last executing test programs: 2m38.457959461s ago: executing program 3 (id=924): write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@generic={0x3, 0x6, "b9e7a9", 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}, 0x36) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m37.059486002s ago: executing program 3 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 2m36.889304065s ago: executing program 3 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) 2m32.647945508s ago: executing program 3 (id=942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="08004305060005000000c40000c7ec0f"], 0x1200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_async', 0x169a82, 0x0) openat$dsp(0xffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2m30.727936416s ago: executing program 3 (id=945): syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 2m29.82899845s ago: executing program 3 (id=947): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0x1, 0x25a, 0x0, r0}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 2m13.600988432s ago: executing program 32 (id=947): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0x1, 0x25a, 0x0, r0}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 10.591580428s ago: executing program 4 (id=1444): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 10.169565114s ago: executing program 1 (id=1447): socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4040) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10.128040657s ago: executing program 5 (id=1448): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) mq_open(0x0, 0x2, 0x1b6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r1, &(0x7f0000000ec0)=""/4096, 0x1000) 9.029961373s ago: executing program 2 (id=1449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c240)=@deltfilter={0x3c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x401}]}, 0x3c}}, 0x20044000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r5, 0x2f, 0x7, 0x3, 0x1, 0x8, @mcast1, @mcast1, 0x8000, 0x8, 0x6, 0x8}}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x200, '\x00', r7, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x5842, 0x136) writev(r8, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) 8.273838075s ago: executing program 1 (id=1451): creat(0x0, 0xd931d3864d39dcca) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x14001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) 8.188240541s ago: executing program 5 (id=1452): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b7040000000000", @ANYRES64=0x0, @ANYRES64=0x77359400], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.447678007s ago: executing program 1 (id=1453): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x30}], 0x400000000000172, 0x4001c00) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2e, 0x20004840) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x7, 0x0, {0x5, 0x4, 0x2, 0xc, 0x9, 0x66, 0xb, 0xf8, 0x2, 0x5, @loopback, @broadcast}}}}}}, 0x0) 7.441408874s ago: executing program 4 (id=1454): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff25000080", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.307433623s ago: executing program 5 (id=1456): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 6.934660816s ago: executing program 5 (id=1457): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4008020) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') timer_create(0x0, 0x0, 0x0) preadv(r3, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) 6.902618673s ago: executing program 4 (id=1458): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close(r1) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x0) r5 = pidfd_getfd(r3, r3, 0x0) setns(r5, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x1) 6.463261288s ago: executing program 1 (id=1459): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 6.370301092s ago: executing program 6 (id=1460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB], 0xcc}}, 0x0) 6.113537187s ago: executing program 6 (id=1461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@md0, 0x0, &(0x7f0000000300)='./file0\x00') getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080)) socket$inet6_udplite(0xa, 0x2, 0x88) 5.056885934s ago: executing program 6 (id=1462): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.00084657s ago: executing program 4 (id=1463): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 4.714701368s ago: executing program 2 (id=1464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 4.579586123s ago: executing program 0 (id=1465): creat(0x0, 0xd931d3864d39dcca) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x14001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) 3.997241608s ago: executing program 1 (id=1466): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 3.89104519s ago: executing program 4 (id=1467): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}}, 0x0, 0x5}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 3.87087309s ago: executing program 2 (id=1468): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) 3.853805721s ago: executing program 0 (id=1469): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef5377", 0xdd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x21c}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.696363023s ago: executing program 6 (id=1470): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff25000080", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.634736074s ago: executing program 0 (id=1471): open$dir(0x0, 0x1cd000, 0x2) 3.514716812s ago: executing program 2 (id=1472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000fe0000090000000006001500040000001400168010000880"], 0x38}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = syz_open_dev$radio(&(0x7f000001b000), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f0000000440)}}) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500140600fc020000000000000000000000000001fe8000000000000000000000000000aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200007e780000"], 0x0) 3.406546179s ago: executing program 0 (id=1473): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.227567299s ago: executing program 0 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@md0, 0x0, &(0x7f0000000300)='./file0\x00') getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080)) socket$inet6_udplite(0xa, 0x2, 0x88) 2.002321879s ago: executing program 2 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCSETS(r3, 0x40384708, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2.000680863s ago: executing program 6 (id=1476): syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT, 0x4) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f000017f000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x0, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x181, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001980)={0x11, 0x0, 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r1}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='0', 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4080, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000700)=@add_del={0x2, 0x0}) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_emit_vhci(0x0, 0x0) 1.846527494s ago: executing program 5 (id=1477): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x6ba, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 409.015505ms ago: executing program 0 (id=1478): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 408.472356ms ago: executing program 4 (id=1479): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 330.66533ms ago: executing program 6 (id=1480): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x2000800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000000)) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x800, 0x4, 0x5, 0x78d9, 0x3ff, 0x1, 0x4, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x13c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x110, 0x2, [@TCA_U32_SEL={0x104, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x4, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x3, 0xffff}, {0x5, 0x81, 0x2, 0x2}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x2, 0xb62, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x200, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x13c}}, 0x4080) 287.729028ms ago: executing program 5 (id=1481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 110.104393ms ago: executing program 2 (id=1482): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(r0, 0x40049409, r0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 0s ago: executing program 1 (id=1483): write$sndseq(0xffffffffffffffff, &(0x7f0000000480)=[{0x2, 0x0, 0x5, 0x83, @tick=0x7, {0xfc}, {}, @control={0x7, 0x8, 0x3}}, {0x0, 0x46, 0xf, 0x6, @time={0x7, 0xffff}, {0x9}, {0xa1, 0x3}, @control={0x0, 0x198, 0x9}}], 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20048482) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400244}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): -executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 148.868576][ T31] audit: type=1326 audit(1769659325.225:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 148.980154][ T6631] warning: `syz.1.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.007159][ T31] audit: type=1326 audit(1769659325.225:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 149.122735][ T31] audit: type=1326 audit(1769659325.235:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 149.221600][ T31] audit: type=1326 audit(1769659325.235:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 150.260581][ T6642] loop5: detected capacity change from 0 to 256 [ 150.291186][ T6642] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 153.110982][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.244'. [ 153.628959][ T6675] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 154.264497][ T6675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.557441][ T6678] vlan2: entered allmulticast mode [ 154.584878][ T6678] veth0_to_bond: entered allmulticast mode [ 154.622710][ T6678] bond1: (slave vlan2): making interface the new active one [ 154.656918][ T6678] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 157.819914][ T6699] overlayfs: failed to resolve './file0': -2 [ 160.682969][ T6724] loop4: detected capacity change from 0 to 256 [ 161.115452][ T6724] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 163.020111][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 163.287252][ T6756] overlayfs: failed to resolve './file0': -2 [ 163.660550][ T6764] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.667514][ T6764] overlayfs: failed to set xattr on upper [ 163.673311][ T6764] overlayfs: ...falling back to redirect_dir=nofollow. [ 163.680173][ T6764] overlayfs: ...falling back to index=off. [ 163.685953][ T6764] overlayfs: ...falling back to uuid=null. [ 163.714581][ T6764] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 166.257379][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 166.609612][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 167.581670][ T6814] overlayfs: failed to resolve './file0': -2 [ 168.753760][ T6821] loop3: detected capacity change from 0 to 256 [ 168.892414][ T6821] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 170.237472][ T6839] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.438998][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.639428][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 170.663576][ T5941] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 170.716421][ T5941] usb 3-1: config 0 has no interface number 0 [ 170.768580][ T5941] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 170.869350][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.877389][ T5941] usb 3-1: Product: syz [ 170.916160][ T5941] usb 3-1: Manufacturer: syz [ 170.932846][ T5941] usb 3-1: SerialNumber: syz [ 170.966916][ T5941] usb 3-1: config 0 descriptor?? [ 170.981908][ T5941] smsc95xx v2.0.0 [ 171.060786][ T6858] tipc: Enabling of bearer rejected, already enabled [ 171.249883][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 171.418592][ T5941] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 171.664464][ T5941] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 172.696819][ T6874] loop6: detected capacity change from 0 to 2640 [ 172.706044][ T6874] buffer_io_error: 11 callbacks suppressed [ 172.706080][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.719880][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.727747][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.735703][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.743586][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.751483][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.759378][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.767233][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.775199][ T6874] ldm_validate_partition_table(): Disk read failed. [ 172.781949][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.789863][ T6874] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.797736][ T6874] Dev loop6: unable to read RDB block 0 [ 172.803540][ T6874] loop6: unable to read partition table [ 172.811428][ T6874] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 173.030344][ T5941] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 173.054686][ T5941] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 174.614490][ T5941] usb 3-1: USB disconnect, device number 3 [ 175.990900][ T6905] tipc: Started in network mode [ 176.681437][ T6905] tipc: Node identity ac14140f, cluster identity 4711 [ 176.879761][ T6905] tipc: New replicast peer: 255.255.255.255 [ 176.886378][ T6905] tipc: Enabled bearer , priority 10 [ 178.020432][ T10] tipc: Node number set to 2886997007 [ 181.980509][ T5839] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.029214][ T5941] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.158951][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 182.189980][ T5839] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 182.198976][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 182.209389][ T5839] usb 3-1: config 0 has no interface number 0 [ 182.221152][ T5839] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 182.232289][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 182.253359][ T5941] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 182.271113][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.299001][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.310780][ T5839] usb 3-1: Product: syz [ 182.314956][ T5839] usb 3-1: Manufacturer: syz [ 182.357020][ T5839] usb 3-1: SerialNumber: syz [ 182.364654][ T5941] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.384998][ T5839] usb 3-1: config 0 descriptor?? [ 182.394220][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 182.404280][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.414570][ T5920] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 182.425863][ T5839] smsc95xx v2.0.0 [ 182.440558][ T5920] usb 5-1: config 0 has no interface number 0 [ 182.447070][ T5941] usb 6-1: Product: syz [ 182.451527][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 182.467268][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 182.484819][ T5941] usb 6-1: Manufacturer: syz [ 182.494740][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.503071][ T5941] usb 6-1: SerialNumber: syz [ 182.519487][ T5941] usb 6-1: config 0 descriptor?? [ 182.524555][ T5920] usb 5-1: Product: syz [ 182.528735][ T5920] usb 5-1: Manufacturer: syz [ 182.552031][ T5941] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.569160][ T5920] usb 5-1: SerialNumber: syz [ 182.581565][ T5941] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 182.591382][ T5920] usb 5-1: config 0 descriptor?? [ 182.620345][ T5920] hub 5-1:0.132: bad descriptor, ignoring hub [ 182.647237][ T5920] hub 5-1:0.132: probe with driver hub failed with error -5 [ 182.655235][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 182.666545][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 182.685659][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.706320][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input6 [ 182.716484][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.742175][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.982003][ T5839] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 183.014621][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.028390][ T5839] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 183.042355][ T5920] usb 5-1: USB disconnect, device number 2 [ 183.600610][ T6956] loop0: detected capacity change from 0 to 256 [ 183.676196][ T6956] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 183.741663][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.756012][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.767444][ T5941] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 183.775551][ T5941] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 183.882902][ T6963] tipc: Started in network mode [ 183.897431][ T6963] tipc: Node identity ac14140f, cluster identity 4711 [ 183.919507][ T6963] tipc: New replicast peer: 255.255.255.255 [ 183.926286][ T6963] tipc: Enabled bearer , priority 10 [ 184.031950][ T9] usb 4-1: usb_control_msg returned -32 [ 184.037610][ T9] usbtmc 4-1:16.0: can't read capabilities [ 184.165517][ T5839] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 184.207551][ T5839] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 184.334183][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 184.952471][ T5839] usb 4-1: USB disconnect, device number 2 [ 185.184786][ T5941] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 185.233076][ T9] tipc: Node number set to 2886997007 [ 185.352785][ T5946] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 185.617972][ T5964] usb 3-1: USB disconnect, device number 4 [ 185.767890][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 185.799127][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.816603][ T5941] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 185.894775][ T5941] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 185.909789][ T5941] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 185.930639][ T5946] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 185.938653][ T5941] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 185.949372][ T5941] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 185.966562][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.011915][ T5941] usb 6-1: USB disconnect, device number 3 [ 186.041728][ T5946] usb 5-1: config 0 descriptor?? [ 186.656706][ T7003] loop2: detected capacity change from 0 to 512 [ 187.422526][ T7003] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 187.512592][ T5946] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 187.615160][ T7003] EXT4-fs (loop2): 1 orphan inode deleted [ 187.622885][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.637066][ T12] __quota_error: 18 callbacks suppressed [ 187.637079][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 187.670611][ T7003] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.926321][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 188.092439][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.281161][ T5946] usb 5-1: USB disconnect, device number 3 [ 189.284025][ T7021] loop1: detected capacity change from 0 to 256 [ 189.533913][ T7021] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 190.258425][ T5946] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 190.458990][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 190.498828][ T5946] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 190.519208][ T7034] netlink: 44 bytes leftover after parsing attributes in process `syz.2.369'. [ 190.549042][ T5946] usb 1-1: config 0 has no interface number 0 [ 190.572167][ T5946] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 190.634444][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.681018][ T5946] usb 1-1: Product: syz [ 190.712121][ T5946] usb 1-1: Manufacturer: syz [ 190.741011][ T5946] usb 1-1: SerialNumber: syz [ 190.917888][ T5946] usb 1-1: config 0 descriptor?? [ 190.922852][ T7038] fuse: Unknown parameter 'fd0x0000000000000003' [ 190.970993][ T5946] smsc95xx v2.0.0 [ 191.333458][ T5941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.376376][ T5946] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 191.413657][ T5946] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 191.540520][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 191.631066][ T5941] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 191.646630][ T5941] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.687352][ T5941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.722987][ T5941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.782954][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 191.818201][ T5941] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.872861][ T5941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.892376][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.127044][ T5941] usb 3-1: usb_control_msg returned -32 [ 192.143158][ T5941] usbtmc 3-1:16.0: can't read capabilities [ 192.396633][ T5946] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 192.419246][ T5946] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 193.376869][ T975] usb 3-1: USB disconnect, device number 5 [ 193.443603][ T5941] usb 1-1: USB disconnect, device number 2 [ 193.503058][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.514330][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.527001][ T31] audit: type=1326 audit(1769659371.335:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 195.479212][ T31] audit: type=1326 audit(1769659371.345:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 195.839036][ T31] audit: type=1326 audit(1769659371.365:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 195.941814][ T31] audit: type=1326 audit(1769659371.365:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 196.478959][ T31] audit: type=1326 audit(1769659371.375:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 196.614395][ T31] audit: type=1326 audit(1769659371.405:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 196.654090][ T31] audit: type=1326 audit(1769659371.405:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 196.719920][ T31] audit: type=1326 audit(1769659371.405:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 196.812734][ T31] audit: type=1326 audit(1769659371.405:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 196.824769][ T7094] Bluetooth: MGMT ver 1.23 [ 196.835143][ T31] audit: type=1326 audit(1769659371.405:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7ffc0000 [ 197.488862][ T7102] hub 8-0:1.0: USB hub found [ 197.865927][ T7102] hub 8-0:1.0: 1 port detected [ 199.879099][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 200.099008][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 200.187371][ T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 200.211842][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.271872][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.383325][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.428228][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.634302][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.643889][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.824006][ T7137] loop0: detected capacity change from 0 to 512 [ 201.508731][ T7137] EXT4-fs (loop0): 1 orphan inode deleted [ 201.516906][ T7137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.534170][ T7137] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.665055][ T50] __quota_error: 4 callbacks suppressed [ 201.665084][ T50] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 201.665804][ T30] usb 6-1: usb_control_msg returned -32 [ 201.693550][ T30] usbtmc 6-1:16.0: can't read capabilities [ 201.762907][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 201.908771][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.158234][ T5941] usb 6-1: USB disconnect, device number 4 [ 205.931299][ T7176] netlink: 14 bytes leftover after parsing attributes in process `syz.2.415'. [ 207.534506][ T7189] loop0: detected capacity change from 0 to 512 [ 207.580149][ T7176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.672314][ T7189] EXT4-fs (loop0): 1 orphan inode deleted [ 207.686953][ T7189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.157866][ T7189] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.274943][ T50] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 208.367963][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 208.404316][ T7176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.494585][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.518065][ T7176] bond0 (unregistering): Released all slaves [ 208.677982][ T7204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.986416][ T7212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.689039][ T5941] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.859031][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 209.899624][ T5941] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 209.915215][ T5941] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.925607][ T5941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.936403][ T5941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.947533][ T5941] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.967911][ T5941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.984387][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.392787][ T5941] usb 3-1: usb_control_msg returned -32 [ 210.399702][ T5941] usbtmc 3-1:16.0: can't read capabilities [ 211.012543][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 211.019197][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 211.025371][ T5139] Bluetooth: hci4: command 0x0406 tx timeout [ 211.045793][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 211.062672][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.544571][ T5941] usb 3-1: USB disconnect, device number 6 [ 212.456848][ T7245] loop4: detected capacity change from 0 to 512 [ 213.075719][ T7245] EXT4-fs (loop4): 1 orphan inode deleted [ 213.083145][ T7245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.110767][ T7245] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.284156][ T7258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.435'. [ 213.293727][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 213.341651][ T50] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 213.359553][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 213.423281][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.517230][ T7273] program syz.2.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.568688][ T7304] loop2: detected capacity change from 0 to 512 [ 219.129008][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 219.692236][ T7304] EXT4-fs (loop2): 1 orphan inode deleted [ 219.699908][ T7304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.714850][ T7304] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.714857][ T1320] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 219.748317][ T1320] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 220.837018][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.117400][ T7323] fuse: Bad value for 'fd' [ 222.132714][ T5839] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 222.193876][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 222.328458][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 222.355431][ T5839] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 222.376186][ T5839] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 222.398856][ T5839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.440983][ T5839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 222.467783][ T5839] usb 6-1: config 1 has no interface number 0 [ 222.487996][ T5839] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 222.519906][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.584620][ T5839] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 222.778537][ T5839] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 222.865416][ T5839] snd_usb_pod 6-1:1.1: invalid control EP [ 222.907316][ T5839] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 223.277979][ T5839] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 223.302385][ T5839] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 223.311964][ T7350] netlink: 14 bytes leftover after parsing attributes in process `syz.0.468'. [ 223.326513][ T5839] usb 6-1: USB disconnect, device number 5 [ 223.498544][ T7350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.697914][ T7350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.712352][ T7350] bond0 (unregistering): Released all slaves [ 224.019867][ T7357] loop4: detected capacity change from 0 to 512 [ 225.065143][ T7357] EXT4-fs (loop4): 1 orphan inode deleted [ 225.072726][ T7357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.085543][ T13] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 225.085651][ T13] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 225.110858][ T7357] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.255006][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.344205][ T7370] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.474'. [ 226.600706][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.479'. [ 228.975875][ T7394] syz.4.482 (7394): drop_caches: 2 [ 229.209945][ T5838] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 233.614617][ T5838] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 233.623255][ T5838] Bluetooth: hci1: Injecting HCI hardware error event [ 233.632334][ T5838] Bluetooth: hci1: hardware error 0x00 [ 233.832323][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 234.089028][ T5964] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 235.138992][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 235.279084][ T5964] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 235.292274][ T5964] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 235.379376][ T5964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.459175][ T5964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 235.468146][ T5964] usb 1-1: config 1 has no interface number 0 [ 235.557267][ T5964] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 235.582269][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.609296][ T5964] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 235.811212][ T5964] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 235.836383][ T5838] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 235.861654][ T5964] snd_usb_pod 1-1:1.1: invalid control EP [ 235.882461][ T5964] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 235.916548][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.505'. [ 236.055535][ T5964] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 236.065104][ T5964] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 236.091310][ T5964] usb 1-1: USB disconnect, device number 3 [ 236.513291][ T7460] tipc: Started in network mode [ 236.521348][ T7460] tipc: Node identity 4, cluster identity 4711 [ 236.536520][ T7460] tipc: Node number set to 4 [ 237.748979][ T7478] capability: warning: `syz.4.510' uses 32-bit capabilities (legacy support in use) [ 237.875462][ T7478] program syz.4.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.678472][ T7490] netlink: 52 bytes leftover after parsing attributes in process `syz.0.514'. [ 238.872903][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 238.947621][ T7491] loop6: detected capacity change from 0 to 2640 [ 239.045484][ T7491] buffer_io_error: 6 callbacks suppressed [ 239.045500][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.236806][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.489278][ T7500] autofs4:pid:7500:validate_dev_ioctl: path string terminator missing for cmd(0xc0189377) [ 239.505271][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.541623][ T7476] syz.2.508 (7476): drop_caches: 2 [ 239.559356][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.839878][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.847750][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.936021][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.022640][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.210860][ T7491] ldm_validate_partition_table(): Disk read failed. [ 240.718616][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.895784][ T7491] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.076355][ T7491] Dev loop6: unable to read RDB block 0 [ 241.099381][ T7491] loop6: unable to read partition table [ 241.105245][ T7491] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 242.336411][ T7533] netlink: 52 bytes leftover after parsing attributes in process `syz.2.529'. [ 242.386293][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 242.960948][ T5964] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 244.058375][ T5964] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 244.080052][ T7550] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 244.092610][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.142353][ T5964] usb 3-1: Product: syz [ 244.146558][ T5964] usb 3-1: Manufacturer: syz [ 245.768943][ T5964] usb 3-1: SerialNumber: syz [ 245.829916][ T5964] usb 3-1: config 0 descriptor?? [ 245.888395][ T7555] netlink: 14 bytes leftover after parsing attributes in process `syz.0.537'. [ 245.959807][ T5964] usb 3-1: can't set config #0, error -71 [ 245.980953][ T5964] usb 3-1: USB disconnect, device number 7 [ 246.333485][ T7567] netlink: 68 bytes leftover after parsing attributes in process `syz.4.543'. [ 246.385273][ T7567] tipc: Enabling of bearer rejected, already enabled [ 247.349784][ T7575] netlink: 52 bytes leftover after parsing attributes in process `syz.4.545'. [ 248.666085][ T7595] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 248.673220][ T7595] overlayfs: failed to set xattr on upper [ 248.679048][ T7595] overlayfs: ...falling back to redirect_dir=nofollow. [ 248.686807][ T7595] overlayfs: ...falling back to index=off. [ 248.693455][ T7595] overlayfs: ...falling back to uuid=null. [ 248.699680][ T7595] overlayfs: conflicting lowerdir path [ 250.509584][ T7609] netlink: 14 bytes leftover after parsing attributes in process `syz.1.554'. [ 250.757300][ T7609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.824282][ T7609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.888984][ T7609] bond0 (unregistering): Released all slaves [ 251.010007][ T13] bond1: (slave vlan2): link status definitely down, disabling slave [ 251.068194][ T13] bond1: now running without any active interface! [ 251.360006][ T7620] netlink: 68 bytes leftover after parsing attributes in process `syz.2.558'. [ 251.600200][ T7624] tipc: Enabling of bearer rejected, already enabled [ 252.034979][ T7628] loop6: detected capacity change from 0 to 2640 [ 252.045974][ T7628] buffer_io_error: 11 callbacks suppressed [ 252.046015][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.060161][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.069290][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.078214][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.086467][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.094835][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.103219][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.111407][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.120185][ T7628] ldm_validate_partition_table(): Disk read failed. [ 252.127116][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.135292][ T7628] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.143776][ T7628] Dev loop6: unable to read RDB block 0 [ 252.150621][ T7628] loop6: unable to read partition table [ 252.158002][ T7628] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 253.094267][ T7633] netlink: 52 bytes leftover after parsing attributes in process `syz.3.561'. [ 253.395501][ T5947] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 253.618997][ T5825] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 254.459585][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 254.475031][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short [ 254.531511][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.548977][ T5941] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 254.718577][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 254.729362][ T5947] usb 3-1: string descriptor 0 read error: -22 [ 254.736716][ T5947] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 254.746034][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.754734][ T5825] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 254.765671][ T5825] usb 2-1: config 0 has no interface number 0 [ 254.811090][ T5825] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 254.908857][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.533363][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.552591][ T5941] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 255.568956][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.578046][ T5941] usb 1-1: Product: syz [ 255.590619][ T5825] usb 2-1: Product: syz [ 255.594845][ T5825] usb 2-1: Manufacturer: syz [ 255.609201][ T5825] usb 2-1: SerialNumber: syz [ 255.621892][ T5825] usb 2-1: config 0 descriptor?? [ 255.652396][ T975] usb 3-1: USB disconnect, device number 8 [ 255.670400][ T5825] smsc95xx v2.0.0 [ 255.683499][ T5941] usb 1-1: Manufacturer: syz [ 255.688142][ T5941] usb 1-1: SerialNumber: syz [ 255.733595][ T5941] usb 1-1: config 0 descriptor?? [ 255.757822][ T5941] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 256.095549][ T5825] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 256.138484][ T5825] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 256.375433][ T5825] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 256.396311][ T5825] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 256.929451][ T5825] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 257.181273][ T5941] gspca_sunplus: reg_r err -71 [ 257.197220][ T5941] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 257.231157][ T5941] usb 1-1: USB disconnect, device number 4 [ 257.302207][ T5825] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 257.318940][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.333850][ T5825] usb 4-1: config 0 descriptor?? [ 258.068419][ T5941] usb 2-1: USB disconnect, device number 6 [ 258.284212][ T7681] netlink: 52 bytes leftover after parsing attributes in process `syz.2.578'. [ 258.680415][ T5825] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 259.556298][ T5825] usb 4-1: USB disconnect, device number 3 [ 259.892212][ T7704] loop6: detected capacity change from 0 to 2640 [ 259.964429][ T7704] buffer_io_error: 6 callbacks suppressed [ 259.964446][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 259.989257][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.099607][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.150645][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.229199][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.230091][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 260.247393][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 260.350865][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.371793][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.438077][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.462329][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 260.476656][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 260.486614][ T7704] ldm_validate_partition_table(): Disk read failed. [ 260.505696][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.583316][ T7704] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.749350][ T7704] Dev loop6: unable to read RDB block 0 [ 261.061273][ T7704] loop6: unable to read partition table [ 261.097517][ T7704] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 261.400635][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 261.535142][ T7726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.595'. [ 261.575582][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'. [ 261.591085][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 261.635678][ T5906] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 261.651533][ T5906] usb 5-1: config 0 has no interface number 0 [ 261.692282][ T5906] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 261.733828][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.779106][ T5906] usb 5-1: Product: syz [ 261.799184][ T5906] usb 5-1: Manufacturer: syz [ 261.814109][ T5906] usb 5-1: SerialNumber: syz [ 261.847782][ T5906] usb 5-1: config 0 descriptor?? [ 261.882308][ T5906] smsc95xx v2.0.0 [ 262.363919][ T5906] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 262.540706][ T5906] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.613554][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 262.685802][ T7745] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 262.716857][ T5906] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 262.742198][ T5906] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 262.768491][ T7740] team0 (unregistering): Port device team_slave_0 removed [ 262.812735][ T7740] team0 (unregistering): Port device team_slave_1 removed [ 262.879030][ T5825] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 262.923261][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.606'. [ 262.932307][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.606'. [ 262.968429][ T78] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.986859][ T78] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.007337][ T78] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.038964][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 263.061760][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 263.101469][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 263.126002][ T5825] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.210237][ T78] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.239095][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.249293][ T5825] usb 1-1: Product: syz [ 263.787228][ T5825] usb 1-1: Manufacturer: syz [ 263.792031][ T5825] usb 1-1: SerialNumber: syz [ 263.808695][ T5825] usb 1-1: config 0 descriptor?? [ 263.837569][ T5825] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 263.950018][ T5825] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 264.130897][ T7768] __nla_validate_parse: 2 callbacks suppressed [ 264.130917][ T7768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.612'. [ 264.239151][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'. [ 264.323500][ T5941] usb 5-1: USB disconnect, device number 5 [ 264.682709][ T5825] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 264.683630][ T7777] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 264.697519][ T5825] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 264.710168][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.619'. [ 265.360704][ T5825] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 265.763580][ T5825] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 265.800799][ T5946] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 265.986744][ T5825] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 267.647866][ T5825] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 267.689412][ T5825] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 267.709099][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 267.800880][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 268.055675][ T5825] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 268.110446][ T5946] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 268.145994][ T5825] usb 1-1: USB disconnect, device number 5 [ 268.189395][ T7810] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 268.194753][ T5946] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 268.365968][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 268.564131][ T5946] usb 3-1: config 1 has no interface number 0 [ 268.749170][ T5946] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 268.943003][ T5946] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 268.957507][ T5946] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 268.984668][ T7821] netlink: 32 bytes leftover after parsing attributes in process `syz.3.629'. [ 269.043834][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.055532][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 269.105837][ T5946] usb 3-1: can't set config #1, error -71 [ 269.137595][ T5946] usb 3-1: USB disconnect, device number 9 [ 269.435108][ T7830] loop0: detected capacity change from 0 to 256 [ 269.482387][ T7830] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 269.541172][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.634'. [ 269.800392][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 270.879084][ T5839] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 271.448181][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 271.455645][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 271.472706][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.491435][ T5839] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.533985][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.549635][ T5839] usb 5-1: Product: syz [ 271.558845][ T5839] usb 5-1: Manufacturer: syz [ 271.571758][ T5839] usb 5-1: SerialNumber: syz [ 271.592881][ T5839] usb 5-1: config 0 descriptor?? [ 271.633275][ T5839] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.662466][ T5839] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 271.675005][ T7854] program syz.3.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.999043][ T5964] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 272.242755][ T5839] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 272.249475][ T7860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.646'. [ 272.258328][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 272.288806][ T5839] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 272.299368][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 272.318516][ T5964] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 272.336104][ T5964] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 272.415228][ T5964] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 272.741532][ T5964] usb 3-1: config 1 has no interface number 0 [ 272.749490][ T5964] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.760667][ T5964] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.772206][ T5964] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 272.904274][ T5964] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 272.955020][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.013765][ T5964] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 273.029208][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.650'. [ 273.083061][ T7873] loop0: detected capacity change from 0 to 256 [ 273.134163][ T5839] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 273.165077][ T7873] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 273.206121][ T5964] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 273.264200][ T5964] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 273.290587][ T5964] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 273.348392][ T5839] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 273.397588][ T5839] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 273.433753][ T5964] usb 3-1: USB disconnect, device number 10 [ 273.461438][ T5839] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 273.495065][ T5839] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 273.511458][ T5839] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 273.532196][ T5839] usb 5-1: USB disconnect, device number 6 [ 274.241483][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 275.537055][ T7904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.661'. [ 275.586715][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 275.881566][ T5825] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 276.704547][ T31] audit: type=1326 audit(1769659453.315:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.5.662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7fff9aeb9 code=0x0 [ 276.829122][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 276.863438][ T5825] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 276.912903][ T5825] usb 3-1: config 0 has no interface number 0 [ 276.948020][ T5825] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.027435][ T5825] usb 3-1: config 0 interface 85 has no altsetting 0 [ 277.140632][ T5825] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 277.250535][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.324431][ T5825] usb 3-1: Product: syz [ 277.328630][ T5825] usb 3-1: Manufacturer: syz [ 277.340469][ T5825] usb 3-1: SerialNumber: syz [ 278.979616][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 279.003368][ T5825] usb 3-1: config 0 descriptor?? [ 279.047027][ T5825] usb 3-1: can't set config #0, error -71 [ 279.076231][ T5825] usb 3-1: USB disconnect, device number 11 [ 280.210019][ T7939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.675'. [ 280.230513][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 280.243531][ T7942] loop3: detected capacity change from 0 to 256 [ 280.390386][ T7942] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 280.766415][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 281.664713][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'. [ 282.411549][ T7968] bridge_slave_0: left allmulticast mode [ 282.417299][ T7968] bridge_slave_0: left promiscuous mode [ 282.454276][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.597632][ T7968] bridge_slave_1: left allmulticast mode [ 282.620174][ T5838] Bluetooth: hci0: command 0x0000 tx timeout [ 282.670917][ T7968] bridge_slave_1: left promiscuous mode [ 282.713921][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.797668][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.809610][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.852002][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.859679][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.876252][ T7968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 283.006764][ T7981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.690'. [ 283.049029][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 284.034132][ T8001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 284.362025][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.700'. [ 284.429344][ T5941] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 284.681903][ T5941] usb 1-1: Using ep0 maxpacket: 8 [ 284.763428][ T5941] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 285.149409][ T5941] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.207841][ T5941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.303524][ T5941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.368716][ T5941] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.399218][ T8028] netlink: 32 bytes leftover after parsing attributes in process `syz.5.708'. [ 285.420887][ T5941] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.433811][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.708'. [ 285.478929][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.686980][ T8032] bridge_slave_0: left allmulticast mode [ 285.699623][ T8032] bridge_slave_0: left promiscuous mode [ 285.705630][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.577829][ T5941] usb 1-1: usb_control_msg returned -32 [ 286.590905][ T5941] usbtmc 1-1:16.0: can't read capabilities [ 286.704488][ T8032] bridge_slave_1: left allmulticast mode [ 286.736020][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.855992][ T8032] team0: Port device team_slave_0 removed [ 286.907857][ T8032] team0: Port device team_slave_1 removed [ 286.929907][ T8032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.976712][ T8032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.013469][ T8032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.030170][ T8048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.714'. [ 287.054723][ T8032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.082102][ T8032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.252698][ T5920] usb 1-1: USB disconnect, device number 6 [ 288.561209][ T8067] netlink: 32 bytes leftover after parsing attributes in process `syz.5.723'. [ 288.658948][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 290.169027][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 290.369032][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 290.384271][ T30] usb 4-1: config 0 has no interfaces? [ 290.396070][ T30] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 290.426850][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.477288][ T30] usb 4-1: Product: syz [ 290.545024][ T30] usb 4-1: Manufacturer: syz [ 290.620891][ T30] usb 4-1: SerialNumber: syz [ 290.629879][ T975] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 290.931741][ T975] usb 6-1: Using ep0 maxpacket: 8 [ 291.004628][ T975] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 291.032167][ T975] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.053979][ T30] usb 4-1: config 0 descriptor?? [ 291.080004][ T975] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.112528][ T975] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.139064][ T975] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.208972][ T975] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.244728][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.322750][ T5964] usb 4-1: USB disconnect, device number 4 [ 291.513232][ T975] usb 6-1: usb_control_msg returned -32 [ 291.531030][ T975] usbtmc 6-1:16.0: can't read capabilities [ 292.407585][ T975] usb 6-1: USB disconnect, device number 6 [ 294.173557][ T8149] bridge_slave_0: left allmulticast mode [ 294.190120][ T8149] bridge_slave_0: left promiscuous mode [ 294.208468][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.246827][ T8149] bridge_slave_1: left allmulticast mode [ 294.266629][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.336575][ T8149] bond0: (slave bond_slave_0): Releasing backup interface [ 294.363925][ T8149] bond0: (slave bond_slave_1): Releasing backup interface [ 294.382872][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.391770][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.402375][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.410230][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.421525][ T8149] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.939009][ T975] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 295.268734][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 295.301275][ T975] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 295.315612][ T975] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 296.130890][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 296.140520][ T975] usb 4-1: config 1 has no interface number 0 [ 296.146624][ T975] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.157712][ T975] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 296.209143][ T975] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 296.239123][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.367445][ T975] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 296.549056][ T975] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 296.739793][ T5920] usb 4-1: USB disconnect, device number 5 [ 296.759466][ T5920] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 298.847490][ T8195] syzkaller0: entered promiscuous mode [ 298.979106][ T8195] syzkaller0: entered allmulticast mode [ 299.003353][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.011184][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.070454][ T1111] syzkaller0: tun_net_xmit 48 [ 299.149013][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 299.329003][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 299.360444][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 299.386955][ T30] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 299.411471][ T30] usb 6-1: can't read configurations, error -71 [ 300.136327][ T8237] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 300.143458][ T8237] overlayfs: failed to set xattr on upper [ 300.149402][ T8237] overlayfs: ...falling back to redirect_dir=nofollow. [ 300.156287][ T8237] overlayfs: ...falling back to index=off. [ 300.162227][ T8237] overlayfs: ...falling back to uuid=null. [ 300.168303][ T8237] overlayfs: conflicting lowerdir path [ 301.559656][ T8252] netlink: 244 bytes leftover after parsing attributes in process `syz.3.793'. [ 302.870095][ T8265] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.798'. [ 302.906038][ T8265] netlink: ct family unspecified [ 304.017275][ T8279] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 304.024503][ T8279] overlayfs: failed to set xattr on upper [ 304.030340][ T8279] overlayfs: ...falling back to redirect_dir=nofollow. [ 304.037243][ T8279] overlayfs: ...falling back to index=off. [ 304.043215][ T8279] overlayfs: ...falling back to uuid=null. [ 304.049434][ T8279] overlayfs: conflicting lowerdir path [ 307.399263][ T5920] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 307.592813][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.650758][ T5920] usb 4-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 307.669103][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.755155][ T5920] usb 4-1: config 0 descriptor?? [ 308.706695][ T8338] loop7: detected capacity change from 0 to 7 [ 309.078686][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.088384][ C1] buffer_io_error: 11 callbacks suppressed [ 309.088399][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.149225][ T5920] apple 0003:05AC:8102.0002: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.3-1/input0 [ 309.340661][ T8339] Invalid logical block size (256) [ 309.371228][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.380901][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.403677][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.413314][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.423541][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.433156][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.442140][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.451764][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.461812][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.471431][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.479424][ T8338] ldm_validate_partition_table(): Disk read failed. [ 309.490170][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.499787][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.509005][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.518676][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.531107][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.540705][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.550228][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 309.559826][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.567875][ T8338] Dev loop7: unable to read RDB block 0 [ 309.575261][ T8338] loop7: unable to read partition table [ 309.581161][ T8338] loop7: partition table beyond EOD, truncated [ 309.587358][ T8338] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 309.724599][ T5964] usb 4-1: USB disconnect, device number 6 [ 309.835517][ T8345] fuse: Bad value for 'user_id' [ 309.866367][ T8345] fuse: Bad value for 'user_id' [ 310.014882][ T8344] fido_id[8344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 310.220868][ T5839] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 310.510910][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.528686][ T5839] usb 5-1: too many configurations: 243, using maximum allowed: 8 [ 310.583237][ T5839] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 310.603627][ T5839] usb 5-1: can't read configurations, error -71 [ 312.094864][ T8381] overlayfs: workdir and upperdir must be separate subtrees [ 312.709939][ T8400] misc userio: The device must be registered before sending interrupts [ 315.504971][ T8428] syzkaller0: entered promiscuous mode [ 315.538982][ T8428] syzkaller0: entered allmulticast mode [ 315.916345][ T8448] overlayfs: missing 'lowerdir' [ 315.966843][ T8448] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 315.974738][ T8448] overlayfs: failed to set xattr on upper [ 316.591374][ T8448] overlayfs: ...falling back to redirect_dir=nofollow. [ 316.598296][ T8448] overlayfs: ...falling back to index=off. [ 316.604234][ T8448] overlayfs: ...falling back to uuid=null. [ 316.610198][ T8448] overlayfs: conflicting lowerdir path [ 316.665598][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.885783][ T5964] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 317.950708][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.486414][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.768947][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.994712][ T5964] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.034392][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.080025][ T5964] usb 5-1: config 0 descriptor?? [ 319.093685][ T5964] usb 5-1: can't set config #0, error -71 [ 320.644434][ T5964] usb 5-1: USB disconnect, device number 9 [ 324.779039][ T5946] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 324.929087][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 324.949640][ T5946] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 324.957738][ T5946] usb 3-1: config 0 has no interface number 0 [ 325.033130][ T5946] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.048957][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.056959][ T5946] usb 3-1: Product: syz [ 325.061525][ T5946] usb 3-1: Manufacturer: syz [ 325.066249][ T5946] usb 3-1: SerialNumber: syz [ 325.140887][ T5946] usb 3-1: config 0 descriptor?? [ 325.160722][ T5946] smsc95xx v2.0.0 [ 325.169767][ T5946] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 325.201845][ T5946] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 327.828160][ T5906] usb 3-1: USB disconnect, device number 12 [ 328.098982][ T5941] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 328.467883][ T8558] overlayfs: missing 'lowerdir' [ 328.580878][ T8559] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 328.588022][ T8559] overlayfs: failed to set xattr on upper [ 328.593911][ T8559] overlayfs: ...falling back to redirect_dir=nofollow. [ 328.600893][ T8559] overlayfs: ...falling back to index=off. [ 328.606805][ T8559] overlayfs: ...falling back to uuid=null. [ 328.613025][ T8559] overlayfs: conflicting lowerdir path [ 328.989016][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 329.033394][ T5941] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 329.168688][ T5941] usb 5-1: config 0 has no interface number 0 [ 329.177316][ T5941] usb 5-1: config 0 interface 28 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 329.188777][ T5941] usb 5-1: config 0 interface 28 has no altsetting 0 [ 329.198213][ T5941] usb 5-1: Dual-Role OTG device on HNP port [ 329.204954][ T5941] usb 5-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67 [ 329.214280][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.222627][ T5941] usb 5-1: Product: syz [ 329.226792][ T5941] usb 5-1: Manufacturer: syz [ 329.231854][ T5941] usb 5-1: SerialNumber: syz [ 329.289823][ T5941] usb 5-1: config 0 descriptor?? [ 329.341049][ T5941] hub 5-1:0.28: bad descriptor, ignoring hub [ 329.347106][ T5941] hub 5-1:0.28: probe with driver hub failed with error -5 [ 329.509737][ T8564] overlayfs: missing 'lowerdir' [ 329.560892][ T8565] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 329.606842][ T5941] option 5-1:0.28: GSM modem (1-port) converter detected [ 329.991086][ T5941] usb 5-1: USB disconnect, device number 10 [ 330.044086][ T5941] option 5-1:0.28: device disconnected [ 330.267791][ T8573] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 330.275293][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.905'. [ 332.416907][ T8597] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 334.936597][ T8617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 336.669081][ T5839] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 336.800106][ T5920] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 336.921450][ T8643] netlink: 'syz.4.930': attribute type 10 has an invalid length. [ 336.940262][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 336.952222][ T5839] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 336.973811][ T5920] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 336.995316][ T5839] usb 3-1: config 0 has no interface number 0 [ 337.001564][ T5920] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 337.028667][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 337.049369][ T5839] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 337.080994][ T5920] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 337.097203][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.133876][ T5839] usb 3-1: Product: syz [ 337.167027][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 337.179043][ T5839] usb 3-1: Manufacturer: syz [ 337.209897][ T5839] usb 3-1: SerialNumber: syz [ 337.215278][ T8643] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 337.234805][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 337.272714][ T5839] usb 3-1: config 0 descriptor?? [ 337.540926][ T5839] smsc95xx v2.0.0 [ 337.544693][ T5839] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 337.561585][ T5920] usb 1-1: string descriptor 0 read error: -22 [ 337.571394][ T5920] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 337.581140][ T5839] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 337.609262][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.352562][ T5920] usb 1-1: config 0 descriptor?? [ 338.379588][ T8635] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 338.424526][ T5920] hub 1-1:0.0: bad descriptor, ignoring hub [ 338.468053][ T5920] hub 1-1:0.0: probe with driver hub failed with error -5 [ 339.467332][ T5920] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 339.670603][ T5920] usb 1-1: USB disconnect, device number 7 [ 339.825077][ T5941] usb 3-1: USB disconnect, device number 13 [ 340.037327][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'. [ 344.894289][ T8707] misc userio: The device must be registered before sending interrupts [ 344.949054][ T5920] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 345.056441][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'. [ 345.119094][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 345.140113][ T5920] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 345.154759][ T5920] usb 6-1: config 0 has no interface number 0 [ 345.171970][ T5920] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 345.193432][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.201950][ T5920] usb 6-1: Product: syz [ 345.206227][ T5920] usb 6-1: Manufacturer: syz [ 345.212257][ T5920] usb 6-1: SerialNumber: syz [ 345.228349][ T5920] usb 6-1: config 0 descriptor?? [ 345.241875][ T5920] smsc95xx v2.0.0 [ 345.248974][ T5920] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 345.260768][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.952'. [ 345.269201][ T5920] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 347.459299][ T5946] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 347.999085][ T5946] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 348.049570][ T5946] usb 3-1: config 7 has no interface number 0 [ 348.081569][ T5946] usb 3-1: config 7 interface 252 has no altsetting 0 [ 348.110397][ T5946] usb 3-1: string descriptor 0 read error: -22 [ 348.129005][ T5946] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 348.149373][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.197151][ T975] usb 6-1: USB disconnect, device number 9 [ 348.405407][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.966'. [ 348.483849][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 348.695480][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 348.838353][ T8775] misc userio: The device must be registered before sending interrupts [ 349.043996][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 349.798968][ T8800] netlink: 'syz.5.974': attribute type 13 has an invalid length. [ 349.806953][ T8800] netlink: 'syz.5.974': attribute type 17 has an invalid length. [ 350.027711][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.977'. [ 350.065111][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.977'. [ 350.157813][ T30] usb 3-1: USB disconnect, device number 14 [ 350.675478][ T8800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.804682][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.980'. [ 351.034130][ T8814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.981'. [ 351.243020][ T8818] syz.4.982 (8818): /proc/8815/oom_adj is deprecated, please use /proc/8815/oom_score_adj instead. [ 351.824905][ T8823] misc userio: The device must be registered before sending interrupts [ 351.975060][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 353.648767][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 353.657964][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 353.740317][ T8842] loop5: detected capacity change from 0 to 256 [ 353.842249][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.994'. [ 353.886199][ T8842] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 356.175294][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 356.567031][ T8871] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 356.578233][ T8871] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 356.587887][ T8871] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 356.595900][ T8871] UDF-fs: Scanning with blocksize 512 failed [ 356.622973][ T8871] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 356.633304][ T8871] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 356.643696][ T8871] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 356.651364][ T8871] UDF-fs: Scanning with blocksize 1024 failed [ 356.660745][ T8871] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 356.672773][ T8871] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 356.684177][ T8871] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 356.691831][ T8871] UDF-fs: Scanning with blocksize 2048 failed [ 356.703894][ T8871] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 356.716038][ T8871] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 356.727936][ T8871] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 356.735701][ T8871] UDF-fs: Scanning with blocksize 4096 failed [ 356.742419][ T8871] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 356.991125][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 357.205869][ T8879] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 357.238239][ T6289] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.257409][ T6289] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.287522][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1008'. [ 357.299331][ T6289] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.380906][ T6289] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 357.436024][ T8893] loop4: detected capacity change from 0 to 256 [ 357.499915][ T8893] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 357.840222][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 358.497343][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 358.630258][ T8915] netlink: 'syz.5.1015': attribute type 1 has an invalid length. [ 358.712808][ T8915] netlink: 'syz.5.1015': attribute type 1 has an invalid length. [ 360.344969][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.354220][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.365480][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.375355][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.384563][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.453038][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 360.705707][ T8942] loop1: detected capacity change from 0 to 256 [ 362.425504][ T8942] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 362.478254][ T5838] Bluetooth: hci6: command tx timeout [ 362.771237][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 364.016376][ T8933] chnl_net:caif_netlink_parms(): no params data found [ 364.539412][ T5838] Bluetooth: hci6: command tx timeout [ 364.621607][ T8978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'. [ 364.856622][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.969087][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.976350][ T8933] bridge_slave_0: entered allmulticast mode [ 365.396053][ T8933] bridge_slave_0: entered promiscuous mode [ 365.424174][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.469077][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.519216][ T8933] bridge_slave_1: entered allmulticast mode [ 365.528771][ T8933] bridge_slave_1: entered promiscuous mode [ 365.655787][ T8995] loop5: detected capacity change from 0 to 256 [ 365.678144][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.740922][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.751620][ T8995] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 366.132995][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 366.407095][ T8933] team0: Port device team_slave_0 added [ 366.489822][ T8933] team0: Port device team_slave_1 added [ 366.781049][ T5838] Bluetooth: hci6: command tx timeout [ 366.928028][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.937040][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.977341][ T8933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.092597][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.116881][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.244578][ T8933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.640815][ T8933] hsr_slave_0: entered promiscuous mode [ 367.668816][ T8933] hsr_slave_1: entered promiscuous mode [ 367.697113][ T8933] debugfs: 'hsr0' already exists in 'hsr' [ 367.719291][ T8933] Cannot create hsr debugfs directory [ 368.859344][ T5838] Bluetooth: hci6: command tx timeout [ 369.384149][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'. [ 369.962561][ T8933] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 370.024824][ T8933] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 370.129214][ T8933] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 370.167670][ T8933] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 370.348595][ T9054] random: crng reseeded on system resumption [ 370.452997][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'. [ 370.497193][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'. [ 370.604114][ T8933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.721499][ T8933] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.791140][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.798356][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.890935][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.898210][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.291501][ T9071] F2FS-fs: Conflicting test_dummy_encryption options [ 373.200834][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 373.381083][ T8933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.853719][ T9107] loop1: detected capacity change from 0 to 256 [ 373.917055][ T9107] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 374.247246][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 376.349902][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1085'. [ 376.429211][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1085'. [ 376.493784][ T5839] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 376.580289][ T8933] veth0_vlan: entered promiscuous mode [ 376.675233][ T8933] veth1_vlan: entered promiscuous mode [ 376.777397][ T5839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.807752][ T5839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.861260][ T8933] veth0_macvtap: entered promiscuous mode [ 376.971924][ T5839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 377.008223][ T8933] veth1_macvtap: entered promiscuous mode [ 377.016904][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.494069][ T5839] usb 5-1: usb_control_msg returned -32 [ 377.513657][ T5839] usbtmc 5-1:16.0: can't read capabilities [ 377.650260][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.710231][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.781519][ T78] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.822724][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.832553][ T78] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.868743][ T78] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.916660][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.102893][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.110916][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.278792][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.310799][ T9169] syz.5.1093 uses obsolete (PF_INET,SOCK_PACKET) [ 378.321568][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.508016][ T9173] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 379.037556][ T5964] usb 5-1: USB disconnect, device number 11 [ 379.610949][ T9186] overlayfs: missing 'lowerdir' [ 379.717719][ T9187] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 379.724986][ T9187] overlayfs: failed to set xattr on upper [ 379.730789][ T9187] overlayfs: ...falling back to redirect_dir=nofollow. [ 379.737677][ T9187] overlayfs: ...falling back to index=off. [ 379.743699][ T9187] overlayfs: ...falling back to uuid=null. [ 379.749799][ T9187] overlayfs: conflicting lowerdir path [ 381.788561][ T9208] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[9208] [ 383.149078][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 383.341970][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 383.905085][ T30] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 383.943044][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.088972][ T30] usb 2-1: Product: syz [ 384.097100][ T30] usb 2-1: Manufacturer: syz [ 384.106869][ T30] usb 2-1: SerialNumber: syz [ 384.124369][ T30] usb 2-1: config 0 descriptor?? [ 384.164636][ T30] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 384.198988][ T5964] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 384.351519][ T5964] usb 5-1: config 0 has no interfaces? [ 384.357177][ T5964] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.388356][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.437591][ T5964] usb 5-1: config 0 descriptor?? [ 384.589457][ T30] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 384.814005][ T30] usb 2-1: USB disconnect, device number 7 [ 384.846449][ T30] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 384.918781][ T5906] usb 5-1: USB disconnect, device number 12 [ 384.938255][ T30] visor 2-1:0.0: device disconnected [ 389.179013][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 389.765890][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.779016][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.794447][ T30] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 390.104808][ T30] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 390.113496][ T30] usb 5-1: Manufacturer: syz [ 390.124999][ T30] usb 5-1: config 0 descriptor?? [ 391.178638][ T30] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input9 [ 391.257714][ T30] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 391.382791][ T30] usb 5-1: USB disconnect, device number 13 [ 391.880271][ T9310] fido_id[9310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 393.852079][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 393.865895][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 394.299097][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1147'. [ 394.883433][ T9354] binder_alloc: binder_alloc_mmap_handler: 9353 2000009b3000-2000009b5000 already mapped failed -16 [ 395.516488][ T9365] tipc: Started in network mode [ 395.521428][ T9365] tipc: Node identity ac14140f, cluster identity 4711 [ 395.529950][ T9365] tipc: New replicast peer: 255.255.255.255 [ 395.536325][ T9365] tipc: Enabled bearer , priority 10 [ 396.212945][ T5906] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 396.416967][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.441373][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.472044][ T5906] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 396.501785][ T5906] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 396.529041][ T5906] usb 5-1: Manufacturer: syz [ 396.541451][ T975] tipc: Node number set to 2886997007 [ 396.552454][ T5906] usb 5-1: config 0 descriptor?? [ 397.404268][ T9392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'. [ 397.629698][ T5906] uclogic 0003:256C:006D.0004: v1 frame probing failed: -71 [ 397.639107][ T5906] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 397.659490][ T5906] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 397.746711][ T5906] usb 5-1: USB disconnect, device number 14 [ 401.341334][ T5825] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 401.547549][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 402.083142][ T9419] input: syz0 as /devices/virtual/input/input10 [ 402.130195][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.149391][ T5825] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 402.169374][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.218717][ T5825] usb 3-1: config 0 descriptor?? [ 402.730930][ T5825] isku 0003:1E7D:319C.0005: item fetching failed at offset 6/7 [ 402.765429][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1178'. [ 402.787662][ T5825] isku 0003:1E7D:319C.0005: parse failed [ 402.814463][ T5825] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -22 [ 405.045671][ T975] usb 3-1: USB disconnect, device number 15 [ 405.679679][ T975] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 406.033536][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.150189][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.212423][ T975] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 406.268994][ T975] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 406.300028][ T975] usb 3-1: Manufacturer: syz [ 406.325708][ T975] usb 3-1: config 0 descriptor?? [ 407.450596][ T9466] input: syz1 as /devices/virtual/input/input11 [ 407.987120][ T975] uclogic 0003:256C:006D.0006: v1 frame probing failed: -71 [ 408.008200][ T975] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 408.051552][ T975] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 408.099876][ T975] usb 3-1: USB disconnect, device number 16 [ 408.338944][ T5839] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 408.620719][ T9478] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 408.909454][ T975] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 409.158995][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 409.168074][ T5839] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 409.239011][ T5839] usb 2-1: config 0 has no interface number 0 [ 409.257999][ T5839] usb 2-1: config 0 interface 12 has no altsetting 0 [ 409.294322][ T5839] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 409.308940][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.328001][ T5839] usb 2-1: Product: syz [ 409.348120][ T5839] usb 2-1: Manufacturer: syz [ 409.368537][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 409.373735][ T5839] usb 2-1: SerialNumber: syz [ 409.392798][ T975] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 409.405012][ T5839] usb 2-1: config 0 descriptor?? [ 409.440971][ T975] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 409.612371][ T975] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.622427][ T975] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.635485][ T975] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.644597][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.261987][ T975] usb 5-1: GET_CAPABILITIES returned 0 [ 411.303535][ T975] usbtmc 5-1:16.0: can't read capabilities [ 411.369933][ T5839] usb 2-1: can't set config #0, error -71 [ 411.380609][ T5839] usb 2-1: USB disconnect, device number 8 [ 413.715238][ T5941] usb 5-1: USB disconnect, device number 15 [ 414.279297][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 414.288196][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 414.853352][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 414.862702][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 415.445754][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1209'. [ 415.489295][ T5839] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 415.659234][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 415.680970][ T5839] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 415.693234][ T5839] usb 1-1: config 0 has no interface number 0 [ 415.703006][ T5839] usb 1-1: config 0 interface 12 has no altsetting 0 [ 415.720619][ T5839] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 415.740171][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.757566][ T5839] usb 1-1: Product: syz [ 415.767681][ T5839] usb 1-1: Manufacturer: syz [ 415.790091][ T5839] usb 1-1: SerialNumber: syz [ 415.840460][ T5839] usb 1-1: config 0 descriptor?? [ 416.554550][ T9538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.590567][ T9538] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 416.811339][ T9538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.817333][ T9538] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 416.841086][ T9538] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 416.875319][ T9538] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 417.743909][ T9538] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 417.769887][ T9538] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 417.872014][ T9538] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 417.931990][ T9538] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 417.979086][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 418.179196][ T9538] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 418.549958][ T5839] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 418.569851][ T5839] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 418.577183][ T5839] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 418.798517][ T5839] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 418.816688][ T5839] usb 1-1: USB disconnect, device number 8 [ 418.852518][ T9568] tipc: Enabling of bearer rejected, already enabled [ 418.863369][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 418.867990][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 418.905169][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 419.820249][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 419.899982][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 420.061658][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 420.784830][ T9588] overlayfs: missing 'lowerdir' [ 420.967187][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 420.973658][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 421.899222][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 422.008978][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 422.565296][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1229'. [ 422.576649][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1229'. [ 422.609366][ T5839] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 422.668974][ T5964] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 423.074199][ T5964] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.095182][ T5964] usb 7-1: config 0 has no interface number 0 [ 423.124841][ T5839] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 423.189010][ T5839] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 423.197212][ T5839] usb 1-1: Product: syz [ 423.218965][ T5964] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 423.228023][ T5964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.301615][ T5839] usb 1-1: Manufacturer: syz [ 423.328776][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1235'. [ 423.328943][ T5964] usb 7-1: Product: syz [ 423.342574][ T5839] usb 1-1: SerialNumber: syz [ 423.369530][ T5839] usb 1-1: config 0 descriptor?? [ 423.374647][ T5964] usb 7-1: Manufacturer: syz [ 423.389027][ T5964] usb 7-1: SerialNumber: syz [ 423.419303][ T5839] ch341 1-1:0.0: ch341-uart converter detected [ 423.820013][ T5964] usb 7-1: config 0 descriptor?? [ 424.036217][ T5964] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 424.059454][ T5842] Bluetooth: hci6: command 0x0c1a tx timeout [ 424.157939][ T5964] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 424.201381][ T5964] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 424.248156][ T5964] usb 7-1: media controller created [ 424.305093][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.396087][ T5964] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 424.536042][ T9629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1237'. [ 424.592624][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 424.635621][ T5964] usb 7-1: USB disconnect, device number 2 [ 424.665107][ T5839] ch341-uart ttyUSB0: break control not supported, using simulated break [ 424.706313][ T5839] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 424.746559][ T5839] usb 1-1: USB disconnect, device number 9 [ 424.777150][ T5839] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 424.819699][ T5839] ch341 1-1:0.0: device disconnected [ 424.980437][ T9638] overlayfs: missing 'lowerdir' [ 427.017587][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 427.069854][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1247'. [ 427.542988][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1247'. [ 427.552050][ T8585] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.574836][ T8585] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.605841][ T8585] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.772077][ T8585] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.990062][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 429.980856][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 430.020403][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1256'. [ 430.660790][ T9702] overlayfs: missing 'lowerdir' [ 431.112896][ T975] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 431.301607][ T975] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 431.329040][ T975] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 431.358471][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 431.392098][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 431.429433][ T975] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.436393][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 432.480194][ T5964] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 432.759288][ T5964] usb 2-1: Using ep0 maxpacket: 8 [ 432.778497][ T975] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 432.915038][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.996065][ T5964] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.023644][ T975] usb 5-1: Product: syz [ 433.027841][ T975] usb 5-1: Manufacturer: syz [ 433.040120][ T5964] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.077905][ T5964] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.079039][ T975] usb 5-1: SerialNumber: syz [ 433.095641][ T5964] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.157091][ T975] usb 5-1: config 0 descriptor?? [ 433.164870][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 433.174426][ T5964] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.184136][ T9704] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.215583][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.226063][ T975] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 433.744046][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 433.811895][ T5964] usb 2-1: usb_control_msg returned -71 [ 433.819320][ T5964] usbtmc 2-1:16.0: can't read capabilities [ 433.948116][ T975] usb 5-1: USB disconnect, device number 16 [ 433.998332][ T5964] usb 2-1: USB disconnect, device number 9 [ 434.672490][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1274'. [ 436.473564][ T9748] team0 (unregistering): Port device team_slave_0 removed [ 436.556858][ T9748] team0 (unregistering): Port device team_slave_1 removed [ 437.587610][ T9769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.599569][ T9769] bond0: (slave rose0): Enslaving as an active interface with an up link [ 437.660121][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 439.266149][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.441396][ T9790] overlayfs: overlapping lowerdir path [ 439.685642][ T31] audit: type=1326 audit(1769659616.945:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4367794cd7 code=0x7fc00000 [ 440.438511][ T31] audit: type=1326 audit(1769659616.945:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f436773c2d9 code=0x7fc00000 [ 440.518991][ T31] audit: type=1326 audit(1769659616.945:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f436773c39d code=0x7fc00000 [ 440.608177][ T31] audit: type=1326 audit(1769659616.945:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7fc00000 [ 440.851870][ T9736] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 440.918283][ T31] audit: type=1326 audit(1769659616.945:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7fc00000 [ 440.966165][ T31] audit: type=1326 audit(1769659616.945:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7fc00000 [ 441.038526][ T31] audit: type=1326 audit(1769659616.945:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7fc00000 [ 441.471721][ T31] audit: type=1326 audit(1769659616.945:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7fc00000 [ 441.774908][ T31] audit: type=1326 audit(1769659616.945:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7fc00000 [ 442.330178][ T31] audit: type=1326 audit(1769659616.945:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436779aeb9 code=0x7fc00000 [ 442.389845][ T9736] usb 1-1: Using ep0 maxpacket: 8 [ 442.465566][ T9736] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.021827][ T9736] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.218453][ T9736] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.239265][ T9736] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.425434][ T9835] overlayfs: failed to resolve './file0': -2 [ 443.949675][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1297'. [ 444.180136][ T9736] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.225268][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 444.239356][ T9736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.286386][ T9736] usb 1-1: can't set config #16, error -71 [ 444.355093][ T9736] usb 1-1: USB disconnect, device number 10 [ 444.619616][ T5964] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 444.789005][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 444.840646][ T5964] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 444.869037][ T5964] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.914183][ T5964] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.925136][ T5964] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.945549][ T5964] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.000131][ T5964] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 445.049048][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.084875][ T9860] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 445.297545][ T5964] usb 3-1: usb_control_msg returned -32 [ 445.317728][ T5964] usbtmc 3-1:16.0: can't read capabilities [ 445.329264][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 445.348641][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1308'. [ 445.399260][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 445.460238][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1308'. [ 446.509215][ T5964] usb 3-1: USB disconnect, device number 17 [ 446.551374][ T5920] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 446.759279][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 446.791759][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.852474][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 446.919350][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.976648][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.227892][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 447.248957][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.155351][ T5920] usb 5-1: usb_control_msg returned -71 [ 448.179095][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 448.281585][ T5920] usb 5-1: USB disconnect, device number 17 [ 448.558465][ T9907] syzkaller0: entered promiscuous mode [ 448.626814][ T9907] syzkaller0: entered allmulticast mode [ 449.977377][ T9925] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.1316'. [ 449.987368][ T9925] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.1316'. [ 450.811508][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1317'. [ 451.469828][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 452.336143][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1322'. [ 452.380925][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1322'. [ 452.403429][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1322'. [ 452.440574][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1322'. [ 452.967366][ T9970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1326'. [ 453.066497][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'. [ 453.632921][ T9981] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 454.141394][ T9977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 455.930318][ T9736] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 456.118991][ T9736] usb 3-1: Using ep0 maxpacket: 32 [ 456.126407][ T9736] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 456.135170][ T9736] usb 3-1: config 0 has no interface number 0 [ 456.144378][ T9736] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 456.158570][ T9736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.179084][ T9736] usb 3-1: Product: syz [ 456.183290][ T9736] usb 3-1: Manufacturer: syz [ 456.198494][ T9736] usb 3-1: SerialNumber: syz [ 456.220907][ T9736] usb 3-1: config 0 descriptor?? [ 456.254454][ T9736] smsc95xx v2.0.0 [ 456.269274][ T9999] __nla_validate_parse: 1 callbacks suppressed [ 456.269296][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'. [ 456.852262][ T9736] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 456.881966][ T9736] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 456.918972][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1340'. [ 456.963385][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1340'. [ 457.098165][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1340'. [ 457.404481][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1340'. [ 457.617697][ T9736] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 457.630652][ T9736] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 457.838023][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1345'. [ 458.026930][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 459.145984][ T9] usb 3-1: USB disconnect, device number 18 [ 459.430152][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1358'. [ 459.439684][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 459.469761][T10053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1358'. [ 459.648970][ T975] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 459.815594][ T975] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 459.862278][ T975] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 459.889345][ T975] usb 1-1: config 8 has no interface number 0 [ 459.904636][ T975] usb 1-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 460.005106][ T975] usb 1-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.299577][ T975] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 460.529126][ T975] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 460.659048][ T975] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 460.708553][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.769791][ T975] usb 1-1: NFC: intf ffff88807c223000 id ffffffff8efb3940 [ 460.893709][ T975] nfcmrvl 1-1:8.80: NFC: registered with nci successfully [ 460.989746][ T975] usb 1-1: USB disconnect, device number 11 [ 461.028313][ T975] usb 1-1: NFC: intf ffff88807c223000 [ 461.659552][ T5964] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 461.828992][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 461.845399][ T5964] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 461.853705][ T5964] usb 3-1: config 0 has no interface number 0 [ 461.896565][ T5964] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 461.966894][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.975008][ T5964] usb 3-1: Product: syz [ 461.979607][ T5964] usb 3-1: Manufacturer: syz [ 461.990185][ T5964] usb 3-1: SerialNumber: syz [ 462.023164][ T5964] usb 3-1: config 0 descriptor?? [ 462.026580][T10091] __nla_validate_parse: 3 callbacks suppressed [ 462.026598][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 462.037440][ T5964] smsc95xx v2.0.0 [ 463.059215][ T5964] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 463.462159][ T5964] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 463.540010][ T5964] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 463.565626][ T5964] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 463.619722][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 463.668995][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1372'. [ 463.678232][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 463.726765][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1372'. [ 465.246125][ T975] usb 3-1: USB disconnect, device number 19 [ 465.369250][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1377'. [ 465.782345][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1378'. [ 467.209738][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1386'. [ 468.243824][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 468.273091][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'. [ 468.307276][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 468.326568][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'. [ 468.529386][ T5964] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 469.403161][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 469.420944][ T5964] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 469.435444][ T5964] usb 1-1: config 0 has no interface number 0 [ 469.465940][ T5964] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 469.484064][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.501769][ T5964] usb 1-1: Product: syz [ 469.511300][ T5964] usb 1-1: Manufacturer: syz [ 469.528273][ T5964] usb 1-1: SerialNumber: syz [ 469.538814][ T5964] usb 1-1: config 0 descriptor?? [ 469.553065][ T5964] smsc95xx v2.0.0 [ 470.501627][ T5964] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 470.535147][ T5964] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 470.572490][ T5964] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 470.674269][ T5964] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 470.968566][T10180] syz.1.1394 (10180) used greatest stack depth: 17656 bytes left [ 471.061683][ T5964] usb 1-1: USB disconnect, device number 12 [ 471.855369][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1399'. [ 472.324147][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 472.611519][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1404'. [ 472.642251][T10217] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1404'. [ 472.655033][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'. [ 472.666721][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1404'. [ 472.692260][T10217] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1404'. [ 477.136138][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 477.504424][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1420'. [ 477.630546][T10273] team0 (unregistering): Port device team_slave_0 removed [ 477.657721][T10273] team0 (unregistering): Port device team_slave_1 removed [ 477.692876][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 477.704866][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1422'. [ 477.739222][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 477.749145][ T5941] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 477.771177][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1422'. [ 477.837473][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 477.953674][ T5941] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 478.074557][ T5941] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 478.301232][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.411062][ T5941] usb 2-1: Product: syz [ 478.432294][ T5941] usb 2-1: Manufacturer: syz [ 478.439318][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.449289][ T5941] usb 2-1: SerialNumber: syz [ 478.490922][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 478.507322][ T5941] usb 2-1: config 0 descriptor?? [ 478.519908][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 478.528466][ T9] usb 3-1: Manufacturer: syz [ 478.534602][ T5941] ch341 2-1:0.0: ch341-uart converter detected [ 478.552035][ T9] usb 3-1: config 0 descriptor?? [ 479.285969][T10292] overlayfs: missing 'lowerdir' [ 479.729827][ T5941] ch341-uart ttyUSB0: failed to read break control: -71 [ 479.910457][ T5941] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 479.919388][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0007/input/input13 [ 480.888583][ T5941] usb 2-1: USB disconnect, device number 10 [ 480.898399][ T5941] ch341 2-1:0.0: device disconnected [ 481.051476][ T9] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 482.093009][ T9] usb 3-1: USB disconnect, device number 20 [ 482.294166][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1436'. [ 482.325317][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 482.346409][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1436'. [ 482.461232][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1436'. [ 482.544944][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1436'. [ 482.698040][T10323] fido_id[10323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 483.050225][ T5964] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 483.228998][ T5964] usb 7-1: device descriptor read/64, error -71 [ 483.574712][T10348] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.1446'. [ 483.584890][T10348] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.1446'. [ 484.192176][ T5964] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 484.371535][T10346] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 484.951593][ T5964] usb 7-1: device descriptor read/64, error -71 [ 485.201254][ T5964] usb usb7-port1: attempt power cycle [ 485.407049][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 485.871939][ T5964] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 485.991365][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.020004][ T5964] usb 7-1: device descriptor read/8, error -71 [ 486.063229][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.085951][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 486.087381][T10369] syz_tun: entered allmulticast mode [ 486.135830][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1455'. [ 486.139246][T10368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'. [ 486.155575][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 486.193482][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 486.199397][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 486.222087][ T9] usb 1-1: Manufacturer: syz [ 486.312689][T10368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'. [ 486.313688][ T9] usb 1-1: config 0 descriptor?? [ 486.841293][T10365] syz_tun: left allmulticast mode [ 487.126673][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 487.390898][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input14 [ 487.635933][T10393] netlink: 5052 bytes leftover after parsing attributes in process `syz.6.1461'. [ 487.645758][T10393] netlink: 5052 bytes leftover after parsing attributes in process `syz.6.1461'. [ 488.361345][ T9] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 488.453938][ T9] usb 1-1: USB disconnect, device number 13 [ 488.735065][T10398] fido_id[10398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 488.932241][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1464'. [ 489.869009][ T5947] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 489.919556][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'. [ 489.957697][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1470'. [ 489.987764][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'. [ 490.007660][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1470'. [ 490.019693][ T5947] usb 5-1: device descriptor read/64, error -71 [ 490.026115][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1472'. [ 491.413397][ T5947] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 491.460196][ T5842] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 491.619061][ T5947] usb 5-1: device descriptor read/64, error -71 [ 492.309344][T10435] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.1474'. [ 492.318578][T10435] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.1474'. [ 492.566965][ T5947] usb usb5-port1: attempt power cycle [ 493.257243][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 493.510981][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1481'. [ 493.662049][ T32] INFO: task syz-executor:5820 blocked for more than 143 seconds. [ 493.753700][ T32] Tainted: G L syzkaller #0 [ 493.984921][ T32] Blocked by coredump. [ 493.992271][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.013211][ T32] task:syz-executor state:D stack:21440 pid:5820 tgid:5820 ppid:1 task_flags:0x40014c flags:0x00080001 [ 495.148925][ T32] Call Trace: [ 495.152256][ T32] [ 495.155228][ T32] __schedule+0x14ea/0x5050 [ 495.170053][ T32] ? __pfx___schedule+0x10/0x10 [ 495.174928][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.180595][ T32] ? schedule+0x90/0x360 [ 495.184846][ T32] schedule+0x164/0x360 [ 496.102852][ T32] schedule_timeout+0xc3/0x2c0 [ 496.134902][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.156148][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 496.166423][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.179043][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 496.192333][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.198288][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.222265][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.230662][ T32] ? wait_for_completion+0x274/0x5e0 [ 496.237302][ T32] wait_for_completion+0x2cc/0x5e0 [ 496.244547][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 496.250494][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.256230][ T32] ? __flush_work+0x100/0xc50 [ 496.261090][ T32] __flush_work+0xa17/0xc50 [ 496.265607][ T32] ? __flush_work+0x100/0xc50 [ 496.271426][ T32] ? __pfx___flush_work+0x10/0x10 [ 496.276515][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 496.281980][ T32] ? work_grab_pending+0x115/0x990 [ 496.288980][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.294654][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.301852][ T32] ? __cancel_work_sync+0x5c/0x110 [ 496.306991][ T32] __cancel_work_sync+0xbe/0x110 [ 496.312032][ T32] hci_cmd_sync_clear+0x30/0x230 [ 496.316996][ T32] hci_unregister_dev+0x194/0x5a0 [ 496.322079][ T32] vhci_release+0x152/0x1a0 [ 496.326619][ T32] ? __pfx_vhci_release+0x10/0x10 [ 496.331739][ T32] __fput+0x44f/0xa70 [ 496.335749][ T32] task_work_run+0x1d9/0x270 [ 496.340418][ T32] ? __pfx_task_work_run+0x10/0x10 [ 496.345552][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.351304][ T32] ? kmem_cache_free+0x195/0x610 [ 496.356426][ T32] ? do_exit+0x696/0x2310 [ 496.360883][ T32] do_exit+0x69b/0x2310 [ 496.365072][ T32] ? __pfx_do_exit+0x10/0x10 [ 496.369729][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 496.374771][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.392745][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.398003][ T32] do_group_exit+0x21b/0x2d0 [ 496.404287][ T32] __x64_sys_exit_group+0x3f/0x40 [ 496.410827][ T32] x64_sys_call+0x2210/0x2210 [ 496.415513][ T32] do_syscall_64+0xe2/0xf80 [ 496.421070][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.427157][ T32] ? trace_irq_disable+0x37/0x100 [ 496.432490][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.439109][ T32] RIP: 0033:0x7feab2b9aeb9 [ 496.443523][ T32] RSP: 002b:00007ffd66d300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 496.452020][ T32] RAX: ffffffffffffffda RBX: 00007feab2c047c0 RCX: 00007feab2b9aeb9 [ 496.460053][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 496.468190][ T32] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007feab2c0471f [ 496.476964][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd66d313a0 [ 496.485102][ T32] R13: 00007feab2c0471f R14: 0000555557d234e8 R15: 00007ffd66d32470 [ 496.494545][ T32] [ 496.497795][ T32] [ 496.497795][ T32] Showing all locks held in the system: [ 496.507891][ T32] 1 lock held by khungtaskd/32: [ 496.512966][ T32] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 496.524583][ T32] 2 locks held by getty/5577: [ 496.550565][ T32] #0: ffff8880305820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.597985][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 496.614423][ T32] 3 locks held by kworker/u9:5/5840: [ 496.620563][ T32] #0: ffff88803006b148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 496.641615][ T32] #1: ffffc90003197bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 496.664067][ T32] #2: ffff888021f34ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 496.674143][ T32] 3 locks held by kworker/u8:8/6002: [ 496.679525][ T32] #0: ffff88801c72a948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 496.690789][ T32] #1: ffffc900052f7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 496.704417][ T32] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 496.715522][ T32] [ 496.717860][ T32] ============================================= [ 496.717860][ T32] [ 496.743632][ T32] NMI backtrace for cpu 1 [ 496.743654][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 496.743678][ T32] Tainted: [L]=SOFTLOCKUP [ 496.743685][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 496.743697][ T32] Call Trace: [ 496.743707][ T32] [ 496.743718][ T32] dump_stack_lvl+0xe8/0x150 [ 496.743756][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 496.743792][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.743817][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.743847][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 496.743876][ T32] sys_info+0x135/0x170 [ 496.743898][ T32] watchdog+0xf90/0xfe0 [ 496.743924][ T32] ? watchdog+0x209/0xfe0 [ 496.743949][ T32] kthread+0x726/0x8b0 [ 496.743974][ T32] ? __pfx_watchdog+0x10/0x10 [ 496.743993][ T32] ? __pfx_kthread+0x10/0x10 [ 496.744012][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.744038][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.744066][ T32] ? __pfx_kthread+0x10/0x10 [ 496.744087][ T32] ret_from_fork+0x51b/0xa40 [ 496.744119][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 496.744146][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.744166][ T32] ? __switch_to+0xc82/0x1410 [ 496.744194][ T32] ? __pfx_kthread+0x10/0x10 [ 496.744216][ T32] ret_from_fork_asm+0x1a/0x30 [ 496.744260][ T32] [ 496.744267][ T32] Sending NMI from CPU 1 to CPUs 0: [ 496.891194][ C0] NMI backtrace for cpu 0 [ 496.891216][ C0] CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Tainted: G L syzkaller #0 PREEMPT(full) [ 496.891246][ C0] Tainted: [L]=SOFTLOCKUP [ 496.891254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 496.891267][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0xb1/0x260 [ 496.891305][ C0] Code: 00 65 48 8b 1d 98 77 52 11 48 8b 83 20 0b 00 00 48 89 83 08 0b 00 00 48 c7 c7 55 27 ce 8d e8 c6 e1 f6 09 65 ff 05 1f bd 52 11 <83> bb 28 0b 00 00 00 0f 8e d1 00 00 00 49 89 de 49 81 c6 30 0b 00 [ 496.891323][ C0] RSP: 0018:ffffc90000157b18 EFLAGS: 00000002 [ 496.891342][ C0] RAX: 0000000000000000 RBX: ffff88801cec5b80 RCX: 0000000080000001 [ 496.891358][ C0] RDX: 0000000000000000 RSI: ffffffff8dce2755 RDI: ffffffff8c073980 [ 496.891373][ C0] RBP: ffffc90000157cb0 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e [ 496.891390][ C0] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: ffffffff8e560500 [ 496.891406][ C0] R13: ffffffff8e5605b0 R14: ffffffff8e560500 R15: ffffffff8e5605b4 [ 496.891425][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 496.891442][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.891457][ C0] CR2: 00007fbea2be0ad8 CR3: 00000000328d8000 CR4: 0000000000350ef0 [ 496.891475][ C0] Call Trace: [ 496.891483][ C0] [ 496.891493][ C0] trace_hardirqs_on+0x28/0x40 [ 496.891517][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.891553][ C0] rcu_gp_fqs_loop+0xd5c/0x1560 [ 496.891595][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 496.891629][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 496.891660][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 496.891697][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.891734][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 496.891768][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 496.891800][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 496.891821][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.891846][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 496.891870][ C0] kthread+0x726/0x8b0 [ 496.891897][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 496.891928][ C0] ? __pfx_kthread+0x10/0x10 [ 496.891951][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.891979][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.892018][ C0] ? __pfx_kthread+0x10/0x10 [ 496.892043][ C0] ret_from_fork+0x51b/0xa40 [ 496.892079][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 496.892111][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.892136][ C0] ? __switch_to+0xc82/0x1410 [ 496.892169][ C0] ? __pfx_kthread+0x10/0x10 [ 496.892194][ C0] ret_from_fork_asm+0x1a/0x30 [ 496.892237][ C0] [ 497.153908][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 497.160769][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 497.171444][ T32] Tainted: [L]=SOFTLOCKUP [ 497.175748][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 497.185785][ T32] Call Trace: [ 497.189050][ T32] [ 497.191966][ T32] vpanic+0x1e0/0x670 [ 497.195944][ T32] panic+0xc5/0xd0 [ 497.199657][ T32] ? __pfx_panic+0x10/0x10 [ 497.204068][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.209695][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.215337][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 497.220725][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.226363][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 497.232522][ T32] watchdog+0xfda/0xfe0 [ 497.236680][ T32] ? watchdog+0x209/0xfe0 [ 497.241026][ T32] kthread+0x726/0x8b0 [ 497.245116][ T32] ? __pfx_watchdog+0x10/0x10 [ 497.249789][ T32] ? __pfx_kthread+0x10/0x10 [ 497.254376][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.260013][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.265219][ T32] ? __pfx_kthread+0x10/0x10 [ 497.269805][ T32] ret_from_fork+0x51b/0xa40 [ 497.274403][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 497.279521][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.285153][ T32] ? __switch_to+0xc82/0x1410 [ 497.289834][ T32] ? __pfx_kthread+0x10/0x10 [ 497.294423][ T32] ret_from_fork_asm+0x1a/0x30 [ 497.299206][ T32] [ 497.302509][ T32] Kernel Offset: disabled [ 497.306824][ T32] Rebooting in 86400 seconds..