_macvtap: entered promiscuous mode [ 389.496064][ T26] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=bb.94 [ 389.515510][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.529686][ T26] usb 1-1: Product: syz [ 389.536732][ T9043] veth1_macvtap: entered promiscuous mode [ 389.563921][ T26] usb 1-1: Manufacturer: syz [ 389.575407][ T26] usb 1-1: SerialNumber: syz [ 389.600736][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.642876][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.673950][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.693316][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.723429][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.749795][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.768732][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.779970][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.798780][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.851186][ T26] usb_ehset_test 1-1:253.154: probe with driver usb_ehset_test failed with error -32 [ 389.862201][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.873593][ T5872] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 389.888606][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.908964][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.932594][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.943052][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.965633][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.981259][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.992385][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.012562][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.034294][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 390.052576][ T9043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.071053][ T26] usb 1-1: USB disconnect, device number 16 [ 390.083368][ T978] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 390.094624][ T5872] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 390.112304][ T9043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.122158][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.136725][ T9043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.145653][ T5872] usb 3-1: Product: syz [ 390.149860][ T5872] usb 3-1: Manufacturer: syz [ 390.159625][ T9043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.168539][ T5872] usb 3-1: SerialNumber: syz [ 390.190590][ T5872] r8152-cfgselector 3-1: Unknown version 0x0000 [ 390.210216][ T5872] r8152-cfgselector 3-1: config 0 descriptor?? [ 390.248730][ T975] cdc_ncm 5-1:230.0: bind() failure [ 390.261150][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.271709][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.300447][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.309966][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.311108][ T975] cdc_ncm 5-1:230.1: probe with driver cdc_ncm failed with error -71 [ 390.321953][ T978] usb 2-1: Product: syz [ 390.330739][ T978] usb 2-1: Manufacturer: syz [ 390.335737][ T978] usb 2-1: SerialNumber: syz [ 390.348657][ T975] cdc_mbim 5-1:230.1: probe with driver cdc_mbim failed with error -71 [ 390.376330][ T975] usbtest 5-1:230.1: probe with driver usbtest failed with error -71 [ 390.392290][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.402987][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.407548][ T975] usb 5-1: USB disconnect, device number 17 [ 390.438470][ T5872] r8152-cfgselector 3-1: Needed 2 retries to read version [ 390.449048][ T5872] r8152-cfgselector 3-1: Unknown version 0x0000 [ 390.471366][ T5872] r8152-cfgselector 3-1: bad CDC descriptors [ 390.476360][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.506967][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.574782][ T978] usb 2-1: 0:2 : does not exist [ 390.606699][ T978] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 390.661490][ T978] usb 2-1: USB disconnect, device number 13 [ 390.683954][ T5872] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 390.873993][ T9278] netlink: 'syz.5.1038': attribute type 4 has an invalid length. [ 390.894506][ T6582] udevd[6582]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.397861][ T9308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.275577][ T9335] input: syz1 as /devices/virtual/input/input23 [ 392.467137][ T9345] netlink: 'syz.2.1118': attribute type 29 has an invalid length. [ 392.515589][ T9345] netlink: 'syz.2.1118': attribute type 29 has an invalid length. [ 392.540902][ T9345] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1118'. [ 392.803712][ T5872] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 392.974286][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 392.989721][ T5872] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 393.003523][ T5872] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 393.016406][ T5872] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 393.027553][ T5872] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.082095][ T5872] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.143397][ T5872] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.177343][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.465214][ T5872] usb 6-1: usb_control_msg returned -32 [ 393.483358][ T5872] usbtmc 6-1:16.0: can't read capabilities [ 393.704181][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 393.716067][ T9348] usbtmc 6-1:16.0: Unable to send data, error -71 [ 394.023884][ T52] usb 6-1: USB disconnect, device number 2 [ 395.376472][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 395.616729][ T975] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 395.701155][ T9445] netlink: 'syz.0.1144': attribute type 30 has an invalid length. [ 395.739614][ T9445] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.749384][ T9445] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.758746][ T9445] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.805490][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 395.815540][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.830650][ T975] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 395.860839][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.870998][ T9445] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.880086][ T9445] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.889094][ T9445] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.925337][ T975] usb 2-1: config 0 descriptor?? [ 396.105260][ T5872] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 396.151333][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1146'. [ 396.160994][ T9456] netlink: 18 bytes leftover after parsing attributes in process `syz.5.1146'. [ 396.300077][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 396.330960][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.355449][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.375788][ T5872] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 396.390196][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.418372][ T5872] usb 3-1: config 0 descriptor?? [ 396.425790][ T975] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0010/input/input24 [ 396.439753][ T5872] hub 3-1:0.0: USB hub found [ 396.533169][ T975] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0010/input/input25 [ 396.589221][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880222fa000: rx timeout, send abort [ 396.601352][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880222fa000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 396.627457][ T975] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0010/input/input26 [ 396.654533][ T5872] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 396.710705][ T975] kye 0003:0458:5015.0010: input,hiddev0,hidraw0: USB HID vcf.f2 Mouse [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 396.751251][ T975] usb 2-1: USB disconnect, device number 14 [ 396.893802][ T5872] hid-generic 0003:046D:C31C.0011: item fetching failed at offset 0/1 [ 396.902594][ T5872] hid-generic 0003:046D:C31C.0011: probe with driver hid-generic failed with error -22 [ 397.194177][ T52] usb 3-1: USB disconnect, device number 17 [ 397.215916][ T5874] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 397.405314][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.412070][ T5874] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 397.424287][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.434911][ T5874] usb 1-1: config 0 descriptor?? [ 397.533435][ T52] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 397.693367][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 397.704222][ T52] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 397.715053][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.723179][ T52] usb 5-1: Product: syz [ 397.727787][ T52] usb 5-1: Manufacturer: syz [ 397.732497][ T52] usb 5-1: SerialNumber: syz [ 397.742349][ T52] usb 5-1: config 0 descriptor?? [ 397.751153][ T52] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 397.762239][ T52] usb 5-1: Detected FT232H [ 398.175656][ T52] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 398.185094][ T52] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 398.207046][ T52] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 398.243694][ T52] usb 5-1: USB disconnect, device number 18 [ 398.255829][ T52] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 398.283070][ T52] ftdi_sio 5-1:0.0: device disconnected [ 398.490607][ T5874] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 398.580065][ T5197] udevd[5197]: worker [6582] terminated by signal 33 (Unknown signal 33) [ 398.603801][ T5197] udevd[5197]: worker [6582] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/video4linux/radio48' [ 398.722459][ T5874] usb 1-1: USB disconnect, device number 17 [ 399.293923][ T52] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 399.484064][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 399.497677][ T52] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.545519][ T9510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1166'. [ 399.559013][ T52] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.600699][ T52] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.652932][ T52] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.709521][ T52] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.750698][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.058373][ T52] usb 5-1: GET_CAPABILITIES returned 0 [ 400.090640][ T52] usbtmc 5-1:16.0: can't read capabilities [ 400.269972][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.279429][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.288554][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.297679][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.306769][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.330109][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.339258][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.393852][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.403035][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.412192][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.421467][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.430603][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.462900][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.472027][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.481118][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.490179][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.597192][ T5874] usb 5-1: USB disconnect, device number 19 [ 403.011043][ T9577] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1187'. [ 403.031397][ T9577] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 403.384367][ T9584] syzkaller0: entered promiscuous mode [ 403.421841][ T9584] syzkaller0: entered allmulticast mode [ 404.415707][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 404.415729][ T30] audit: type=1326 audit(1742625370.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.550520][ T30] audit: type=1326 audit(1742625370.750:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.572657][ T30] audit: type=1326 audit(1742625370.750:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.594622][ T30] audit: type=1326 audit(1742625370.750:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.617059][ T30] audit: type=1326 audit(1742625370.750:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.645307][ T30] audit: type=1326 audit(1742625370.750:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.752572][ T30] audit: type=1326 audit(1742625370.750:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.785187][ T30] audit: type=1326 audit(1742625370.750:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.807130][ T30] audit: type=1326 audit(1742625370.750:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 404.829052][ T30] audit: type=1326 audit(1742625370.750:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8738d169 code=0x7ffc0000 [ 407.754078][ T52] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 407.887037][ T9636] team_slave_0: entered promiscuous mode [ 407.892993][ T9636] team_slave_1: entered promiscuous mode [ 407.906494][ T9636] macsec1: entered promiscuous mode [ 407.922132][ T9636] team0: entered promiscuous mode [ 407.928351][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 407.936538][ T9636] macsec1: entered allmulticast mode [ 407.942391][ T52] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 407.955054][ T9636] team0: entered allmulticast mode [ 407.961000][ T52] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.990793][ T9636] team_slave_0: entered allmulticast mode [ 407.998282][ T52] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.009122][ T9636] team_slave_1: entered allmulticast mode [ 408.015493][ T52] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.026259][ T26] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 408.045335][ T9636] team0: Device macsec1 is already an upper device of the team interface [ 408.056892][ T52] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.079903][ T52] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.090552][ T9636] team0: left allmulticast mode [ 408.091215][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.095927][ T9636] team_slave_0: left allmulticast mode [ 408.136861][ T9636] team_slave_1: left allmulticast mode [ 408.190723][ T9636] team0: left promiscuous mode [ 408.204965][ T9636] team_slave_0: left promiscuous mode [ 408.210515][ T9636] team_slave_1: left promiscuous mode [ 408.514887][ T52] usb 6-1: usb_control_msg returned -32 [ 408.532943][ T52] usbtmc 6-1:16.0: can't read capabilities [ 408.572250][ T26] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 408.644764][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.708692][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.754961][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 408.821377][ T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 408.835933][ T26] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 408.880096][ T26] usb 5-1: Manufacturer: syz [ 408.895807][ T26] usb 5-1: config 0 descriptor?? [ 408.905611][ T9649] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 408.913079][ T5874] usb 6-1: USB disconnect, device number 3 [ 409.366990][ T26] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 409.383936][ T26] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 409.404641][ T26] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 409.635522][ T5874] usb 5-1: USB disconnect, device number 20 [ 409.824814][ T9661] netlink: 'syz.0.1217': attribute type 39 has an invalid length. [ 411.512185][ T9693] netlink: 'syz.1.1230': attribute type 10 has an invalid length. [ 411.713040][ T9693] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.755790][ T9693] bond0: (slave team0): Enslaving as an active interface with an up link [ 413.283445][ T5872] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 413.464604][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.532243][ T5872] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.635425][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=86a1, bcdDevice= 0.40 [ 413.667990][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.719138][ T5872] usb 2-1: Product: syz [ 413.737367][ T5872] usb 2-1: Manufacturer: syz [ 413.742033][ T5872] usb 2-1: SerialNumber: syz [ 413.762980][ T9738] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1246'. [ 414.311900][ T5837] Bluetooth: hci1: unexpected event for opcode 0x203c [ 414.473823][ T9765] cgroup: fork rejected by pids controller in /syz5 [ 414.603718][ T26] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 414.801468][ T26] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 414.825284][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.826249][ T5872] cdc_ncm 2-1:1.0: bind() failure [ 414.877914][ T26] usb 3-1: config 0 descriptor?? [ 414.882136][ T5872] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 414.911667][ T5872] cdc_ncm 2-1:1.1: bind() failure [ 414.913164][ T26] gspca_main: spca508-2.14.0 probing 8086:0110 [ 414.982402][ T9779] trusted_key: syz.4.1265 sent an empty control message without MSG_MORE. [ 414.986389][ T9777] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=963452050 (30830465600 ns) > initial count (25613608640 ns). Using initial count to start timer. [ 415.090335][ T975] usb 2-1: USB disconnect, device number 15 [ 415.142151][ T26] gspca_spca508: reg_read err -32 [ 415.164516][ T26] gspca_spca508: reg_read err -32 [ 415.183020][ T26] gspca_spca508: reg_read err -32 [ 415.196077][ T26] gspca_spca508: reg_read err -32 [ 415.241177][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.356677][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.432403][ T26] gspca_spca508: reg write: error -71 [ 415.454449][ T26] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 415.481814][ T26] usb 3-1: USB disconnect, device number 18 [ 415.786460][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.044926][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.142384][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 416.152722][ T5136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 416.161856][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 416.174043][ T5136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 416.182463][ T5136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 416.190452][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.338804][ T9800] tipc: Cannot configure node identity twice [ 416.412431][ T12] bridge_slave_1: left allmulticast mode [ 416.427911][ T12] bridge_slave_1: left promiscuous mode [ 416.446666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.460778][ T12] bridge_slave_0: left allmulticast mode [ 416.471431][ T12] bridge_slave_0: left promiscuous mode [ 416.477340][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.059820][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.073135][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.086533][ T12] bond0 (unregistering): Released all slaves [ 417.380536][ T9828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.721509][ T9795] chnl_net:caif_netlink_parms(): no params data found [ 418.235198][ T5837] Bluetooth: hci0: command tx timeout [ 418.390957][ T12] hsr_slave_0: left promiscuous mode [ 418.422324][ T12] hsr_slave_1: left promiscuous mode [ 418.424439][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1288'. [ 418.430532][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.445283][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.583308][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.590969][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.664771][ T12] veth1_macvtap: left promiscuous mode [ 418.689721][ T12] veth0_macvtap: left promiscuous mode [ 418.716342][ T12] veth1_vlan: left promiscuous mode [ 418.748206][ T12] veth0_vlan: left promiscuous mode [ 418.987771][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 419.587662][ T12] team0 (unregistering): Port device team_slave_1 removed [ 419.643139][ T12] team0 (unregistering): Port device team_slave_0 removed [ 420.313457][ T5837] Bluetooth: hci0: command tx timeout [ 420.426540][ T9861] veth1_vlan (unregistering): left allmulticast mode [ 420.496893][ T9861] macvlan0 (unregistering): left allmulticast mode [ 420.572732][ T9795] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.591825][ T9795] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.612233][ T9795] bridge_slave_0: entered allmulticast mode [ 420.642617][ T9795] bridge_slave_0: entered promiscuous mode [ 420.670239][ T9795] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.694359][ T9795] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.701830][ T9795] bridge_slave_1: entered allmulticast mode [ 420.726892][ T9795] bridge_slave_1: entered promiscuous mode [ 420.890705][ T9795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.013837][ T9795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.172299][ T9891] __vm_enough_memory: pid: 9891, comm: syz.0.1298, bytes: 21200570327040 not enough memory for the allocation [ 421.354990][ T9795] team0: Port device team_slave_0 added [ 421.405510][ T9795] team0: Port device team_slave_1 added [ 421.574893][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.584495][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.681242][ T9795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.710727][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.728112][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.765722][ T9795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.985184][ T9795] hsr_slave_0: entered promiscuous mode [ 422.010249][ T9795] hsr_slave_1: entered promiscuous mode [ 422.023917][ T9795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.042100][ T9795] Cannot create hsr debugfs directory [ 422.394034][ T5837] Bluetooth: hci0: command tx timeout [ 423.725568][ T9795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.781095][ T9795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.834215][ T9795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.859833][ T9943] loop7: detected capacity change from 16384 to 0 [ 423.867432][ T9795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 424.114849][ T9795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.177405][ T9795] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.211512][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.218777][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.259158][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.266400][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.473415][ T5837] Bluetooth: hci0: command tx timeout [ 425.037992][ T9968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.355811][ T9795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.778585][ T9795] veth0_vlan: entered promiscuous mode [ 425.828448][ T9795] veth1_vlan: entered promiscuous mode [ 425.984863][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1328'. [ 426.066700][ T9984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.106585][ T9795] veth0_macvtap: entered promiscuous mode [ 426.119015][ T9795] veth1_macvtap: entered promiscuous mode [ 426.267980][ T9989] macsec1: entered promiscuous mode [ 426.290288][ T9993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.301537][ T9989] bond1: entered promiscuous mode [ 426.314571][ T9989] bond1: left promiscuous mode [ 426.382316][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.425468][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.436239][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.450524][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.461212][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.472375][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.482981][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.494179][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.506291][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.554819][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.565776][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.592756][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.613644][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.631905][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.647096][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.657915][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.668624][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.686464][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.707860][ T9795] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.719341][ T9795] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.730213][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 426.743978][ T9795] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.753701][ T9795] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.899147][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.934662][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.983796][ T5837] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 426.996686][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.005204][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.363652][ T5874] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 427.570744][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.619362][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.713456][ T5874] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 428.014570][T10029] syz.2.1341: attempt to access beyond end of device [ 428.014570][T10029] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 428.203176][T10026] nbd2: detected capacity change from 0 to 510 [ 428.289860][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 428.498040][T10029] block nbd2: Send control failed (result -89) [ 428.529112][T10029] block nbd2: Request send failed, requeueing [ 428.564806][ T5837] block nbd2: Receive control failed (result -32) [ 428.573281][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.619937][ T5874] usb 1-1: config 0 descriptor?? [ 428.668417][ T41] block nbd2: Dead connection, failed to find a fallback [ 428.678895][ T41] block nbd2: shutting down sockets [ 428.679588][ T8504] blk_print_req_error: 13 callbacks suppressed [ 428.679609][ T8504] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.685786][ T41] I/O error, dev nbd2, sector 508 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.717727][ T8504] buffer_io_error: 12 callbacks suppressed [ 428.717746][ T8504] Buffer I/O error on dev nbd2, logical block 0, async page read [ 428.723399][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=254, location=254 [ 428.739362][ T8504] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.751682][T10029] I/O error, dev nbd2, sector 506 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.768388][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=253, location=253 [ 428.792490][ T8504] Buffer I/O error on dev nbd2, logical block 1, async page read [ 428.850720][T10029] I/O error, dev nbd2, sector 504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.865968][ T5874] usbhid 1-1:0.0: can't add hid device: -71 [ 428.872245][ T8504] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.892880][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 428.900491][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=252, location=252 [ 428.904164][ T8504] Buffer I/O error on dev nbd2, logical block 2, async page read [ 428.921154][ T5874] usb 1-1: USB disconnect, device number 18 [ 428.929698][ T8504] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.939936][ T8504] Buffer I/O error on dev nbd2, logical block 3, async page read [ 428.954707][T10029] I/O error, dev nbd2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.973482][ T8504] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.994273][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=104, location=104 [ 429.007328][ T8504] Buffer I/O error on dev nbd2, logical block 0, async page read [ 429.018288][T10029] I/O error, dev nbd2, sector 204 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.038179][ T8504] Buffer I/O error on dev nbd2, logical block 1, async page read [ 429.039481][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=102, location=102 [ 429.062117][ T8504] Buffer I/O error on dev nbd2, logical block 2, async page read [ 429.079969][ T8504] Buffer I/O error on dev nbd2, logical block 3, async page read [ 429.094734][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 429.096133][ T8504] Buffer I/O error on dev nbd2, logical block 0, async page read [ 429.317580][ T8504] Buffer I/O error on dev nbd2, logical block 1, async page read [ 429.331392][ T8504] ldm_validate_partition_table(): Disk read failed. [ 429.332539][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 429.339121][ T8504] Dev nbd2: unable to read RDB block 0 [ 429.356990][ T8504] nbd2: unable to read partition table [ 429.364041][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=126, location=126 [ 429.375400][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=125, location=125 [ 429.392322][ T8504] ldm_validate_partition_table(): Disk read failed. [ 429.400327][ T8504] Dev nbd2: unable to read RDB block 0 [ 429.414261][ T8504] nbd2: unable to read partition table [ 429.420159][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=124, location=124 [ 429.455403][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 429.475447][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 429.487425][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=62, location=62 [ 429.509774][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=61, location=61 [ 429.528751][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=60, location=60 [ 429.589063][T10029] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 429.643815][T10029] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 429.662585][T10051] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1349'. [ 429.779584][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1350'. [ 431.035015][ T5837] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 431.045512][ T5837] Bluetooth: hci3: Injecting HCI hardware error event [ 431.056784][ T5136] Bluetooth: hci3: hardware error 0x00 [ 431.309237][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 431.318847][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:6 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 431.318867][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 431.318877][ T5837] Workqueue: hci1 hci_rx_work [ 431.318900][ T5837] Call Trace: [ 431.318906][ T5837] [ 431.318913][ T5837] dump_stack_lvl+0x241/0x360 [ 431.318932][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.318947][ T5837] ? __pfx__printk+0x10/0x10 [ 431.318982][ T5837] ? __kmalloc_cache_noprof+0x243/0x390 [ 431.319002][ T5837] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 431.319040][ T5837] sysfs_create_dir_ns+0x2ce/0x3a0 [ 431.319074][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 431.319111][ T5837] kobject_add_internal+0x435/0x8d0 [ 431.319133][ T5837] kobject_add+0x152/0x220 [ 431.319147][ T5837] ? do_raw_spin_unlock+0x13c/0x8b0 [ 431.319165][ T5837] ? device_add+0x3e7/0xbf0 [ 431.319188][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 431.319203][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 431.319224][ T5837] ? get_device_parent+0x165/0x410 [ 431.319241][ T5837] device_add+0x4e5/0xbf0 [ 431.319269][ T5837] hci_conn_add_sysfs+0xe8/0x200 [ 431.319289][ T5837] le_conn_complete_evt+0xd1a/0x1360 [ 431.319320][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 431.319340][ T5837] ? __mutex_unlock_slowpath+0x227/0x800 [ 431.319366][ T5837] ? __skb_clone+0x5c/0x6c0 [ 431.319384][ T5837] ? skb_pull_data+0x112/0x230 [ 431.319406][ T5837] hci_le_conn_complete_evt+0x18c/0x420 [ 431.319432][ T5837] hci_event_packet+0xa54/0x1540 [ 431.319452][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 431.319476][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 431.319492][ T5837] ? do_raw_spin_unlock+0x13c/0x8b0 [ 431.319512][ T5837] ? kcov_remote_start+0x480/0x7d0 [ 431.319540][ T5837] ? mce_read_aux+0x110/0x1a0 [ 431.319561][ T5837] ? hci_send_to_monitor+0xdc/0x530 [ 431.319585][ T5837] hci_rx_work+0x3f3/0xdb0 [ 431.319609][ T5837] ? process_scheduled_works+0x9c6/0x18e0 [ 431.319626][ T5837] process_scheduled_works+0xabe/0x18e0 [ 431.319663][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.319688][ T5837] ? assign_work+0x364/0x3d0 [ 431.319708][ T5837] worker_thread+0x870/0xd30 [ 431.319737][ T5837] ? __kthread_parkme+0x169/0x1d0 [ 431.319758][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 431.319777][ T5837] kthread+0x7a9/0x920 [ 431.319797][ T5837] ? __pfx_kthread+0x10/0x10 [ 431.319819][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 431.319838][ T5837] ? __pfx_kthread+0x10/0x10 [ 431.319857][ T5837] ? __pfx_kthread+0x10/0x10 [ 431.319900][ T5837] ? __pfx_kthread+0x10/0x10 [ 431.319920][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.319939][ T5837] ? lockdep_hardirqs_on+0x99/0x150 [ 431.319961][ T5837] ? __pfx_kthread+0x10/0x10 [ 431.319984][ T5837] ret_from_fork+0x4b/0x80 [ 431.320002][ T5837] ? __pfx_kthread+0x10/0x10 [ 431.320024][ T5837] ret_from_fork_asm+0x1a/0x30 [ 431.320052][ T5837] [ 431.320075][ T5837] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 431.616940][ T5837] Bluetooth: hci1: failed to register connection device [ 432.511485][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 432.579146][ T978] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 432.754877][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 432.764643][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 432.785801][ T978] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 432.795332][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.813333][ T978] usb 3-1: Product: syz [ 432.823345][ T978] usb 3-1: Manufacturer: syz [ 432.828985][ T978] usb 3-1: SerialNumber: syz [ 432.846239][ T978] usb 3-1: config 0 descriptor?? [ 432.859405][ T978] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 432.874636][T10091] syz.4.1362 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 432.880403][ T978] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 432.904281][T10091] xt_policy: too many policy elements [ 432.943496][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 433.105314][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.133147][ T5874] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 433.144352][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.165554][ T5874] usb 2-1: config 0 descriptor?? [ 433.205697][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 433.273696][ T5136] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 433.462747][ T978] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 433.616433][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 433.664511][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 433.877454][ T5874] pwc: recv_control_msg error -32 req 04 val 1000 [ 434.146074][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 434.213506][ T5874] pwc: recv_control_msg error -71 req 04 val 1400 [ 434.438398][ T5874] pwc: recv_control_msg error -71 req 02 val 2000 [ 434.459992][ T5874] pwc: recv_control_msg error -71 req 02 val 2100 [ 434.491599][ T5874] pwc: recv_control_msg error -71 req 04 val 1500 [ 434.509535][ T5874] pwc: recv_control_msg error -71 req 02 val 2500 [ 434.712388][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 434.737458][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 434.754443][ T978] em28xx 3-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 434.769247][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 434.790535][ T978] em28xx 3-1:0.0: failed to read eeprom (err=-5) [ 434.797341][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 434.820986][ T978] em28xx 3-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 434.830029][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 434.843973][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 434.926077][ T5874] pwc: Registered as video103. [ 434.968635][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 435.002368][ T978] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 435.043381][ T978] em28xx 3-1:0.0: dvb set to bulk mode. [ 435.049337][ T5874] usb 2-1: USB disconnect, device number 16 [ 435.088315][ T978] usb 3-1: USB disconnect, device number 19 [ 435.120922][ T978] em28xx 3-1:0.0: Disconnecting em28xx [ 435.127902][ T9] em28xx 3-1:0.0: Binding DVB extension [ 435.349592][ T9] em28xx 3-1:0.0: Registering input extension [ 435.400475][ T978] em28xx 3-1:0.0: Closing input extension [ 435.526949][T10130] overlayfs: failed to resolve './file1': -2 [ 435.715194][ T978] em28xx 3-1:0.0: Freeing device [ 436.991436][T10145] syzkaller0: entered promiscuous mode [ 437.014519][T10145] syzkaller0: entered allmulticast mode [ 437.259464][T10151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.271791][T10177] /dev/nullb0: Can't open blockdev [ 440.236482][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.693519][T10200] mkiss: ax0: crc mode is auto. [ 443.069480][T10221] 9pnet_fd: Insufficient options for proto=fd [ 444.423647][ T26] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 444.704120][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 444.840136][ T26] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 444.910105][ T26] usb 1-1: config 0 has no interface number 0 [ 444.933634][ T26] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.971174][ T26] usb 1-1: config 0 interface 85 has no altsetting 0 [ 445.062698][ T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 445.186491][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.593386][ T26] usb 1-1: Product: syz [ 445.597849][ T26] usb 1-1: Manufacturer: syz [ 445.602702][ T26] usb 1-1: SerialNumber: syz [ 445.644322][ T26] usb 1-1: config 0 descriptor?? [ 445.867116][T10240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.877862][T10240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.892804][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 445.914290][T10240] erspan0: entered promiscuous mode [ 445.930034][T10240] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1403'. [ 446.377973][T10253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 446.573353][ T26] appletouch 1-1:0.85: Geyser mode initialized. [ 446.593406][ T26] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input29 [ 446.870407][ T975] usb 1-1: USB disconnect, device number 19 [ 446.910827][ T975] appletouch 1-1:0.85: input: appletouch disconnected [ 446.954038][ T52] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 447.144969][ T52] usb 6-1: Using ep0 maxpacket: 16 [ 447.154333][ T52] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 447.206888][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.235148][ T52] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.250700][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.269334][ T52] usb 6-1: Product: syz [ 447.280416][ T52] usb 6-1: Manufacturer: syz [ 447.292564][ T52] usb 6-1: SerialNumber: syz [ 447.314203][ T52] usb 6-1: config 0 descriptor?? [ 447.339656][ T52] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.386292][ T52] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 447.854082][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 447.854102][ T30] audit: type=1326 audit(1742625414.150:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 447.940981][ T52] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 447.944803][ T30] audit: type=1326 audit(1742625414.150:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 447.983512][ T52] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 448.023402][ T30] audit: type=1326 audit(1742625414.150:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 448.096492][ T30] audit: type=1326 audit(1742625414.150:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 448.353998][ T30] audit: type=1326 audit(1742625414.150:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 448.376228][ T30] audit: type=1326 audit(1742625414.150:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 448.433305][ T30] audit: type=1326 audit(1742625414.150:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 448.523293][ T30] audit: type=1326 audit(1742625414.150:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 448.590010][ T30] audit: type=1326 audit(1742625414.150:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 448.606759][ T52] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 448.656892][ T30] audit: type=1326 audit(1742625414.160:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0c78d169 code=0x7ffc0000 [ 448.834870][ T52] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 448.845520][ T52] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 448.860807][ T52] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 448.879028][ T52] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 448.893493][ T52] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 448.930919][ T52] usb 6-1: USB disconnect, device number 4 [ 449.253596][ T5873] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 449.255545][T10304] Bluetooth: MGMT ver 1.23 [ 449.422174][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 449.454513][ T5873] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 449.463863][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.498347][T10312] overlayfs: failed to clone upperpath [ 449.512499][ T5873] usb 1-1: config 0 descriptor?? [ 449.739012][ T5873] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 450.354527][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 450.583740][ T9] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 450.591990][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.894271][ T9] usb 5-1: config 0 has no interface number 0 [ 450.900421][ T9] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 450.911807][ T9] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 450.925079][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 450.934249][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.947425][ T9] usb 5-1: config 0 descriptor?? [ 450.982672][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 451.474433][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 451.521046][ T13] usb 5-1: Failed to submit usb control message: -71 [ 451.522173][ T975] usb 5-1: USB disconnect, device number 21 [ 451.536114][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 451.544595][ T13] usb 5-1: unable to get target info from device [ 451.552327][ T13] usb 5-1: could not get target info (-71) [ 451.561577][ T13] usb 5-1: could not probe fw (-71) [ 451.635193][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 451.660267][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 451.667042][ T5873] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 451.675657][ T9] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 451.692430][ T5873] asix 1-1:0.0: probe with driver asix failed with error -71 [ 451.705039][ T9] usb 6-1: config 179 has no interface number 0 [ 451.711375][ T9] usb 6-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 451.730727][ T5873] usb 1-1: USB disconnect, device number 20 [ 451.731090][ T9] usb 6-1: config 179 interface 65 has no altsetting 0 [ 451.750243][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 451.774483][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.911580][T10356] overlayfs: failed to clone upperpath [ 452.011334][ T5873] usb 6-1: USB disconnect, device number 5 [ 454.393142][T10389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.556419][T10393] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(90417457467034) <= P.seqno(0) <= S.SWH(90417457467108)) and (P.ackno exists or LAWL(222296549147378) <= P.ackno(222296549147379) <= S.AWH(222296549147379), sending SYNC... [ 454.595996][T10389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.816248][T10389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.969392][T10389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.022462][ T9] Process accounting resumed [ 455.144320][T10389] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.159539][T10389] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.174653][T10389] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.193792][T10389] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.437972][ T975] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 455.613394][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 455.851741][ T975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.003046][ T975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.319015][ T975] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 456.328251][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.373331][ T975] usb 6-1: Product: syz [ 456.377573][ T975] usb 6-1: Manufacturer: syz [ 456.382204][ T975] usb 6-1: SerialNumber: syz [ 456.630635][ T975] usb 6-1: 0:2 : does not exist [ 456.659812][ T975] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 456.735806][ T975] usb 6-1: USB disconnect, device number 6 [ 457.006078][ T8504] udevd[8504]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.105288][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 457.343397][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 457.425801][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 457.670051][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 457.709952][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 457.753289][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.797298][ T9] usb 5-1: Product: syz [ 457.830152][ T9] usb 5-1: Manufacturer: syz [ 457.841215][ T9] usb 5-1: SerialNumber: syz [ 457.871914][ T9] usb 5-1: config 0 descriptor?? [ 457.918719][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 457.992954][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 458.678763][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 458.688229][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 459.346639][ T9] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 459.633488][T10441] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 459.797476][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 460.589864][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 460.603381][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 460.606439][T10441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.610194][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 460.627648][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 460.647568][T10441] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 460.673098][ T9] usb 5-1: USB disconnect, device number 22 [ 460.933410][T10441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.967217][T10441] usb 2-1: config 0 descriptor?? [ 460.987573][T10441] pwc: Askey VC010 type 2 USB webcam detected. [ 461.396968][T10441] pwc: recv_control_msg error -32 req 02 val 2b00 [ 461.407353][T10441] pwc: recv_control_msg error -32 req 02 val 2700 [ 461.420603][T10441] pwc: recv_control_msg error -32 req 02 val 2c00 [ 461.428347][T10441] pwc: recv_control_msg error -32 req 04 val 1000 [ 461.436250][T10441] pwc: recv_control_msg error -32 req 04 val 1300 [ 461.443774][T10441] pwc: recv_control_msg error -32 req 04 val 1400 [ 461.472666][T10441] pwc: recv_control_msg error -32 req 02 val 2000 [ 461.481132][T10441] pwc: recv_control_msg error -32 req 02 val 2100 [ 461.690042][T10441] pwc: recv_control_msg error -71 req 02 val 2500 [ 461.700326][T10441] pwc: recv_control_msg error -71 req 02 val 2400 [ 461.736412][T10441] pwc: recv_control_msg error -71 req 02 val 2600 [ 461.771133][T10441] pwc: recv_control_msg error -71 req 02 val 2900 [ 461.792163][T10441] pwc: recv_control_msg error -71 req 02 val 2800 [ 461.807149][T10441] pwc: recv_control_msg error -71 req 04 val 1100 [ 462.230591][T10441] pwc: recv_control_msg error -71 req 04 val 1200 [ 462.417530][T10441] pwc: Registered as video103. [ 462.476731][T10441] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 462.723601][T10441] usb 2-1: USB disconnect, device number 17 [ 463.589791][T10515] tipc: Failed to remove unknown binding: 66,1,1/0:3836965148/3836965150 [ 463.668932][T10515] tipc: Failed to remove unknown binding: 66,1,1/0:3836965148/3836965150 [ 463.943963][T10515] tipc: Failed to remove unknown binding: 66,1,1/0:3836965148/3836965150 [ 464.714007][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 464.904503][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 464.927299][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 464.950966][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.983274][ T9] usb 2-1: Product: syz [ 464.987518][ T9] usb 2-1: Manufacturer: syz [ 465.010514][ T9] usb 2-1: SerialNumber: syz [ 465.031266][ T9] usb 2-1: config 0 descriptor?? [ 465.039693][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 465.055101][ T9] usb 2-1: Detected FT232H [ 465.249375][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 465.683316][ T5874] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 465.704122][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 465.845176][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.861937][ T5874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.894249][T10527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.925563][T10527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.926658][ T5874] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 465.947318][T10441] usb 2-1: USB disconnect, device number 18 [ 465.952624][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 465.969470][ T5874] usb 5-1: SerialNumber: syz [ 466.061318][T10441] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 466.104698][T10441] ftdi_sio 2-1:0.0: device disconnected [ 466.237871][ T5874] usb 5-1: 0:2 : does not exist [ 466.293484][ T5874] usb 5-1: USB disconnect, device number 23 [ 466.485848][ T8504] udevd[8504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.611343][T10554] ref_ctr_offset mismatch. inode: 0x63b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 466.816002][T10559] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 467.073074][T10572] tipc: Enabled bearer , priority 0 [ 467.118552][T10570] tipc: Resetting bearer [ 468.368095][T10599] netlink: 'syz.2.1522': attribute type 12 has an invalid length. [ 470.115486][ T978] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 470.305502][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.325244][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.335478][ T978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.349030][ T978] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.358666][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.372158][ T978] usb 1-1: config 0 descriptor?? [ 470.816738][ T978] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 470.839789][ T978] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 470.872149][ T978] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 471.472571][T10570] tipc: Disabling bearer [ 471.670050][T10630] bridge: RTM_NEWNEIGH with invalid ether address [ 472.866114][ T26] usb 1-1: USB disconnect, device number 21 [ 473.041443][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 476.753298][ T5872] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 477.255199][ T5872] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 477.269853][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.288577][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.308702][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 477.327620][ T5872] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 477.379510][ T5872] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 477.388141][ T5872] usb 2-1: Manufacturer: syz [ 477.399449][ T5872] usb 2-1: config 0 descriptor?? [ 478.314692][ T5872] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 478.325648][ T5872] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 478.337019][ T5872] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 479.549665][T10441] usb 2-1: USB disconnect, device number 19 [ 479.978192][ T5873] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 481.235762][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.254112][ T5873] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 481.274247][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.436810][ T5873] usb 6-1: config 0 descriptor?? [ 481.568668][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 482.178829][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 482.210892][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 482.213744][T10735] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 482.268237][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 482.306489][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 482.324384][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 482.333689][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 482.346284][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 482.358381][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 482.374854][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 482.606201][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 482.711311][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 482.723379][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 482.738897][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 483.583372][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 483.603899][T10441] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 483.621973][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 483.630434][ T5873] pwc: Registered as video103. [ 483.656251][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31 [ 483.684436][ T5873] usb 6-1: USB disconnect, device number 7 [ 483.773317][T10441] usb 5-1: Using ep0 maxpacket: 32 [ 483.781197][T10441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.831196][T10441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.863674][T10441] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 483.872791][T10441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.932868][T10441] usb 5-1: config 0 descriptor?? [ 483.969348][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 484.592982][T10441] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 484.772420][T10757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 484.787191][T10757] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 484.994044][T10757] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.093383][T10757] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 485.106733][T10770] overlayfs: invalid origin (00000079001ca41585ef4c4a28ba7aaa450f00f37bb0bfef0b24267def00000000ffffffff0000000000000000a9000000000000000000000000000000000000) [ 487.155198][ T5872] usb 5-1: USB disconnect, device number 24 [ 488.145754][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 488.145774][ T30] audit: type=1326 audit(1742625454.450:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.4.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2703f8d169 code=0x0 [ 493.400147][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 493.410692][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 493.882807][T10897] netlink: 'syz.1.1611': attribute type 4 has an invalid length. [ 495.564262][ T30] audit: type=1326 audit(1742625461.680:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.183724][ T30] audit: type=1326 audit(1742625461.680:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.262450][ T30] audit: type=1326 audit(1742625461.680:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.313941][ T30] audit: type=1326 audit(1742625461.680:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.376335][ T30] audit: type=1326 audit(1742625461.690:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.505544][ T30] audit: type=1326 audit(1742625461.690:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.659755][ T30] audit: type=1326 audit(1742625461.690:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.688852][ T30] audit: type=1326 audit(1742625461.690:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.711612][ T30] audit: type=1326 audit(1742625461.900:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 496.763312][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 497.613401][ T30] audit: type=1326 audit(1742625461.910:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462eb8d169 code=0x7ffc0000 [ 497.703787][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 497.819261][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 497.924162][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.062911][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.858770][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.873240][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.881304][ T9] usb 1-1: Product: syz [ 498.910651][ T9] usb 1-1: Manufacturer: syz [ 498.960485][ T9] usb 1-1: SerialNumber: syz [ 499.608553][ T9] usb 1-1: 0:2 : does not exist [ 499.677422][ T9] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 499.753706][ T9] usb 1-1: USB disconnect, device number 22 [ 499.891692][T10949] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 500.667328][T10956] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1631'. [ 500.695259][ T8504] udevd[8504]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.675986][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.643576][T10993] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 518.424201][T11105] IPVS: Error connecting to the multicast addr [ 523.640538][T11144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.663008][T11144] bond0: (slave rose0): Enslaving as an active interface with an up link [ 524.705108][ T5873] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 524.868246][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 525.189957][ T5873] usb 1-1: config 0 has no interfaces? [ 525.241308][ T5873] usb 1-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=3a.17 [ 525.274175][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.293284][ T5873] usb 1-1: Product: syz [ 525.303924][ T5873] usb 1-1: Manufacturer: syz [ 525.308712][ T5873] usb 1-1: SerialNumber: syz [ 525.341608][ T5873] usb 1-1: config 0 descriptor?? [ 525.609223][ T5873] usb 1-1: USB disconnect, device number 23 [ 526.906349][T11180] gfs2: gfs2 mount does not exist [ 537.016936][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 537.083461][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 537.180732][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 537.221687][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 537.289243][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 537.423937][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 537.462224][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 537.987746][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 538.003490][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 538.011345][T11244] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 539.572990][T11271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.594940][T11316] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 542.621912][T11316] CIFS mount error: No usable UNC path provided in device string! [ 542.621912][T11316] [ 542.632487][T11316] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 546.176698][T11331] vivid-007: disconnect [ 546.851107][T11329] vivid-007: reconnect [ 547.451083][ T30] audit: type=1326 audit(1742625513.750:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11348 comm="syz.5.1741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6ca38d169 code=0x0 [ 550.547643][T11378] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 550.709651][T11388] vxcan1: tx address claim with different name [ 562.272459][T11479] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 562.293396][T11478] validate_nla: 43 callbacks suppressed [ 562.293418][T11478] netlink: 'syz.1.1774': attribute type 2 has an invalid length. [ 562.306998][T11478] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 562.314983][T11478] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1774'. [ 562.326571][T11478] nbd: couldn't find a device at index 1568768 [ 563.143601][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.193340][T11486] kvm: kvm [11483]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 564.240923][T11486] kvm: kvm [11483]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 564.285961][T11486] kvm: kvm [11483]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 564.435314][T11496] vlan2: entered promiscuous mode [ 564.512164][T11496] netlink: 'syz.5.1779': attribute type 10 has an invalid length. [ 564.584029][T11496] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.593411][T11496] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.726721][T11496] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.733936][T11496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.741327][T11496] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.748492][T11496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.835113][T11496] bridge0: entered promiscuous mode [ 564.853763][T11496] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 565.053910][T11508] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 567.564695][T11527] tipc: Enabling of bearer rejected, media not registered [ 569.814460][T11543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1789'. [ 572.342511][T11565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1793'. [ 574.355164][T11570] random: crng reseeded on system resumption [ 585.172848][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 585.214190][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 587.433292][ T5874] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 588.453244][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 588.461944][ T5874] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 589.221146][ T5874] usb 2-1: config 0 has no interface number 0 [ 589.240728][ T5874] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 589.253551][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.261604][ T5874] usb 2-1: Product: syz [ 589.809698][T11654] syz.5.1817: attempt to access beyond end of device [ 589.809698][T11654] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 589.823980][T11654] syz.5.1817: attempt to access beyond end of device [ 589.823980][T11654] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 589.837225][T11654] Mount JFS Failure: -5 [ 590.241352][ T5874] usb 2-1: Manufacturer: syz [ 590.254838][ T5874] usb 2-1: SerialNumber: syz [ 591.780807][ T5874] usb 2-1: config 0 descriptor?? [ 591.793621][ T5874] usb 2-1: can't set config #0, error -71 [ 591.802789][ T5874] usb 2-1: USB disconnect, device number 20 [ 591.831124][T11662] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 597.299935][ T26] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 598.460439][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 598.485034][ T26] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 598.501340][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.517897][ T26] usb 6-1: config 0 descriptor?? [ 598.534153][ T26] as10x_usb: device has been detected [ 598.544966][ T26] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 598.601923][ T26] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 598.651060][T11715] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 598.721877][ T26] as10x_usb: error during firmware upload part1 [ 598.759640][ T26] Registered device nBox DVB-T Dongle [ 600.909031][T11740] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 601.658001][ T30] audit: type=1107 audit(1742625567.960:73): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='¯' [ 602.076634][ T26] usb 6-1: USB disconnect, device number 8 [ 602.131705][ T26] Unregistered device nBox DVB-T Dongle [ 602.148169][ T26] as10x_usb: device has been disconnected [ 603.420118][T11752] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.430047][T11752] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.438965][T11752] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.447844][T11752] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.374255][T11752] team0: Port device vxlan0 added [ 605.135067][T11755] sctp: [Deprecated]: syz.0.1845 (pid 11755) Use of int in maxseg socket option. [ 605.135067][T11755] Use struct sctp_assoc_value instead [ 605.937971][T11761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1849'. [ 605.954510][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 607.269644][ T63] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] PREEMPT SMP KASAN PTI [ 607.282304][ T63] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 607.290750][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 607.301448][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 607.311548][ T63] Workqueue: events_unbound netfs_write_collection_worker [ 607.318691][ T63] RIP: 0010:iov_iter_revert+0x2da/0x590 [ 607.324251][ T63] Code: 20 00 74 08 4c 89 ef e8 14 54 3a fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 5d [ 607.343865][ T63] RSP: 0018:ffffc90001547630 EFLAGS: 00010203 [ 607.349939][ T63] RAX: 0000000000000023 RBX: ffffc900015477c0 RCX: ffff88801cfd0000 [ 607.357916][ T63] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 607.365896][ T63] RBP: 000000000000011e R08: ffffffff84ec4395 R09: ffffffff84ec4224 [ 607.373888][ T63] R10: 0000000000000004 R11: ffff88801cfd0000 R12: dffffc0000000000 [ 607.381882][ T63] R13: 0000000000000000 R14: 0000000000000001 R15: 000000000000001e [ 607.389864][ T63] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 607.398803][ T63] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.405391][ T63] CR2: 00007f25037ffd74 CR3: 0000000011e56000 CR4: 00000000003526f0 [ 607.413372][ T63] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 607.421350][ T63] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 607.429326][ T63] Call Trace: [ 607.432612][ T63] [ 607.435547][ T63] ? __die_body+0x5f/0xb0 [ 607.439907][ T63] ? die_addr+0xb0/0xe0 [ 607.444073][ T63] ? exc_general_protection+0x3dd/0x5d0 [ 607.449647][ T63] ? asm_exc_general_protection+0x26/0x30 [ 607.455382][ T63] ? iov_iter_revert+0x104/0x590 [ 607.460328][ T63] ? iov_iter_revert+0x275/0x590 [ 607.465274][ T63] ? iov_iter_revert+0x2da/0x590 [ 607.470223][ T63] netfs_retry_writes+0x17db/0x19b0 [ 607.475444][ T63] ? __pfx_validate_chain+0x10/0x10 [ 607.480650][ T63] ? mark_lock+0x9a/0x360 [ 607.485013][ T63] ? __lock_acquire+0x1397/0x2100 [ 607.490072][ T63] ? __pfx_netfs_retry_writes+0x10/0x10 [ 607.495656][ T63] ? register_lock_class+0x102/0x980 [ 607.500961][ T63] ? __pfx_register_lock_class+0x10/0x10 [ 607.506607][ T63] netfs_write_collection_worker+0x2f90/0x3bc0 [ 607.512797][ T63] ? process_scheduled_works+0x9c6/0x18e0 [ 607.518519][ T63] process_scheduled_works+0xabe/0x18e0 [ 607.524083][ T63] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.530071][ T63] ? assign_work+0x364/0x3d0 [ 607.534756][ T63] worker_thread+0x870/0xd30 [ 607.539358][ T63] ? __kthread_parkme+0x169/0x1d0 [ 607.544393][ T63] ? __pfx_worker_thread+0x10/0x10 [ 607.549511][ T63] kthread+0x7a9/0x920 [ 607.553592][ T63] ? __pfx_kthread+0x10/0x10 [ 607.558203][ T63] ? __pfx_worker_thread+0x10/0x10 [ 607.563324][ T63] ? __pfx_kthread+0x10/0x10 [ 607.567926][ T63] ? __pfx_kthread+0x10/0x10 [ 607.572526][ T63] ? __pfx_kthread+0x10/0x10 [ 607.577128][ T63] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.582338][ T63] ? lockdep_hardirqs_on+0x99/0x150 [ 607.587550][ T63] ? __pfx_kthread+0x10/0x10 [ 607.592161][ T63] ret_from_fork+0x4b/0x80 [ 607.596588][ T63] ? __pfx_kthread+0x10/0x10 [ 607.601201][ T63] ret_from_fork_asm+0x1a/0x30 [ 607.605981][ T63] [ 607.609001][ T63] Modules linked in: [ 607.614526][ T63] ---[ end trace 0000000000000000 ]--- [ 607.621572][ T63] RIP: 0010:iov_iter_revert+0x2da/0x590 [ 607.627321][ T63] Code: 20 00 74 08 4c 89 ef e8 14 54 3a fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 5d [ 607.650463][ T63] RSP: 0018:ffffc90001547630 EFLAGS: 00010203 [ 608.026724][ T63] RAX: 0000000000000023 RBX: ffffc900015477c0 RCX: ffff88801cfd0000 [ 608.034842][ T63] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.042972][ T63] RBP: 000000000000011e R08: ffffffff84ec4395 R09: ffffffff84ec4224 [ 608.051462][ T63] R10: 0000000000000004 R11: ffff88801cfd0000 R12: dffffc0000000000 [ 608.059692][ T63] R13: 0000000000000000 R14: 0000000000000001 R15: 000000000000001e [ 608.088517][ T63] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 608.117948][ T63] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.070281][ T63] CR2: 0000001b2f815ff8 CR3: 000000007eb1a000 CR4: 00000000003526f0 [ 609.082472][ T63] Kernel panic - not syncing: Fatal exception [ 609.088935][ T63] Kernel Offset: disabled [ 609.093267][ T63] Rebooting in 86400 seconds..