last executing test programs: 4m43.497728721s ago: executing program 3 (id=2387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0xab, {{0xa, 0x0, 0x75, @mcast1}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="280000000000000029000000370000002c010000000000000309ff2294ad40680ba15004010400001400000000000000290000000b000000fffffc01000000002400000000000000290000003200"/95, @ANYRES32, @ANYBLOB="00000000300000000000000029000000360000002902000000000000c910ff010000000000000000000000000001000000000000e00000000000000029000000360000002c1800000000000001040000000000010000010005020400c910fc01000000000000000000000000000105028e05008dbf4ba1ccb381d9790337d5d8830f7343a4a591d214a778abd87fa6742fa35492f70ee4f1c3e10ccb36553ef04aaaada3aa63e57c6c4c7f9d168c9eae999a96"], 0x360}}], 0x1, 0x10) 4m42.387761169s ago: executing program 3 (id=2389): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000e7"], 0x34}}, 0x0) 4m41.968691619s ago: executing program 3 (id=2391): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4m34.146338365s ago: executing program 3 (id=2408): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/wakeup_count', 0x400, 0x9f) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) 4m33.389929351s ago: executing program 3 (id=2411): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000240), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m32.248264613s ago: executing program 3 (id=2415): arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) r0 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x20000) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x10) 4m20.755144412s ago: executing program 4 (id=2471): syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xe6f, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x925d}, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m17.316035957s ago: executing program 4 (id=2485): userfaultfd(0x80801) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m17.07400685s ago: executing program 32 (id=2415): arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) r0 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x20000) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x10) 4m15.981181079s ago: executing program 4 (id=2490): socket$inet(0x2, 0xa, 0xffffffff) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x22, 0x5, 0x1, &(0x7f0000000280)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 4m13.966401018s ago: executing program 4 (id=2498): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x4}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x94}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x800) 4m12.347393621s ago: executing program 4 (id=2502): socket$inet6(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001bc0), 0x200800, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4m11.697356035s ago: executing program 4 (id=2506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x111, 0x58bd2c, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0x8}, {0x5, 0xffff}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfd64, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m3.22443119s ago: executing program 0 (id=2544): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00'}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r4 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0xff00) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 4m2.526147175s ago: executing program 0 (id=2545): io_setup(0x20fe, &(0x7f0000000540)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4018000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) io_pgetevents(r0, 0x9, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000500), 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'syz0}\x9db/\xd1\x92Z\xa9\x92D)\xef\xf09\x05s+\xbfo6\xabG\x81\x92\x88\r`F\x91\x8f\xfe\xb5+\xf3\x95\x05\xab\x81\x83m*>\xc6y\xdb\x92/\xdd\x16\xd7|\x82\xbe\xf1\xb8\xe8\xce\x0f\x86\xb9\xb19>\xd7\xe8\xdd\xb9T\xd5\x82\xf3\xf2\x15\xc4&\xad\xc3\xe6\xbf\xc9\xb7hLL6_\xb0\xc3]\x91\xec\xceR\x9a:\xc9\x8ds\xebi\x82\xfe|\xfd\xd8\xb4\x8b\xae#A\xdc\x9a\x92\x00:\xd5=.\x886\xbeT\xc5\xd8hs\xda\x92\xdc\xb3D\t\\N\x9a\xa3\xab\x9d\x8e\x81\x12i\x17\x93%\x0e}h\xdd\xe1\x1cf\xe6', 0x3a, '\x06\x00\x02\x00\xa6\xa3\xac\x86\x13\"\xb8P\xe3\xb8\xd2gZ\xde&B\xdf\xa1\xf0\x02\x8e}\xa4\x8e\x86\xc3\x91 \x1c\x9f\x13\xb0\xea7\x17\xc1\x98\xc8\xa6\x18\xf0\x99\xeeE5\xcc\xe2\\\x10\xebz\xc9\x1b\xbd\xf4\xf4:\xe7\xf2\xc0\x06\x8f\xc9VN\xb5\xa5i,-\xcc_\\\x89\x13^\xcb\x8ez\x95\x8a\\7`\x1fo\xc96\x12\x9c\xbd\x81\xcc\x17\x86\xcd\"k\xe4\n\xa5\r\x81\xcd\x02\x1e\x8b\x80\x87\xb9rx\xc9\xf6\xc3\x9c\v/\t\xe5\x14d\xb9\xf2\xcd\xae\x8a\xcd\xab\xce\xb9\x83\xdc\xb4\xfe\x92\t\x8cS\xff\x9f<%\x18\xf2\xd5\xc2\x8f\x19>\xba\xa1\xbft\x9c\x1a\rXZ\xc4~A^\xc1\xe9\xf6@\xed\xcbw\xb6\f\xbd(\xd5(\xa3\x9a|E\xeeHq\xc5EvRe\xaeh\xa2\xffc\xaa-\xb6\xf3\xbb:g0\x11\xf9\r\x13\xc1(8\xf22\f\x02\t\xa7\xbe\xe1*\x84\xee\xc2Z\x1c\x11\xc3bA\x94s[hsDP\x8fT\x0e\xba\xa8\xcfT$', 0x3a, './file0'}, 0x1b9) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) 4m2.361902274s ago: executing program 0 (id=2546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x4) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 4m1.43599403s ago: executing program 0 (id=2547): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0x80) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)="3dc777", 0x3}, {&(0x7f0000000340)="2b70767e6d1998c4c971362c18b62e116cb01f45afb65b", 0x17}, {0x0}], 0x3}}], 0x1, 0x10014) 4m1.416703261s ago: executing program 0 (id=2548): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, 0x0, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(0x0, 0x108) creat(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 4m1.143156756s ago: executing program 0 (id=2549): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) rename(0x0, &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x800040068], 0x2000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m55.899312391s ago: executing program 33 (id=2506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x111, 0x58bd2c, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0x8}, {0x5, 0xffff}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "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"}) fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfd64, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m46.008085739s ago: executing program 34 (id=2549): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) rename(0x0, &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x800040068], 0x2000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m35.203700801s ago: executing program 1 (id=2592): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 3m34.097407058s ago: executing program 1 (id=2594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r3, &(0x7f00000002c0)=""/4096, 0x1000) 3m33.023335809s ago: executing program 1 (id=2597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) 3m31.656818418s ago: executing program 1 (id=2599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) write$bt_hci(r4, &(0x7f0000000300)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@none, 0x2}}}, 0xb) 3m29.853240305s ago: executing program 1 (id=2604): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) creat(0x0, 0xa1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x19040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) semtimedop(0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x109000) 3m29.696354063s ago: executing program 1 (id=2605): socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x4048010) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 3m14.313001388s ago: executing program 35 (id=2605): socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x4048010) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 8.326994352s ago: executing program 2 (id=2789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_open_dev$audion(0x0, 0x8, 0x80000) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) 7.006093265s ago: executing program 2 (id=2790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) getpid() ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000140)={0xc, 0x6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) 5.632753672s ago: executing program 2 (id=2791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x46, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x4, 0x3, 0x2, 0x0, 0x800, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e6, 0x101, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0xffffffff, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x3, 0x6, 0x9, 0x2, 0x4, 0x7, 0x2c85, 0xf77, 0x60, 0xb, 0x1, 0x8, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0xff6, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc7, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x3, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x2, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x5, 0x1, 0x7, 0xffff8000, 0x8, 0x3, 0x6, 0x10001, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x200, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x2, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x4, 0x6, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x9, 0x5, 0x5, 0x2, 0xffffff7f, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0x1, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xb9, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.768216251s ago: executing program 2 (id=2792): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r5, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.088084871s ago: executing program 2 (id=2793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x8, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000120009000d00ffa6", 0x24) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8301, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2edb, &(0x7f0000000240)={0x0, 0xfd0c, 0x10000, 0xffffffff, 0x2be, 0x0, r3}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) 0s ago: executing program 2 (id=2794): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) kernel console output (not intermixed with test programs): e descriptor's value: 1 [ 174.887330][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 174.887383][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.887405][ T9] usb 3-1: Product: syz [ 174.887420][ T9] usb 3-1: Manufacturer: syz [ 174.887435][ T9] usb 3-1: SerialNumber: syz [ 174.908525][ T9] usb 3-1: config 0 descriptor?? [ 175.128851][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 175.133242][ T9] usb 3-1: USB disconnect, device number 5 [ 175.931745][ T5805] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 176.052785][ T5805] usb 4-1: USB disconnect, device number 7 [ 176.147971][ T7234] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 176.151970][ T7234] macsec1: entered promiscuous mode [ 176.152435][ T7234] macsec1: entered allmulticast mode [ 176.152474][ T7234] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 176.952806][ T7264] mmap: syz.2.601 (7264) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 177.908914][ T5890] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 178.068819][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 178.075186][ T5890] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.075219][ T5890] usb 5-1: config 0 has no interface number 0 [ 178.075284][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.075315][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.075363][ T5890] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 178.075400][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.091424][ T5890] usb 5-1: config 0 descriptor?? [ 178.730090][ T5890] uclogic 0003:28BD:0094.0005: pen parameters not found [ 178.730132][ T5890] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 178.744241][ T5890] usb 5-1: USB disconnect, device number 7 [ 178.841142][ T38] audit: type=1326 audit(1761318461.538:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7320 comm="syz.3.627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x0 [ 178.931166][ T7325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'. [ 179.549835][ T5810] block nbd0: Receive control failed (result -22) [ 179.592339][ T7353] nbd0: detected capacity change from 0 to 32 [ 180.295082][ T5811] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.453452][ T5811] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 180.453482][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.453502][ T5811] usb 5-1: config 0 has no interface number 0 [ 180.453559][ T5811] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 180.453584][ T5811] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.459289][ T5811] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 180.459321][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.459343][ T5811] usb 5-1: Product: syz [ 180.459358][ T5811] usb 5-1: Manufacturer: syz [ 180.459374][ T5811] usb 5-1: SerialNumber: syz [ 180.544507][ T5811] usb 5-1: config 0 descriptor?? [ 181.189843][ T5811] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input11 [ 181.393576][ T10] usb 5-1: USB disconnect, device number 8 [ 181.423021][ T7414] netlink: 52 bytes leftover after parsing attributes in process `syz.1.670'. [ 181.462500][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.492254][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.669116][ T7424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 182.450480][ T7456] netem: incorrect ge model size [ 182.450518][ T7456] netem: change failed [ 184.492158][ T977] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.638800][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 184.646395][ T977] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 184.646426][ T977] usb 3-1: config 0 has no interface number 0 [ 184.646463][ T977] usb 3-1: config 0 interface 48 has no altsetting 0 [ 184.659100][ T977] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 184.659138][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.659163][ T977] usb 3-1: Product: syz [ 184.659284][ T977] usb 3-1: Manufacturer: syz [ 184.659302][ T977] usb 3-1: SerialNumber: syz [ 184.696457][ T977] usb 3-1: config 0 descriptor?? [ 184.929651][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.930136][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.935902][ T5810] Bluetooth: hci2: Unknown advertising packet type: 0x35 [ 184.935932][ T5810] Bluetooth: hci2: Malformed LE Event: 0x0d [ 184.941482][ T977] usb 3-1: USB disconnect, device number 6 [ 186.478071][ T38] audit: type=1326 audit(1761318469.178:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7587 comm="syz.2.748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc677a7efc9 code=0x0 [ 186.545636][ T7585] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.545666][ T7585] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.545937][ T7585] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 187.618866][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.780319][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 187.784561][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.784606][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 187.784631][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.791969][ T10] usb 2-1: config 0 descriptor?? [ 188.826030][ T38] audit: type=1326 audit(1761318471.528:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 188.827307][ T38] audit: type=1326 audit(1761318471.528:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 188.827932][ T38] audit: type=1326 audit(1761318471.528:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 188.881118][ T38] audit: type=1326 audit(1761318471.528:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 188.881502][ T38] audit: type=1326 audit(1761318471.588:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7644 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 188.959446][ T10] hid (null): unknown global tag 0xd [ 189.181023][ T10] usb 2-1: USB disconnect, device number 11 [ 189.546710][ T38] audit: type=1326 audit(1761318472.248:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7663 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56746efc9 code=0x7ffc0000 [ 189.570471][ T38] audit: type=1326 audit(1761318472.248:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7663 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56746efc9 code=0x7ffc0000 [ 189.572592][ T38] audit: type=1326 audit(1761318472.278:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7663 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd56746efc9 code=0x7ffc0000 [ 189.572939][ T38] audit: type=1326 audit(1761318472.278:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7663 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56746efc9 code=0x7ffc0000 [ 190.430842][ T5811] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 190.578856][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 190.581290][ T5811] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 190.581321][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.616495][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 190.616518][ T5811] pvrusb2: ********** [ 190.616526][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 190.616538][ T5811] pvrusb2: Important functionality might not be entirely working. [ 190.616548][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 190.616559][ T5811] pvrusb2: ********** [ 190.775748][ T7714] Bluetooth: MGMT ver 1.23 [ 190.919747][ T2369] pvrusb2: Invalid write control endpoint [ 191.045011][ T7690] pvrusb2: Invalid write control endpoint [ 191.047711][ T2369] pvrusb2: Invalid write control endpoint [ 191.047728][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 191.047737][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 191.047745][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 191.047755][ T2369] pvrusb2: Device being rendered inoperable [ 191.052895][ T5811] usb 4-1: USB disconnect, device number 8 [ 191.115817][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 191.116671][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 191.144497][ T2369] pvrusb2: Attached sub-driver cx25840 [ 191.144525][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 191.144533][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 192.188826][ T977] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 192.351186][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 192.354606][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 192.354665][ T977] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 192.354691][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.425282][ T977] usb 3-1: config 0 descriptor?? [ 193.676231][ T977] usb 3-1: USB disconnect, device number 7 [ 194.223187][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 194.223206][ T38] audit: type=1326 audit(1761318476.918:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 194.223260][ T38] audit: type=1326 audit(1761318476.918:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 194.223307][ T38] audit: type=1326 audit(1761318476.918:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 194.223355][ T38] audit: type=1326 audit(1761318476.918:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 194.223402][ T38] audit: type=1326 audit(1761318476.918:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 194.223445][ T38] audit: type=1326 audit(1761318476.918:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 194.223489][ T38] audit: type=1326 audit(1761318476.918:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 194.223534][ T38] audit: type=1326 audit(1761318476.918:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.3.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 194.480749][ T1229] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 194.665967][ T1229] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 194.665999][ T1229] usb 3-1: config 0 has no interface number 0 [ 194.666052][ T1229] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 194.666077][ T1229] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 194.666106][ T1229] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 194.666132][ T1229] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 194.666159][ T1229] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 194.666186][ T1229] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.666233][ T1229] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 194.666257][ T1229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.682511][ T1229] usb 3-1: config 0 descriptor?? [ 194.689483][ T7822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.694067][ T7822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.707885][ T1229] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 194.738892][ T5811] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.749210][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 194.809233][ T977] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 194.889091][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 194.891886][ T5811] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 194.891919][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.914587][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 194.914618][ T5811] pvrusb2: ********** [ 194.914626][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 194.914639][ T5811] pvrusb2: Important functionality might not be entirely working. [ 194.914650][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 194.914663][ T5811] pvrusb2: ********** [ 194.974114][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 194.980038][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.980092][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 194.985156][ T1229] usb 3-1: USB disconnect, device number 8 [ 195.000159][ T977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.000190][ T977] usb 2-1: config 0 has no interface number 0 [ 195.009936][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.009969][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.009991][ T9] usb 4-1: Product: syz [ 195.010006][ T9] usb 4-1: Manufacturer: syz [ 195.010022][ T9] usb 4-1: SerialNumber: syz [ 195.060618][ T977] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.060652][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.060674][ T977] usb 2-1: Product: syz [ 195.060690][ T977] usb 2-1: Manufacturer: syz [ 195.060705][ T977] usb 2-1: SerialNumber: syz [ 195.128420][ T2369] pvrusb2: Invalid write control endpoint [ 195.214483][ T1229] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 195.216865][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 195.279138][ T977] usb 2-1: config 0 descriptor?? [ 195.305623][ T977] quatech2 2-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 195.333962][ T2369] pvrusb2: Invalid write control endpoint [ 195.333978][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 195.333988][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 195.333997][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 195.334007][ T2369] pvrusb2: Device being rendered inoperable [ 195.334089][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 195.334142][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 195.335159][ T2369] pvrusb2: Attached sub-driver cx25840 [ 195.335174][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 195.335185][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 195.432527][ T5890] usb 5-1: USB disconnect, device number 9 [ 195.489749][ T7832] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 195.557367][ T977] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.709235][ T977] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 195.914306][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 195.915885][ T5890] usb 2-1: USB disconnect, device number 12 [ 195.971711][ T5890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 196.003102][ T5890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 196.005655][ T5890] quatech2 2-1:0.1: device disconnected [ 196.099823][ T7832] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 196.100438][ T9] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 196.116919][ T9] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 196.157429][ T9] wwan wwan0: port wwan0mbim0 attached [ 196.206182][ T9] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 6e:3f:32:1d:a7:37 [ 196.237216][ T7876] input: syz0 as /devices/virtual/input/input12 [ 196.305591][ T1229] usb 4-1: USB disconnect, device number 9 [ 196.308116][ T1229] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 196.602617][ T1229] wwan wwan0: port wwan0mbim0 disconnected [ 197.618098][ T7914] netlink: 80 bytes leftover after parsing attributes in process `syz.3.896'. [ 198.353292][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.372230][ T7940] netlink: 108 bytes leftover after parsing attributes in process `syz.2.908'. [ 198.388781][ T977] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 198.501137][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 198.503786][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.503839][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 198.503863][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.549842][ T9] usb 5-1: config 0 descriptor?? [ 198.569190][ T977] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.569224][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.640316][ T977] usb 4-1: config 0 descriptor?? [ 198.657743][ T977] cp210x 4-1:0.0: cp210x converter detected [ 198.711076][ T7955] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 198.711100][ T7955] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.915'. [ 199.015307][ T9] mcp2200 0003:04D8:00DF.0008: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 199.078064][ T977] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 199.166952][ T977] usb 4-1: cp210x converter now attached to ttyUSB0 [ 199.318310][ T9] usb 4-1: USB disconnect, device number 10 [ 199.343621][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.400444][ T10] usb 5-1: USB disconnect, device number 10 [ 199.513776][ T9] cp210x 4-1:0.0: device disconnected [ 199.761310][ T7982] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 199.761362][ T7982] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.780402][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.780479][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.379321][ T8002] netlink: 220 bytes leftover after parsing attributes in process `syz.2.936'. [ 200.379361][ T8002] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 200.599679][ T5811] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.748830][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 200.751326][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.751361][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.751402][ T5811] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 200.751427][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.763605][ T5811] usb 5-1: config 0 descriptor?? [ 200.819399][ T7991] syz.3.933 (7991) used greatest stack depth: 17104 bytes left [ 201.237824][ T5811] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 201.428085][ T5811] corsair 0003:1B1C:1B02.0009: Failed to get K90 initial state (error -71). [ 201.453852][ T5811] usb 5-1: USB disconnect, device number 11 [ 202.608133][ T8084] netlink: 'syz.2.974': attribute type 1 has an invalid length. [ 202.608162][ T8084] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.974'. [ 203.098848][ T977] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.259156][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 203.262435][ T977] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 203.262508][ T977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.262534][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.262563][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.262589][ T977] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.262638][ T977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.262664][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.469991][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.989'. [ 203.470030][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.989'. [ 203.589744][ T977] usb 3-1: GET_CAPABILITIES returned 0 [ 203.589807][ T977] usbtmc 3-1:16.0: can't read capabilities [ 203.831470][ T977] usb 3-1: USB disconnect, device number 9 [ 204.867856][ T38] audit: type=1326 audit(1761318487.568:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8155 comm="syz.2.1009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc677a7efc9 code=0x0 [ 205.571190][ T977] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 205.775825][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 205.788831][ T977] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 205.788902][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.788928][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.788957][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.788985][ T977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.789032][ T977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.789059][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.139089][ T977] usb 5-1: GET_CAPABILITIES returned 0 [ 206.139141][ T977] usbtmc 5-1:16.0: can't read capabilities [ 206.439688][ T977] usb 5-1: USB disconnect, device number 12 [ 207.221480][ T8189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 207.817310][ T8199] loop2: detected capacity change from 0 to 7 [ 207.835720][ T8199] Dev loop2: unable to read RDB block 7 [ 207.835760][ T8199] loop2: AHDI p1 p2 p3 p4 [ 207.835796][ T8199] loop2: partition table partially beyond EOD, truncated [ 207.835916][ T8199] loop2: p1 start 1601398130 is beyond EOD, truncated [ 207.835937][ T8199] loop2: p2 start 1702059890 is beyond EOD, truncated [ 207.835955][ T8199] loop2: p3 size 150995200 extends beyond EOD, truncated [ 209.449414][ T5890] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 209.602495][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.602535][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.602560][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.602609][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.602635][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.621692][ T5890] usb 2-1: config 0 descriptor?? [ 210.745777][ T5890] hid_parser_main: 75 callbacks suppressed [ 210.745809][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.745846][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.745877][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.745918][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.745949][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.745979][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.746008][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.746040][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.746071][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.746101][ T5890] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 210.918779][ T5890] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 211.167938][ T9] usb 2-1: USB disconnect, device number 13 [ 211.968830][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 212.125679][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 212.125745][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.127530][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 212.127563][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 212.127585][ T10] usb 4-1: Manufacturer: syz [ 212.190913][ T10] usb 4-1: config 0 descriptor?? [ 212.320586][ T10] rc_core: IR keymap rc-hauppauge not found [ 212.320608][ T10] Registered IR keymap rc-empty [ 212.328438][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 212.357506][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 212.509334][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 212.545488][ T1229] usb 4-1: USB disconnect, device number 11 [ 213.076157][ T8285] loop6: detected capacity change from 0 to 7 [ 213.100764][ T8285] Dev loop6: unable to read RDB block 7 [ 213.100819][ T8285] loop6: unable to read partition table [ 213.101080][ T8285] loop6: partition table beyond EOD, truncated [ 213.101100][ T8285] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.480938][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 213.658335][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 213.671786][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 213.671858][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.671882][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.671908][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.671934][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.671979][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.672003][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.011181][ T10] usb 2-1: usb_control_msg returned -32 [ 214.011238][ T10] usbtmc 2-1:16.0: can't read capabilities [ 216.356498][ T9] usb 2-1: USB disconnect, device number 14 [ 216.778875][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 216.859576][ T8325] netlink: 'syz.4.1085': attribute type 16 has an invalid length. [ 216.859610][ T8325] netlink: 'syz.4.1085': attribute type 17 has an invalid length. [ 216.898513][ T8325] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.958901][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 216.961556][ T9] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 216.961588][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.965123][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.965159][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.965182][ T9] usb 2-1: Product: syz [ 216.965198][ T9] usb 2-1: Manufacturer: syz [ 216.965215][ T9] usb 2-1: SerialNumber: syz [ 217.216157][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 217.216207][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 217.216236][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 217.216381][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 217.263212][ T9] usb 2-1: 0:2 : does not exist [ 217.291425][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 217.320397][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 217.534046][ T9] usb 2-1: USB disconnect, device number 15 [ 219.577544][ T8399] netlink: 'syz.3.1115': attribute type 11 has an invalid length. [ 220.050328][ T1229] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.979914][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.979950][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.979974][ T1229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.980020][ T1229] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.980045][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.083421][ T1229] usb 2-1: config 0 descriptor?? [ 221.619554][ T1229] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 221.884697][ T1229] usb 2-1: USB disconnect, device number 16 [ 222.231728][ T8435] netlink: 'syz.2.1132': attribute type 39 has an invalid length. [ 223.800542][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 223.948870][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 223.951767][ T46] usb 5-1: config index 0 descriptor too short (expected 29970, got 18) [ 223.951796][ T46] usb 5-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 223.951819][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 223.968801][ T5892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 224.011285][ T46] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 224.011318][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.011339][ T46] usb 5-1: Product: syz [ 224.011354][ T46] usb 5-1: Manufacturer: syz [ 224.011370][ T46] usb 5-1: SerialNumber: syz [ 224.065626][ T46] usb 5-1: config 0 descriptor?? [ 224.086507][ T46] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 224.103680][ T46] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 224.140266][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.140304][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.140328][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.140377][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.140401][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.204783][ T5892] usb 3-1: config 0 descriptor?? [ 224.318571][ T5890] usb 5-1: USB disconnect, device number 13 [ 224.643441][ T5892] hid_parser_main: 5 callbacks suppressed [ 224.643470][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643510][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643542][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643572][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643601][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643631][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643660][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643688][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643718][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.643748][ T5892] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 224.804514][ T5892] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 224.965941][ T5892] usb 3-1: USB disconnect, device number 10 [ 225.128273][ T8491] fuse: Bad value for 'fd' [ 226.715263][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1166'. [ 227.209232][ T1229] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 227.591748][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 227.750107][ T1229] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 227.750179][ T1229] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 227.828883][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 227.906846][ T5892] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 227.906880][ T5892] usb 5-1: config 0 has no interface number 0 [ 227.999354][ T1229] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 227.999457][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.999481][ T1229] usb 3-1: Product: syz [ 227.999498][ T1229] usb 3-1: Manufacturer: syz [ 227.999549][ T1229] usb 3-1: SerialNumber: syz [ 228.736593][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 228.736636][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.736658][ T5892] usb 5-1: Product: syz [ 228.736674][ T5892] usb 5-1: Manufacturer: syz [ 228.736689][ T5892] usb 5-1: SerialNumber: syz [ 228.921459][ T5892] usb 5-1: config 0 descriptor?? [ 228.927535][ T1229] usb 3-1: config 0 descriptor?? [ 228.935211][ T8522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 228.935967][ T8522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.276744][ T8522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.278239][ T8522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.979806][ T1229] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 230.037383][ T5892] msi2500 5-1:0.246: Registered as swradio24 [ 230.037407][ T5892] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 230.071105][ T5892] usb 5-1: USB disconnect, device number 14 [ 230.405942][ T1229] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 230.439741][ T1229] usb 3-1: USB disconnect, device number 11 [ 231.438322][ T5811] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 231.516010][ T8607] loop8: detected capacity change from 0 to 7 [ 231.541891][ T8607] Dev loop8: unable to read RDB block 7 [ 231.541948][ T8607] loop8: unable to read partition table [ 231.542205][ T8607] loop8: partition table beyond EOD, truncated [ 231.542227][ T8607] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 231.909446][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 231.933330][ T5811] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 231.933363][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.933383][ T5811] usb 2-1: Product: syz [ 231.933398][ T5811] usb 2-1: Manufacturer: syz [ 231.933413][ T5811] usb 2-1: SerialNumber: syz [ 231.985629][ T5811] usb 2-1: config 0 descriptor?? [ 232.418106][ T5811] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 232.429788][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.432951][ T5811] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 232.433030][ T5811] usb 2-1: media controller created [ 232.524522][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.712357][ T5811] zl10353_read_register: readreg error (reg=127, ret==0) [ 233.712445][ T5811] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 233.712468][ T5811] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 233.713510][ T8594] dtv5100: wlen = 65, aborting. [ 233.832976][ T5811] usb 2-1: USB disconnect, device number 17 [ 234.172758][ T5811] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 234.217768][ T8646] loop6: detected capacity change from 0 to 7 [ 234.263743][ T8647] syz.3.1224 (8647) used greatest stack depth: 17008 bytes left [ 234.308919][ T8646] Dev loop6: unable to read RDB block 7 [ 234.308966][ T8646] loop6: AHDI p3 p4 [ 234.308998][ T8646] loop6: partition table partially beyond EOD, truncated [ 234.309208][ T8646] loop6: p3 start 1886353253 is beyond EOD, truncated [ 234.675018][ T8665] netlink: 'syz.3.1232': attribute type 12 has an invalid length. [ 234.675048][ T8665] netlink: 'syz.3.1232': attribute type 29 has an invalid length. [ 234.675064][ T8665] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1232'. [ 235.209274][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 235.339150][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 235.358789][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 235.361852][ T5892] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.361889][ T5892] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.361914][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.361952][ T5892] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 235.361977][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.432357][ T5892] usb 3-1: config 0 descriptor?? [ 235.498869][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 235.501498][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.501558][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.501605][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.501630][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.510010][ T10] usb 4-1: config 0 descriptor?? [ 235.524604][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 235.524655][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 235.548741][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 236.862814][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.935415][ T5892] cougar 0003:060B:500A.000D: unexpected long global item [ 236.936267][ T5892] cougar 0003:060B:500A.000D: parse failed [ 236.936388][ T5892] cougar 0003:060B:500A.000D: probe with driver cougar failed with error -22 [ 236.945560][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.971213][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.506160][ T977] usb 3-1: USB disconnect, device number 12 [ 237.597056][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.910651][ T10] usb 4-1: USB disconnect, device number 12 [ 238.283527][ T8727] fuse: Bad value for 'fd' [ 238.601645][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.941515][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.209224][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.657606][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.589069][ T8767] TCP: TCP_TX_DELAY enabled [ 243.146245][ T8784] hsr0: entered allmulticast mode [ 243.146294][ T8784] hsr_slave_0: entered allmulticast mode [ 243.146319][ T8784] hsr_slave_1: entered allmulticast mode [ 243.241461][ T8784] hsr_slave_0: left promiscuous mode [ 244.228206][ T8784] hsr_slave_1: left promiscuous mode [ 244.460087][ T8784] hsr0 (unregistering): left allmulticast mode [ 246.768821][ T5890] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 246.919871][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 246.924942][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.948168][ T5890] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 246.948202][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.948223][ T5890] usb 2-1: Product: syz [ 246.948238][ T5890] usb 2-1: Manufacturer: syz [ 246.948254][ T5890] usb 2-1: SerialNumber: syz [ 247.000997][ T5890] usb 2-1: config 0 descriptor?? [ 247.490335][ T5890] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 248.428834][ T5892] usb 2-1: USB disconnect, device number 18 [ 251.668843][ T977] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 251.845772][ T977] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 251.845815][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.891911][ T977] usb 2-1: config 0 descriptor?? [ 252.843362][ T8988] binder: 8987:8988 ioctl 4018620d 0 returned -22 [ 252.923957][ T977] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 252.924251][ T977] asix 2-1:0.0: probe with driver asix failed with error -71 [ 252.956758][ T977] usb 2-1: USB disconnect, device number 19 [ 253.608827][ T5975] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 253.761846][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.761885][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.761913][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 253.761940][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.761987][ T5975] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.762013][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.772948][ T5975] usb 4-1: config 0 descriptor?? [ 254.352081][ T5975] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 254.485205][ T5975] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 256.679235][ T977] usb 4-1: USB disconnect, device number 13 [ 257.806716][ T9082] Bluetooth: hci0: unsupported parameter 433 [ 257.806751][ T9082] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 257.928924][ T5892] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 258.082167][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.082204][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.082228][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.082278][ T5892] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.082304][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.107931][ T5892] usb 5-1: config 0 descriptor?? [ 258.168887][ T5953] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 258.331211][ T5953] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 258.331246][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.337301][ T5953] usb 4-1: config 0 descriptor?? [ 258.586166][ T5953] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 258.729517][ T5892] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 258.823792][ T5953] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 258.823844][ T5953] [drm] Initialized udl on minor 2 [ 258.989838][ T5953] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 258.990187][ T5953] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 259.052075][ T5975] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 259.213767][ T977] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 259.232381][ T5975] usb 2-1: config 1 interface 0 has no altsetting 0 [ 259.243590][ T977] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 259.243785][ T977] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 259.244713][ T977] usb 4-1: USB disconnect, device number 14 [ 259.248442][ T5975] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.248510][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.248525][ T5975] usb 2-1: Product: syz [ 259.248536][ T5975] usb 2-1: Manufacturer: syz [ 259.248546][ T5975] usb 2-1: SerialNumber: syz [ 259.674607][ T5975] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 20 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 259.802045][ T5975] usb 2-1: USB disconnect, device number 20 [ 259.897587][ T5975] usblp1: removed [ 260.843023][ T977] usb 5-1: USB disconnect, device number 15 [ 261.229046][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.229202][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.909373][ T9188] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 262.004717][ T9188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.090907][ T9190] bond1: (slave geneve2): making interface the new active one [ 262.114812][ T9190] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 262.176296][ T9190] syz.2.1453 (9190) used greatest stack depth: 16920 bytes left [ 263.558830][ T977] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 263.716251][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 263.716299][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.716349][ T977] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 263.716376][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.794378][ T977] usb 2-1: config 0 descriptor?? [ 264.230641][ T977] hid-multitouch 0003:0457:07DA.0010: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 264.583664][ T5811] usb 2-1: USB disconnect, device number 21 [ 265.276417][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.624343][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.372833][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.831167][ T9276] syzkaller0: entered promiscuous mode [ 266.977561][ T9274] syzkaller0 (unregistering): left promiscuous mode [ 267.862523][ T9307] kvm: apic: phys broadcast and lowest prio [ 268.079256][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.642674][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.779525][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.187076][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.485949][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.740167][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.337888][ T5811] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 272.488808][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 272.496057][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.496091][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.496117][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.496143][ T5811] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.496188][ T5811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.496212][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.815672][ T5811] usb 4-1: GET_CAPABILITIES returned 0 [ 272.815722][ T5811] usbtmc 4-1:16.0: can't read capabilities [ 273.154772][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.526311][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.691447][ T5890] usb 4-1: USB disconnect, device number 15 [ 273.980786][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.233300][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.708763][ T977] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 277.860670][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 277.863231][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.863301][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.863349][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 277.863375][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.927268][ T977] usb 4-1: config 0 descriptor?? [ 277.941004][ T977] hub 4-1:0.0: bad descriptor, ignoring hub [ 277.941043][ T977] hub 4-1:0.0: probe with driver hub failed with error -5 [ 277.945368][ T977] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 278.034761][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 279.679451][ T5890] usb 4-1: USB disconnect, device number 16 [ 280.638889][ T5892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 280.723751][ T9550] loop9: detected capacity change from 0 to 7 [ 280.742877][ T9550] Dev loop9: unable to read RDB block 7 [ 280.742929][ T9550] loop9: AHDI p3 p4 [ 280.742961][ T9550] loop9: partition table partially beyond EOD, truncated [ 280.743083][ T9550] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 280.801957][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 280.802020][ T5892] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 280.802046][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.836193][ T5892] usb 5-1: config 0 descriptor?? [ 281.135069][ T9561] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 281.566959][ T9561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.626909][ T9565] bond1: (slave gretap1): making interface the new active one [ 281.642337][ T9565] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 281.798386][ T9574] fuse: Bad value for 'group_id' [ 281.798408][ T9574] fuse: Bad value for 'group_id' [ 283.199483][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 283.199640][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 283.219816][ T5892] usb 5-1: USB disconnect, device number 16 [ 285.168890][ T977] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 285.328859][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 285.332198][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.332264][ T977] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.332317][ T977] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.332340][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.403048][ T977] usb 3-1: config 0 descriptor?? [ 285.419444][ T977] hub 3-1:0.0: bad descriptor, ignoring hub [ 285.419488][ T977] hub 3-1:0.0: probe with driver hub failed with error -5 [ 285.453338][ T977] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 287.254862][ T5892] usb 3-1: USB disconnect, device number 13 [ 288.468769][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 288.646294][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.646330][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.646352][ T10] usb 2-1: Product: syz [ 288.646368][ T10] usb 2-1: Manufacturer: syz [ 288.646383][ T10] usb 2-1: SerialNumber: syz [ 289.369767][ T9674] ubi0: attaching mtd0 [ 289.423220][ T9674] ubi0: scanning is finished [ 289.423245][ T9674] ubi0: empty MTD device detected [ 291.257009][ T9674] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 291.599104][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 291.599172][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 291.618702][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 291.720209][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 291.771233][ T10] usb 2-1: USB disconnect, device number 22 [ 291.805763][ T9745] input: syz0 as /devices/virtual/input/input15 [ 291.883081][ T9752] netlink: 'syz.4.1688': attribute type 1 has an invalid length. [ 291.968067][ T9752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.015533][ T9755] bond1: (slave syz_tun): making interface the new active one [ 292.049146][ T9755] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 292.062023][ T5805] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 292.234769][ T5805] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 292.234802][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.234823][ T5805] usb 3-1: Product: syz [ 292.234838][ T5805] usb 3-1: Manufacturer: syz [ 292.234854][ T5805] usb 3-1: SerialNumber: syz [ 292.499224][ T5805] usb 3-1: config 0 descriptor?? [ 293.516239][ T5805] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 294.416609][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1707'. [ 294.416647][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1707'. [ 294.490201][ T5805] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 294.530942][ T5805] usb 3-1: USB disconnect, device number 14 [ 296.007110][ T9858] ======================================================= [ 296.007110][ T9858] WARNING: The mand mount option has been deprecated and [ 296.007110][ T9858] and is ignored by this kernel. Remove the mand [ 296.007110][ T9858] option from the mount to silence this warning. [ 296.007110][ T9858] ======================================================= [ 297.390191][ T9886] fuse: Unknown parameter 'grou00000000000000000000' [ 299.469186][ T5805] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 299.639262][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.639317][ T5805] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.639342][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.683242][ T5805] usb 5-1: config 0 descriptor?? [ 299.910184][ T5805] usbhid 5-1:0.0: can't add hid device: -71 [ 299.910335][ T5805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 299.948780][ T5805] usb 5-1: USB disconnect, device number 17 [ 300.418815][ T5953] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 300.581429][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 300.590835][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.590901][ T5953] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 300.590930][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.634076][ T5953] usb 5-1: config 0 descriptor?? [ 300.668389][ T5953] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 300.686074][ T5953] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 301.088800][ T5953] usb 5-1: USB disconnect, device number 18 [ 301.092631][ T5953] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 302.259768][ T9972] fuse: root generation should be zero [ 302.435918][ T9983] fuse: Unknown parameter 'group_i00000000000000000000' [ 303.638801][ T5953] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 303.792454][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.792491][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.792516][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.792562][ T5953] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.792587][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.798312][ T5953] usb 5-1: config 0 descriptor?? [ 304.224728][ T5953] plantronics 0003:047F:FFFF.0011: unbalanced delimiter at end of report description [ 304.225709][ T5953] plantronics 0003:047F:FFFF.0011: parse failed [ 304.225819][ T5953] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 304.254622][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 304.437656][ T5953] usb 5-1: USB disconnect, device number 19 [ 304.731047][T10038] fuse: Unknown parameter 'group_i00000000000000000000' [ 307.113230][T10076] fuse: Unknown parameter 'group_i00000000000000000000' [ 308.467774][T10090] fuse: Unknown parameter 'group_id00000000000000000000' [ 310.198777][ T5892] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 310.348856][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 310.353494][ T5892] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 310.353548][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.353575][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.353598][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 102, changing to 10 [ 310.353694][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 310.353742][ T5892] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 310.353888][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.450790][ T5892] usb 2-1: config 0 descriptor?? [ 310.760955][T10137] syz.3.1850 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 310.837236][T10112] overlayfs: statfs failed on './file0' [ 310.885477][ T5892] microsoft 0003:045E:00F9.0012: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 310.885519][ T5892] microsoft 0003:045E:00F9.0012: no inputs found [ 310.885535][ T5892] microsoft 0003:045E:00F9.0012: could not initialize ff, continuing anyway [ 311.267115][ T5892] usb 2-1: USB disconnect, device number 23 [ 312.102185][T10157] fuse: Unknown parameter 'group_id00000000000000000000' [ 315.920670][T10210] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 315.920710][T10210] overlayfs: failed to set xattr on upper [ 315.920719][T10210] overlayfs: ...falling back to redirect_dir=nofollow. [ 315.920727][T10210] overlayfs: ...falling back to index=off. [ 315.920745][T10210] overlayfs: ...falling back to uuid=null. [ 315.920766][T10210] overlayfs: maximum fs stacking depth exceeded [ 316.588309][T10220] IPv4: Oversized IP packet from 172.20.20.24 [ 316.593838][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 316.594494][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 317.506035][T10251] loop5: detected capacity change from 0 to 7 [ 317.536063][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.537370][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.578959][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.579001][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.633488][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.633533][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.666232][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.666341][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.741445][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.741490][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.773487][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.773539][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.773845][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.773875][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.774161][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.774190][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.774381][T10251] ldm_validate_partition_table(): Disk read failed. [ 317.774593][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.774623][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.775608][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.775651][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 317.777279][T10251] Dev loop5: unable to read RDB block 0 [ 317.912461][T10251] loop5: unable to read partition table [ 317.912715][T10251] loop5: partition table beyond EOD, truncated [ 317.912738][T10251] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 318.792661][T10296] netlink: 'syz.4.1915': attribute type 10 has an invalid length. [ 318.808304][T10296] team0: Port device dummy0 added [ 319.198278][T10314] netlink: 'syz.4.1922': attribute type 21 has an invalid length. [ 319.198490][T10314] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1922'. [ 321.764133][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 321.918930][ T5892] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 322.094803][ T5892] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 322.094840][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.094972][ T5892] usb 2-1: Product: syz [ 322.094990][ T5892] usb 2-1: Manufacturer: syz [ 322.095006][ T5892] usb 2-1: SerialNumber: syz [ 322.146264][ T5892] usb 2-1: config 0 descriptor?? [ 322.384744][ T5892] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 322.477872][T10436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.501862][T10436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.672454][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.672541][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.773673][T10443] fuse: Bad value for 'fd' [ 324.656050][ T5892] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 325.106716][ T5892] usb 2-1: USB disconnect, device number 24 [ 325.748798][ T5953] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 325.910039][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 325.912518][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.912570][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 325.912590][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 325.912609][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 325.912626][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 326.016393][ T5953] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 326.016433][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 326.016458][ T5953] usb 5-1: Product: syz [ 326.016494][ T5953] usb 5-1: Manufacturer: syz [ 326.016510][ T5953] usb 5-1: SerialNumber: syz [ 326.061011][ T5953] usb 5-1: config 0 descriptor?? [ 326.412004][ T5953] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 326.412034][ T5953] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 326.602655][ T5953] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 326.602687][ T5953] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 326.602702][ T5953] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 326.804146][ T5953] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 327.815584][ T5953] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 327.816486][ T5953] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 327.837553][ T5953] usb 5-1: USB disconnect, device number 20 [ 330.014342][T10590] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 330.124280][T10590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.646880][T10593] bond2: (slave veth3): Enslaving as an active interface with a down link [ 331.683962][T10614] overlayfs: failed to clone upperpath [ 331.705435][T10590] bond2: (slave veth0_to_bond): making interface the new active one [ 331.707633][T10590] veth0_to_bond: entered promiscuous mode [ 331.708146][T10590] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 332.553945][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 333.369769][T10660] fuse: Invalid rootmode [ 334.667650][T10670] fuse: Bad value for 'rootmode' [ 336.330582][T10693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2063'. [ 336.599280][T10707] fuse: Bad value for 'fd' [ 338.029821][T10733] fuse: Bad value for 'fd' [ 340.328039][T10780] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 343.209499][ T5975] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 343.364511][ T5975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.364577][ T5975] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 343.364603][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.415615][ T5975] usb 2-1: config 0 descriptor?? [ 343.600869][ T5975] pwc: Askey VC010 type 2 USB webcam detected. [ 344.057890][ T5975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.071795][ T5975] pwc: recv_control_msg error -32 req 02 val 2700 [ 344.074115][ T5975] pwc: recv_control_msg error -32 req 02 val 2c00 [ 344.076955][ T5975] pwc: recv_control_msg error -32 req 04 val 1000 [ 344.134352][ T5975] pwc: recv_control_msg error -32 req 04 val 1300 [ 344.136150][ T5975] pwc: recv_control_msg error -32 req 04 val 1400 [ 344.279713][T10878] netlink: 'syz.4.2136': attribute type 9 has an invalid length. [ 344.279737][T10878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2136'. [ 344.507314][ T5975] pwc: recv_control_msg error -71 req 02 val 2100 [ 344.507895][ T5975] pwc: recv_control_msg error -71 req 04 val 1500 [ 344.508469][ T5975] pwc: recv_control_msg error -71 req 02 val 2500 [ 344.509210][ T5975] pwc: recv_control_msg error -71 req 02 val 2400 [ 344.509834][ T5975] pwc: recv_control_msg error -71 req 02 val 2600 [ 344.510745][ T5975] pwc: recv_control_msg error -71 req 02 val 2900 [ 344.528958][ T5975] pwc: recv_control_msg error -71 req 02 val 2800 [ 344.556468][ T5975] pwc: recv_control_msg error -71 req 04 val 1100 [ 344.556936][ T5975] pwc: recv_control_msg error -71 req 04 val 1200 [ 344.586688][ T5975] pwc: Registered as video103. [ 344.608526][ T5975] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 344.688796][ T5975] usb 2-1: USB disconnect, device number 25 [ 345.280735][T10897] netlink: 'syz.2.2143': attribute type 10 has an invalid length. [ 345.680052][T10897] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 345.683297][T10897] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 346.270932][ T1491] veth0_to_bond: left promiscuous mode [ 349.134293][ T977] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 349.289008][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 349.318615][ T977] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 349.318648][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.318670][ T977] usb 5-1: Product: syz [ 349.318686][ T977] usb 5-1: Manufacturer: syz [ 349.318701][ T977] usb 5-1: SerialNumber: syz [ 349.331770][ T977] usb 5-1: config 0 descriptor?? [ 349.383352][ T977] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 351.165220][ T977] gspca_stk1135: reg_w 0x200 err -71 [ 351.166313][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 351.166451][ T977] gspca_stk1135: Sensor write failed [ 351.166488][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 351.166499][ T977] gspca_stk1135: Sensor write failed [ 351.166536][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 351.166546][ T977] gspca_stk1135: Sensor read failed [ 351.166583][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 351.166594][ T977] gspca_stk1135: Sensor read failed [ 351.166602][ T977] gspca_stk1135: Detected sensor type unknown (0x0) [ 351.166659][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 351.166671][ T977] gspca_stk1135: Sensor read failed [ 351.166709][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 351.166720][ T977] gspca_stk1135: Sensor read failed [ 351.166757][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 351.166769][ T977] gspca_stk1135: Sensor write failed [ 351.166807][ T977] gspca_stk1135: serial bus timeout: status=0x00 [ 351.166818][ T977] gspca_stk1135: Sensor write failed [ 351.166928][ T977] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 351.303591][ T977] usb 5-1: USB disconnect, device number 21 [ 351.862550][T11040] fuse: Bad value for 'fd' [ 353.274849][ T38] audit: type=1326 audit(1761318635.978:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.274909][ T38] audit: type=1326 audit(1761318635.978:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.278907][ T38] audit: type=1326 audit(1761318635.978:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.286499][ T38] audit: type=1326 audit(1761318635.988:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.286565][ T38] audit: type=1326 audit(1761318635.988:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.287263][ T38] audit: type=1326 audit(1761318635.988:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.287636][ T38] audit: type=1326 audit(1761318635.988:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.288706][ T38] audit: type=1326 audit(1761318635.988:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.289043][ T38] audit: type=1326 audit(1761318635.998:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 353.289855][ T38] audit: type=1326 audit(1761318635.998:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78378cefc9 code=0x7ffc0000 [ 356.256171][T11096] fuse: Unknown parameter 'user_id00000000000000000000' [ 357.728140][T11110] fuse: Bad value for 'fd' [ 358.081419][T11120] overlayfs: failed to clone upperpath [ 359.396147][T11135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 361.189053][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 362.395593][T11211] fuse: Bad value for 'fd' [ 362.709877][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.727567][T11218] overlayfs: failed to clone upperpath [ 363.103694][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.358012][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.781375][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.996883][T11234] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2283'. [ 364.083105][T11234] gretap0: entered promiscuous mode [ 367.246479][T11310] fuse: Unknown parameter '0x0000000000000003' [ 368.764537][T11324] fuse: Unknown parameter '0x0000000000000003' [ 372.143202][T11372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.226079][T11437] bridge0: port 3(gretap0) entered blocking state [ 374.226254][T11437] bridge0: port 3(gretap0) entered disabled state [ 374.226424][T11437] gretap0: entered allmulticast mode [ 374.233415][T11437] gretap0: entered promiscuous mode [ 374.235599][T11437] bridge0: port 3(gretap0) entered blocking state [ 374.236414][T11437] bridge0: port 3(gretap0) entered forwarding state [ 374.253616][T11437] gretap0: left allmulticast mode [ 374.253653][T11437] gretap0: left promiscuous mode [ 374.253971][T11437] bridge0: port 3(gretap0) entered disabled state [ 374.446016][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 374.446036][ T38] audit: type=1326 audit(1761318657.148:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.446107][ T38] audit: type=1326 audit(1761318657.148:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.446154][ T38] audit: type=1326 audit(1761318657.148:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.446202][ T38] audit: type=1326 audit(1761318657.148:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.446250][ T38] audit: type=1326 audit(1761318657.148:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.490560][ T38] audit: type=1326 audit(1761318657.198:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.490635][ T38] audit: type=1326 audit(1761318657.198:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.491950][ T38] audit: type=1326 audit(1761318657.198:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.492047][ T38] audit: type=1326 audit(1761318657.198:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 374.492106][ T38] audit: type=1326 audit(1761318657.198:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4777cefc9 code=0x7ffc0000 [ 375.283301][T11452] fuse: Unknown parameter 'fd0x0000000000000003' [ 377.318921][T11477] fuse: Unknown parameter '0x0000000000000003' [ 380.010604][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2389'. [ 384.273316][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.289227][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.032953][T11556] fuse: Unknown parameter '0x0000000000000003' [ 387.604697][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 387.631918][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 387.632464][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 387.633628][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 390.171837][T11590] ubi0: attaching mtd0 [ 390.175599][T11590] ubi0: scanning is finished [ 391.584440][T11609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2421'. [ 391.809613][ T5811] hid_parser_main: 5 callbacks suppressed [ 391.809642][ T5811] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 391.953972][ T5811] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 392.704004][T11621] sctp: [Deprecated]: syz.2.2427 (pid 11621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.704004][T11621] Use struct sctp_sack_info instead [ 393.675500][T11635] overlayfs: failed to clone upperpath [ 395.594910][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2442'. [ 401.555168][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'. [ 401.560457][T11727] netlink: 'syz.1.2469': attribute type 12 has an invalid length. [ 408.631854][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.656739][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.719275][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.720645][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.721525][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.815660][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 408.866449][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2498'. [ 410.809025][ T5804] Bluetooth: hci5: command tx timeout [ 412.888916][ T5804] Bluetooth: hci5: command tx timeout [ 413.288129][T11800] chnl_net:caif_netlink_parms(): no params data found [ 414.889377][T11590] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 414.889407][T11590] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 414.889425][T11590] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 414.889442][T11590] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 414.889460][T11590] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 414.889476][T11590] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 414.889494][T11590] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3703680244 [ 414.889515][T11590] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 414.893270][T11860] ubi0: background thread "ubi_bgt0d" started, PID 11860 [ 414.913412][T11595] ubi0: detaching mtd0 [ 414.969313][ T5814] Bluetooth: hci5: command tx timeout [ 415.041959][T11595] ubi0: mtd0 is detached [ 416.170921][T11800] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.186313][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.186598][T11800] bridge_slave_0: entered allmulticast mode [ 416.219773][T11800] bridge_slave_0: entered promiscuous mode [ 416.235017][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.235472][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.235736][T11800] bridge_slave_1: entered allmulticast mode [ 416.265139][T11800] bridge_slave_1: entered promiscuous mode [ 417.050252][ T5814] Bluetooth: hci5: command tx timeout [ 420.709720][T11800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.764070][T11800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.033718][T11800] team0: Port device team_slave_0 added [ 422.038063][T11800] team0: Port device team_slave_1 added [ 423.064703][T11800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.064723][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.064755][T11800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.125418][T11800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.125438][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.125470][T11800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.237455][T11800] hsr_slave_0: entered promiscuous mode [ 424.321104][T11800] hsr_slave_1: entered promiscuous mode [ 424.335165][T11800] debugfs: 'hsr0' already exists in 'hsr' [ 424.335211][T11800] Cannot create hsr debugfs directory [ 428.308948][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.334102][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.338137][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.407112][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.407903][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 430.488826][ T5814] Bluetooth: hci4: command tx timeout [ 431.371859][T11800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 432.070852][T11800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 432.568811][ T5814] Bluetooth: hci4: command tx timeout [ 432.966380][T11819] bond1: (slave syz_tun): Releasing active interface [ 433.269828][T11800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 433.687618][T11800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 434.648795][ T5814] Bluetooth: hci4: command tx timeout [ 434.776048][T11954] chnl_net:caif_netlink_parms(): no params data found [ 436.729094][ T5804] Bluetooth: hci4: command tx timeout [ 437.415259][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.442135][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.442412][T11954] bridge_slave_0: entered allmulticast mode [ 437.451088][T11954] bridge_slave_0: entered promiscuous mode [ 437.464759][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.464901][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.465160][T11954] bridge_slave_1: entered allmulticast mode [ 437.468128][T11954] bridge_slave_1: entered promiscuous mode [ 438.586924][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.601876][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.609186][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.613679][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.614847][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.481797][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.546489][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.728942][ T5814] Bluetooth: hci3: command tx timeout [ 442.808887][ T5814] Bluetooth: hci3: command tx timeout [ 444.888843][ T5814] Bluetooth: hci3: command tx timeout [ 445.777907][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.777985][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.028738][ T5814] Bluetooth: hci3: command tx timeout [ 447.080979][T11954] team0: Port device team_slave_0 added [ 447.099151][T11954] team0: Port device team_slave_1 added [ 447.679079][T11800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.848260][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.848280][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.848310][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.950309][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.950326][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.950355][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.248791][T11800] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.302580][T11954] hsr_slave_0: entered promiscuous mode [ 451.304081][T11954] hsr_slave_1: entered promiscuous mode [ 451.305165][T11954] debugfs: 'hsr0' already exists in 'hsr' [ 451.820839][T11954] Cannot create hsr debugfs directory [ 451.939656][T10575] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.939810][T10575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.990187][T10562] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.991108][T10562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.784639][T10562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.944189][T12028] chnl_net:caif_netlink_parms(): no params data found [ 459.884024][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.887231][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.887492][T12028] bridge_slave_0: entered allmulticast mode [ 459.915597][T12028] bridge_slave_0: entered promiscuous mode [ 460.500615][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.500780][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.501046][T12028] bridge_slave_1: entered allmulticast mode [ 460.529406][T12028] bridge_slave_1: entered promiscuous mode [ 461.632243][T11954] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.764891][T12028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.766521][T11954] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 462.313918][T12028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.341464][T11954] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 464.557154][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 464.557895][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 464.621953][T11954] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 464.718949][T12028] team0: Port device team_slave_0 added [ 464.750055][T12028] team0: Port device team_slave_1 added [ 464.810761][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 464.810984][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 465.138002][T12028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.138023][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.138054][T12028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.216731][T12028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.216761][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.216792][T12028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.287411][T11800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.322589][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 465.322743][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 465.343228][T12172] ceph: No mds server is up or the cluster is laggy [ 467.734876][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.750581][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.786032][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.805100][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.806572][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.587347][T12028] hsr_slave_0: entered promiscuous mode [ 468.593479][T12028] hsr_slave_1: entered promiscuous mode [ 468.603167][T12028] debugfs: 'hsr0' already exists in 'hsr' [ 468.603200][T12028] Cannot create hsr debugfs directory [ 468.803820][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 468.826665][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 468.828204][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 468.844152][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 468.845016][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 469.928870][ T5814] Bluetooth: hci1: command tx timeout [ 470.971242][ T5814] Bluetooth: hci6: command tx timeout [ 472.008927][ T5814] Bluetooth: hci1: command tx timeout [ 472.872273][T12204] overlayfs: failed to clone upperpath [ 473.050067][ T5804] Bluetooth: hci6: command tx timeout [ 474.549743][ T5814] Bluetooth: hci1: command tx timeout [ 474.796018][T11954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.128881][ T5814] Bluetooth: hci6: command tx timeout [ 475.240498][T12028] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 475.514089][T12028] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 475.580725][T12191] chnl_net:caif_netlink_parms(): no params data found [ 475.644982][T12028] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 475.903350][T11954] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.916026][T12028] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 476.212229][T12196] chnl_net:caif_netlink_parms(): no params data found [ 476.569033][ T5814] Bluetooth: hci1: command tx timeout [ 476.867150][T10575] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.877933][T10575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.171174][ T5814] Bluetooth: hci6: command tx timeout [ 478.783013][T10575] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.783200][T10575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.300068][T12191] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.300215][T12191] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.300503][T12191] bridge_slave_0: entered allmulticast mode [ 479.303524][T12191] bridge_slave_0: entered promiscuous mode [ 479.821933][T12191] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.822064][T12191] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.822348][T12191] bridge_slave_1: entered allmulticast mode [ 479.855856][T12191] bridge_slave_1: entered promiscuous mode [ 480.472394][T12196] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.472541][T12196] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.472825][T12196] bridge_slave_0: entered allmulticast mode [ 480.476205][T12196] bridge_slave_0: entered promiscuous mode [ 481.059982][T12196] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.060129][T12196] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.060364][T12196] bridge_slave_1: entered allmulticast mode [ 481.063097][T12196] bridge_slave_1: entered promiscuous mode [ 481.123327][T12191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.567278][T12191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.003437][T12256] overlayfs: missing 'lowerdir' [ 482.021299][T12196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.524731][T12196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.144374][T12191] team0: Port device team_slave_0 added [ 486.294209][T12191] team0: Port device team_slave_1 added [ 487.844859][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.871648][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.874559][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.876108][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.877041][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.195350][T12196] team0: Port device team_slave_0 added [ 489.135278][T12196] team0: Port device team_slave_1 added [ 489.185370][T12191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.185389][T12191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.185421][T12191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.905836][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'. [ 490.009002][ T5814] Bluetooth: hci0: command tx timeout [ 490.294819][T12191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.294839][T12191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.294968][T12191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.740182][T12196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.740203][T12196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.740234][T12196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.807768][T12196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.807786][T12196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.807817][T12196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.092033][ T5814] Bluetooth: hci0: command tx timeout [ 494.169139][ T5814] Bluetooth: hci0: command tx timeout [ 495.104452][T12191] hsr_slave_0: entered promiscuous mode [ 495.105942][T12191] hsr_slave_1: entered promiscuous mode [ 495.107307][T12191] debugfs: 'hsr0' already exists in 'hsr' [ 495.107337][T12191] Cannot create hsr debugfs directory [ 496.548693][ T5804] Bluetooth: hci0: command tx timeout [ 496.982021][T12196] hsr_slave_0: entered promiscuous mode [ 496.983549][T12196] hsr_slave_1: entered promiscuous mode [ 497.001035][T12196] debugfs: 'hsr0' already exists in 'hsr' [ 497.001066][T12196] Cannot create hsr debugfs directory [ 497.230177][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.359171][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.362493][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.364534][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.365896][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 499.448927][ T5814] Bluetooth: hci4: command tx timeout [ 501.534988][ T5814] Bluetooth: hci4: command tx timeout [ 503.698380][ T5814] Bluetooth: hci4: command tx timeout [ 504.597603][T12342] wlan1: mtu greater than device maximum [ 504.864317][T12344] futex_wake_op: syz.2.2662 tries to shift op by 32; fix this program [ 505.778911][ T5814] Bluetooth: hci4: command tx timeout [ 507.109813][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.109880][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.241602][T12280] chnl_net:caif_netlink_parms(): no params data found [ 517.421200][T12280] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.421346][T12280] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.421625][T12280] bridge_slave_0: entered allmulticast mode [ 517.424654][T12280] bridge_slave_0: entered promiscuous mode [ 517.490726][T12280] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.490871][T12280] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.491180][T12280] bridge_slave_1: entered allmulticast mode [ 517.496541][T12280] bridge_slave_1: entered promiscuous mode [ 519.683767][T12280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.702881][T12280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.703624][T12317] chnl_net:caif_netlink_parms(): no params data found [ 520.959393][T12280] team0: Port device team_slave_0 added [ 522.125189][T10562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.289706][T12280] team0: Port device team_slave_1 added [ 523.917718][T12280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.917738][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.917768][T12280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.970524][T12280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.970543][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.970574][T12280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.306683][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.306877][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.307246][T12317] bridge_slave_0: entered allmulticast mode [ 525.341527][T12317] bridge_slave_0: entered promiscuous mode [ 526.507004][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.507157][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.507464][T12317] bridge_slave_1: entered allmulticast mode [ 526.525030][T12317] bridge_slave_1: entered promiscuous mode [ 526.842431][T12280] hsr_slave_0: entered promiscuous mode [ 526.849465][T12280] hsr_slave_1: entered promiscuous mode [ 526.850731][T12280] debugfs: 'hsr0' already exists in 'hsr' [ 526.850763][T12280] Cannot create hsr debugfs directory [ 527.018179][T12317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.320334][T12317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.232385][T12432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 528.559035][T12432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 528.564695][T12432] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 528.566901][T12432] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.568399][T12432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 529.762672][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.791967][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.793427][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.795172][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.796217][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.279692][T12444] IPv6: Can't replace route, no match found [ 531.209694][T12432] Bluetooth: hci3: command tx timeout [ 531.852188][T12432] Bluetooth: hci5: command tx timeout [ 532.584024][T12317] team0: Port device team_slave_0 added [ 532.617852][T12317] team0: Port device team_slave_1 added [ 533.289749][T12432] Bluetooth: hci3: command tx timeout [ 534.014722][T12432] Bluetooth: hci5: command tx timeout [ 534.951647][T12317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.951666][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.951697][T12317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.029766][T12317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.029787][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.029819][T12317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.448952][T12432] Bluetooth: hci3: command tx timeout [ 536.089642][T12432] Bluetooth: hci5: command tx timeout [ 537.202721][T12317] hsr_slave_0: entered promiscuous mode [ 537.204447][T12317] hsr_slave_1: entered promiscuous mode [ 537.216331][T12317] debugfs: 'hsr0' already exists in 'hsr' [ 537.216373][T12317] Cannot create hsr debugfs directory [ 537.635544][T12432] Bluetooth: hci3: command tx timeout [ 538.588969][T12432] Bluetooth: hci5: command tx timeout [ 548.523587][T12439] chnl_net:caif_netlink_parms(): no params data found [ 548.571422][T12431] chnl_net:caif_netlink_parms(): no params data found [ 548.924486][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 548.953817][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 548.956043][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 548.978844][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 548.980762][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 550.681871][T12439] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.682013][T12439] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.682301][T12439] bridge_slave_0: entered allmulticast mode [ 550.685893][T12439] bridge_slave_0: entered promiscuous mode [ 550.725576][T12431] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.725751][T12431] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.726103][T12431] bridge_slave_0: entered allmulticast mode [ 550.752592][T12431] bridge_slave_0: entered promiscuous mode [ 550.776456][T12439] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.776596][T12439] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.776871][T12439] bridge_slave_1: entered allmulticast mode [ 550.807429][T12439] bridge_slave_1: entered promiscuous mode [ 550.895957][T12431] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.896098][T12431] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.896436][T12431] bridge_slave_1: entered allmulticast mode [ 550.923005][T12431] bridge_slave_1: entered promiscuous mode [ 551.050293][ T5814] Bluetooth: hci7: command tx timeout [ 551.935719][T12527] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2705'. [ 553.131688][ T5814] Bluetooth: hci7: command tx timeout [ 554.761924][T12439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.122473][T12431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.128331][T12439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.146557][T12431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.212398][ T5814] Bluetooth: hci7: command tx timeout [ 557.289913][ T5814] Bluetooth: hci7: command tx timeout [ 557.598338][T12432] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 557.623737][T12432] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 557.625867][T12432] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 557.627284][T12432] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 557.628103][T12432] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 558.635968][T12439] team0: Port device team_slave_0 added [ 558.666569][T12431] team0: Port device team_slave_0 added [ 558.689102][T12439] team0: Port device team_slave_1 added [ 558.722541][T12431] team0: Port device team_slave_1 added [ 559.688876][ T5814] Bluetooth: hci8: command tx timeout [ 560.733580][ T10] IPVS: starting estimator thread 0... [ 560.948839][T12555] IPVS: using max 7 ests per chain, 16800 per kthread [ 561.772783][ T5814] Bluetooth: hci8: command tx timeout [ 563.849050][ T5814] Bluetooth: hci8: command tx timeout [ 563.957098][T12439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.957117][T12439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.957147][T12439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.092279][T12431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.092300][T12431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.092342][T12431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.095382][T12439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.095399][T12439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.095430][T12439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.269796][T12431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.269816][T12431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.269847][T12431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.929802][ T5814] Bluetooth: hci8: command tx timeout [ 569.667782][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.667860][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.032339][T12439] hsr_slave_0: entered promiscuous mode [ 572.045535][T12439] hsr_slave_1: entered promiscuous mode [ 572.046771][T12439] debugfs: 'hsr0' already exists in 'hsr' [ 572.046800][T12439] Cannot create hsr debugfs directory [ 572.422845][T12431] hsr_slave_0: entered promiscuous mode [ 572.423974][T12431] hsr_slave_1: entered promiscuous mode [ 572.424723][T12431] debugfs: 'hsr0' already exists in 'hsr' [ 572.424740][T12431] Cannot create hsr debugfs directory [ 574.956943][T12506] chnl_net:caif_netlink_parms(): no params data found [ 581.637941][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 581.637962][ T38] audit: type=1800 audit(1761319121.333:78): pid=12616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2726" name="bus" dev="ramfs" ino=36129 res=0 errno=0 [ 583.638407][T12622] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2727'. [ 584.254879][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.255115][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.255415][T12506] bridge_slave_0: entered allmulticast mode [ 584.333566][T12506] bridge_slave_0: entered promiscuous mode [ 584.493153][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.493319][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.493572][T12506] bridge_slave_1: entered allmulticast mode [ 584.528918][T12506] bridge_slave_1: entered promiscuous mode [ 585.892846][T12628] netlink: 'syz.2.2729': attribute type 10 has an invalid length. [ 585.933405][T12628] veth0_vlan: left promiscuous mode [ 585.936085][T12628] veth0_vlan: entered promiscuous mode [ 585.941692][T12628] team0: Device veth0_vlan failed to register rx_handler [ 587.779612][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.829564][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.690778][T12544] chnl_net:caif_netlink_parms(): no params data found [ 590.511603][T12432] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 590.527195][T12432] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 590.529384][T12432] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 590.541680][T12432] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 590.544225][T12432] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 590.705819][ T5804] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 590.719872][ T5804] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 590.721614][ T5804] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 590.724592][ T5804] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 590.728777][ T5804] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 590.831742][T12506] team0: Port device team_slave_0 added [ 590.843058][T12506] team0: Port device team_slave_1 added [ 591.213309][T12432] Bluetooth: hci1: command 0x0406 tx timeout [ 591.897557][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.897577][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.897607][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.985430][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.985449][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.985480][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.655620][ T5814] Bluetooth: hci9: command tx timeout [ 592.811948][ T5814] Bluetooth: hci10: command tx timeout [ 594.872971][T12432] Bluetooth: hci9: command tx timeout [ 594.889103][ T5804] Bluetooth: hci10: command tx timeout [ 595.466424][T12544] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.466523][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.466745][T12544] bridge_slave_0: entered allmulticast mode [ 595.494855][T12544] bridge_slave_0: entered promiscuous mode [ 595.560896][T12506] hsr_slave_0: entered promiscuous mode [ 595.564391][T12506] hsr_slave_1: entered promiscuous mode [ 595.565676][T12506] debugfs: 'hsr0' already exists in 'hsr' [ 595.565705][T12506] Cannot create hsr debugfs directory [ 595.566435][T12544] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.566649][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.566895][T12544] bridge_slave_1: entered allmulticast mode [ 595.569943][T12544] bridge_slave_1: entered promiscuous mode [ 596.026774][T12544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.108963][T12544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.340992][ T5804] Bluetooth: hci6: command 0x0406 tx timeout [ 596.903450][ T5804] Bluetooth: hci9: command tx timeout [ 596.969305][ T5804] Bluetooth: hci10: command tx timeout [ 599.066694][ T5804] Bluetooth: hci10: command tx timeout [ 599.066992][ T5814] Bluetooth: hci9: command tx timeout [ 601.764853][T12544] team0: Port device team_slave_0 added [ 601.937516][T12544] team0: Port device team_slave_1 added [ 603.384303][T12544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.384321][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.384352][T12544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.839828][T12544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.839848][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.839879][T12544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.760586][T12544] hsr_slave_0: entered promiscuous mode [ 605.762282][T12544] hsr_slave_1: entered promiscuous mode [ 605.768099][T12544] debugfs: 'hsr0' already exists in 'hsr' [ 605.768128][T12544] Cannot create hsr debugfs directory [ 605.841819][T12647] chnl_net:caif_netlink_parms(): no params data found [ 607.976754][T12645] chnl_net:caif_netlink_parms(): no params data found [ 611.498830][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 611.665613][T12727] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 612.510714][T12432] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 612.533665][T12432] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 612.535305][T12432] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 612.536625][T12432] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 612.537509][T12432] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 615.804687][ T5804] Bluetooth: hci11: command tx timeout [ 617.849505][ T5814] Bluetooth: hci11: command tx timeout [ 618.457367][ T5804] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 618.484022][ T5804] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 618.485510][ T5804] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 618.521849][ T5804] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 618.563781][ T5804] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 620.000035][ T5804] Bluetooth: hci11: command tx timeout [ 620.649017][T12432] Bluetooth: hci12: command tx timeout [ 621.052666][T12647] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.052898][T12647] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.053280][T12647] bridge_slave_0: entered allmulticast mode [ 621.058324][T12647] bridge_slave_0: entered promiscuous mode [ 622.009920][T12432] Bluetooth: hci11: command tx timeout [ 622.009957][T12432] Bluetooth: hci4: command 0x0406 tx timeout [ 622.325578][T12645] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.325720][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.326070][T12645] bridge_slave_0: entered allmulticast mode [ 622.341069][T12645] bridge_slave_0: entered promiscuous mode [ 622.369606][T12647] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.369751][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.370127][T12647] bridge_slave_1: entered allmulticast mode [ 622.373248][T12647] bridge_slave_1: entered promiscuous mode [ 623.243484][ T5814] Bluetooth: hci12: command tx timeout [ 623.275078][T12645] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.275245][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.275602][T12645] bridge_slave_1: entered allmulticast mode [ 623.300733][T12645] bridge_slave_1: entered promiscuous mode [ 626.647285][ T5814] Bluetooth: hci12: command tx timeout [ 628.619683][T12647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.650850][T12645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.694037][T12647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.703115][T12645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.728837][ T5814] Bluetooth: hci12: command tx timeout [ 629.863436][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.863490][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.165100][T12647] team0: Port device team_slave_0 added [ 630.168140][T12645] team0: Port device team_slave_0 added [ 630.202620][T12647] team0: Port device team_slave_1 added [ 630.206719][T12645] team0: Port device team_slave_1 added [ 635.432074][T12647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.432093][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.432124][T12647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.487751][T12645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.487771][T12645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.487807][T12645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.551822][T12647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.551840][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.551868][T12647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.715047][T12645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.715067][T12645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.715098][T12645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.065314][T12647] hsr_slave_0: entered promiscuous mode [ 641.067184][T12647] hsr_slave_1: entered promiscuous mode [ 641.080919][T12647] debugfs: 'hsr0' already exists in 'hsr' [ 641.080951][T12647] Cannot create hsr debugfs directory [ 641.505653][T12645] hsr_slave_0: entered promiscuous mode [ 641.507706][T12645] hsr_slave_1: entered promiscuous mode [ 641.675042][T12645] debugfs: 'hsr0' already exists in 'hsr' [ 641.675067][T12645] Cannot create hsr debugfs directory [ 646.697470][T12726] chnl_net:caif_netlink_parms(): no params data found [ 646.847814][T12844] 9pnet_fd: Insufficient options for proto=fd [ 649.333438][T10562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.470475][ T5804] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 649.496867][ T5804] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 649.548766][ T5804] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 649.559848][ T5804] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 649.560607][ T5804] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 649.791579][T12750] chnl_net:caif_netlink_parms(): no params data found [ 650.959575][T12862] overlayfs: missing 'lowerdir' [ 651.322890][T12864] 9pnet_fd: Insufficient options for proto=fd [ 651.417491][T12432] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 651.440970][T12432] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 651.442511][T12432] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 651.444966][T12432] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 651.445820][T12432] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 651.688720][T12432] Bluetooth: hci8: command tx timeout [ 652.489121][T12432] Bluetooth: hci5: command 0x0406 tx timeout [ 652.489179][T12438] Bluetooth: hci3: command 0x0406 tx timeout [ 653.853109][ T5804] Bluetooth: hci9: command tx timeout [ 653.853802][ T5804] Bluetooth: hci8: command tx timeout [ 655.618071][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.618232][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.633251][T12726] bridge_slave_0: entered allmulticast mode [ 655.636419][T12726] bridge_slave_0: entered promiscuous mode [ 655.997970][ T5814] Bluetooth: hci8: command tx timeout [ 656.015185][ T5804] Bluetooth: hci9: command tx timeout [ 656.588303][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.588938][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.589392][T12726] bridge_slave_1: entered allmulticast mode [ 656.593019][T12726] bridge_slave_1: entered promiscuous mode [ 657.546535][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.018929][ T5804] Bluetooth: hci8: command tx timeout [ 658.099159][ T5804] Bluetooth: hci9: command tx timeout [ 659.114964][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.253456][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.253689][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.254057][T12750] bridge_slave_0: entered allmulticast mode [ 659.290072][T12750] bridge_slave_0: entered promiscuous mode [ 660.183348][ T5804] Bluetooth: hci9: command tx timeout [ 661.141066][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.141221][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.141932][T12750] bridge_slave_1: entered allmulticast mode [ 661.169519][T12750] bridge_slave_1: entered promiscuous mode [ 662.021906][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'. [ 662.025142][T12726] team0: Port device team_slave_0 added [ 663.878579][ T39] INFO: task syz-executor:12196 blocked for more than 144 seconds. [ 663.878622][ T39] Not tainted syzkaller #0 [ 663.878632][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.878641][ T39] task:syz-executor state:D stack:17560 pid:12196 tgid:12196 ppid:1 task_flags:0x400140 flags:0x00080002 [ 663.878698][ T39] Call Trace: [ 663.878710][ T39] [ 663.878725][ T39] __schedule+0x16f3/0x4c20 [ 663.878784][ T39] ? __pfx___schedule+0x10/0x10 [ 663.878836][ T39] rt_mutex_schedule+0x77/0xf0 [ 663.878869][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 663.878907][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 663.878935][ T39] rt_mutex_slowlock+0x2b1/0x6e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 663.878959][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 663.878982][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 663.879002][ T39] ? __lock_acquire+0xab9/0xd20 [ 663.879044][ T39] ? del_device_store+0xd1/0x360 [ 663.879086][ T39] ? __pfx_sscanf+0x10/0x10 [ 663.879113][ T39] ? del_device_store+0xd1/0x360 [ 663.879145][ T39] mutex_lock_nested+0x16a/0x1d0 [ 663.879174][ T39] del_device_store+0xd1/0x360 [ 663.879207][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 663.879244][ T39] ? __pfx_del_device_store+0x10/0x10 [ 663.879278][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 663.879312][ T39] ? sysfs_kf_write+0x166/0x260 [ 663.879338][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 663.879357][ T39] kernfs_fop_write_iter+0x3b0/0x540 [ 663.879397][ T39] vfs_write+0x5d5/0xb40 [ 663.879431][ T39] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 663.879464][ T39] ? __pfx_vfs_write+0x10/0x10 [ 663.879504][ T39] ? do_sys_openat2+0x154/0x1c0 [ 663.879538][ T39] ksys_write+0x14b/0x260 [ 663.879569][ T39] ? __pfx_ksys_write+0x10/0x10 [ 663.879602][ T39] ? do_syscall_64+0xbe/0xfa0 [ 663.879636][ T39] do_syscall_64+0xfa/0xfa0 [ 663.879666][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.879688][ T39] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.879710][ T39] ? clear_bhb_loop+0x60/0xb0 [ 663.879737][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.879760][ T39] RIP: 0033:0x7fbcb897da7f [ 663.879780][ T39] RSP: 002b:00007fff699e7f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 663.879803][ T39] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fbcb897da7f [ 663.879820][ T39] RDX: 0000000000000001 RSI: 00007fff699e7fb0 RDI: 0000000000000005 [ 663.879834][ T39] RBP: 00007fbcb8a03256 R08: 0000000000000000 R09: 00007fff699e7db7 [ 663.879857][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 663.879872][ T39] R13: 00007fff699e7fb0 R14: 00007fbcb9704620 R15: 0000000000000003 [ 663.879910][ T39] [ 663.879970][ T39] [ 663.879970][ T39] Showing all locks held in the system: [ 663.879984][ T39] 6 locks held by ktimers/0/16: [ 663.879999][ T39] 3 locks held by rcuc/0/20: [ 663.880012][ T39] 2 locks held by ktimers/1/29: [ 663.880025][ T39] 1 lock held by khungtaskd/39: [ 663.880038][ T39] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 663.880108][ T39] 2 locks held by kworker/u8:6/1121: [ 663.880121][ T39] #0: ffff888144ee9138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.880180][ T39] #1: ffffc90004b8fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.880252][ T39] 2 locks held by getty/5560: [ 663.880264][ T39] #0: ffff88823bf708a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 663.880321][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 663.880392][ T39] 6 locks held by kworker/u8:3/10562: [ 663.880404][ T39] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.880461][ T39] #1: ffffc9000524fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.880517][ T39] #2: ffffffff8e855f20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 663.880569][ T39] #3: ffff88805c65b0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 663.880633][ T39] #4: ffff88805c65c300 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 663.880700][ T39] #5: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 663.880754][ T39] 3 locks held by kworker/u8:18/10575: [ 663.880767][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.880830][ T39] #1: ffffc900051efba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.880893][ T39] #2: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 663.880951][ T39] 7 locks held by syz-executor/12191: [ 663.880964][ T39] #0: ffff8880334be480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 663.881024][ T39] #1: ffff88807019c878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 663.881084][ T39] #2: ffff8880260a8e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 663.881148][ T39] #3: ffffffff8e0f3bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 663.881211][ T39] #4: ffff88805c5100d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 663.881273][ T39] #5: ffff88805c512300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 663.881333][ T39] #6: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 663.881386][ T39] 4 locks held by syz-executor/12196: [ 663.881400][ T39] #0: ffff8880334be480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 663.881459][ T39] #1: ffff88805d812878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 663.881518][ T39] #2: ffff8880260a8e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 663.881581][ T39] #3: ffffffff8e0f3bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 663.881646][ T39] 4 locks held by syz-executor/12280: [ 663.881659][ T39] #0: ffff8880334be480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 663.881719][ T39] #1: ffff88806872f878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 663.881786][ T39] #2: ffff8880260a8e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 663.881859][ T39] #3: ffffffff8e0f3bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 663.881923][ T39] 4 locks held by syz-executor/12317: [ 663.881936][ T39] #0: ffff8880334be480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 663.881996][ T39] #1: ffff888053260c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 663.882055][ T39] #2: ffff8880260a8e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 663.882120][ T39] #3: ffffffff8e0f3bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 663.882185][ T39] 4 locks held by syz-executor/12431: [ 663.882197][ T39] #0: ffff8880334be480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 663.882256][ T39] #1: ffff88806ac5fc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 663.882315][ T39] #2: ffff8880260a8e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 663.882380][ T39] #3: ffffffff8e0f3bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 663.882444][ T39] 4 locks held by syz-executor/12439: [ 663.882457][ T39] #0: ffff8880334be480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 663.882516][ T39] #1: ffff88807691c878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 663.882574][ T39] #2: ffff8880260a8e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 663.882639][ T39] #3: ffffffff8e0f3bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 663.882703][ T39] 4 locks held by syz-executor/12506: [ 663.882716][ T39] #0: ffff8880334be480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 663.882776][ T39] #1: ffff888069596878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 663.882835][ T39] #2: ffff8880260a8e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 663.882908][ T39] #3: ffffffff8e0f3bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 663.882972][ T39] 1 lock held by syz-executor/12544: [ 663.882984][ T39] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 663.883043][ T39] 1 lock held by syz-executor/12645: [ 663.883056][ T39] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 663.883109][ T39] 1 lock held by syz-executor/12647: [ 663.883122][ T39] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 663.883176][ T39] 1 lock held by syz-executor/12726: [ 663.883189][ T39] #0: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 663.883253][ T39] 1 lock held by syz-executor/12750: [ 663.883265][ T39] #0: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 663.883328][ T39] 2 locks held by syz-executor/12856: [ 663.883340][ T39] #0: ffffffff8e855f20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 663.883403][ T39] #1: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 663.883459][ T39] 3 locks held by syz-executor/12865: [ 663.883473][ T39] [ 663.883479][ T39] ============================================= [ 663.883479][ T39] [ 663.883502][ T39] NMI backtrace for cpu 1 [ 663.883523][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.883548][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 663.883561][ T39] Call Trace: [ 663.883570][ T39] [ 663.883579][ T39] dump_stack_lvl+0x189/0x250 [ 663.883619][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.883653][ T39] ? __pfx__printk+0x10/0x10 [ 663.883694][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 663.883721][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 663.883746][ T39] ? __pfx__printk+0x10/0x10 [ 663.883778][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 663.883806][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 663.883832][ T39] watchdog+0xf60/0xfa0 [ 663.883879][ T39] ? watchdog+0x1e2/0xfa0 [ 663.883917][ T39] kthread+0x711/0x8a0 [ 663.883954][ T39] ? __pfx_watchdog+0x10/0x10 [ 663.883984][ T39] ? __pfx_kthread+0x10/0x10 [ 663.884013][ T39] ? rt_spin_unlock+0x150/0x200 [ 663.884041][ T39] ? rt_spin_unlock+0x161/0x200 [ 663.884061][ T39] ? __pfx_kthread+0x10/0x10 [ 663.884095][ T39] ret_from_fork+0x4bc/0x870 [ 663.884125][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 663.884159][ T39] ? __switch_to_asm+0x39/0x70 [ 663.884181][ T39] ? __switch_to_asm+0x33/0x70 [ 663.884202][ T39] ? __pfx_kthread+0x10/0x10 [ 663.884235][ T39] ret_from_fork_asm+0x1a/0x30 [ 663.884277][ T39] [ 663.884286][ T39] Sending NMI from CPU 1 to CPUs 0: [ 663.884313][ C0] NMI backtrace for cpu 0 [ 663.884329][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.884355][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 663.884365][ C0] RIP: 0010:unwind_next_frame+0x17db/0x2390 [ 663.884393][ C0] Code: 49 0f bf 04 24 48 01 c6 4c 89 f7 48 89 da e8 4c 0e 00 00 84 c0 0f 84 47 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 <0f> b6 04 28 84 c0 0f 85 f4 08 00 00 b3 01 8b 84 24 84 00 00 00 41 [ 663.884409][ C0] RSP: 0018:ffffc90000156918 EFLAGS: 00000202 [ 663.884425][ C0] RAX: 1ffff9200002ad3d RBX: ffffffff8f6a5228 RCX: 0000000000000001 [ 663.884439][ C0] RDX: ffffc90000156a28 RSI: dffffc0000000000 RDI: ffffc90000156d50 [ 663.884452][ C0] RBP: dffffc0000000000 R08: ffffc90000156d50 R09: 0000000000000000 [ 663.884464][ C0] R10: ffffc90000156a38 R11: fffff5200002ad49 R12: ffffc90000156d50 [ 663.884477][ C0] R13: ffffc90000156a38 R14: ffffc900001569e8 R15: 1ffffffff1ed4a45 [ 663.884490][ C0] FS: 0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 663.884504][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.884517][ C0] CR2: 000000110c342c63 CR3: 000000004f34a000 CR4: 00000000003526f0 [ 663.884533][ C0] Call Trace: [ 663.884540][ C0] [ 663.884551][ C0] ? unwind_next_frame+0xa5/0x2390 [ 663.884576][ C0] ? kasan_save_track+0x3e/0x80 [ 663.884601][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 663.884622][ C0] arch_stack_walk+0x11c/0x150 [ 663.884651][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 663.884677][ C0] stack_trace_save+0x9c/0xe0 [ 663.884696][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 663.884714][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 663.884741][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 663.884765][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 663.884789][ C0] kasan_save_track+0x3e/0x80 [ 663.884811][ C0] ? kasan_save_track+0x3e/0x80 [ 663.884862][ C0] ? __slab_alloc+0xc6/0x1f0 [ 663.884880][ C0] __kasan_slab_alloc+0x6c/0x80 [ 663.884904][ C0] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 663.884928][ C0] ? kmalloc_reserve+0xbd/0x290 [ 663.884945][ C0] ? __alloc_skb+0x112/0x2d0 [ 663.884965][ C0] ? rcu_is_watching+0x15/0xb0 [ 663.884984][ C0] kmalloc_reserve+0xbd/0x290 [ 663.885004][ C0] __alloc_skb+0x142/0x2d0 [ 663.885022][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 663.885051][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 663.885071][ C0] ? nft_osf_eval+0x70/0x770 [ 663.885093][ C0] ? synproxy_pernet+0x45/0x270 [ 663.885127][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 663.885156][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 663.885182][ C0] ? nf_ip_checksum+0x13c/0x510 [ 663.885208][ C0] nft_synproxy_do_eval+0x345/0x570 [ 663.885236][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 663.885262][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 663.885293][ C0] nft_do_chain+0x40c/0x1920 [ 663.885324][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 663.885365][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 663.885393][ C0] nft_do_chain_inet+0x25d/0x340 [ 663.885417][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.885448][ C0] ? NF_HOOK+0x9a/0x3a0 [ 663.885476][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.885500][ C0] nf_hook_slow+0xc5/0x220 [ 663.885521][ C0] NF_HOOK+0x206/0x3a0 [ 663.885549][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 663.885577][ C0] ? NF_HOOK+0x9a/0x3a0 [ 663.885603][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 663.885629][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 663.885647][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 663.885676][ C0] ? skb_dst+0x4f/0xd0 [ 663.885692][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 663.885720][ C0] NF_HOOK+0x30c/0x3a0 [ 663.885748][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 663.885775][ C0] ? NF_HOOK+0x9a/0x3a0 [ 663.885800][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 663.885829][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 663.885863][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 663.885889][ C0] __netif_receive_skb+0x143/0x380 [ 663.885919][ C0] ? process_backlog+0x27b/0x900 [ 663.885946][ C0] process_backlog+0x31e/0x900 [ 663.885980][ C0] __napi_poll+0xb6/0x540 [ 663.886008][ C0] net_rx_action+0x5f7/0xda0 [ 663.886034][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.886057][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 663.886087][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 663.886140][ C0] handle_softirqs+0x22f/0x710 [ 663.886167][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 663.886196][ C0] run_ktimerd+0xcf/0x190 [ 663.886219][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 663.886243][ C0] ? schedule+0x91/0x360 [ 663.886267][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 663.886290][ C0] smpboot_thread_fn+0x542/0xa60 [ 663.886312][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 663.886340][ C0] kthread+0x711/0x8a0 [ 663.886368][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 663.886391][ C0] ? __pfx_kthread+0x10/0x10 [ 663.886416][ C0] ? rt_spin_unlock+0x150/0x200 [ 663.886436][ C0] ? rt_spin_unlock+0x161/0x200 [ 663.886453][ C0] ? __pfx_kthread+0x10/0x10 [ 663.886480][ C0] ret_from_fork+0x4bc/0x870 [ 663.886501][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 663.886527][ C0] ? __switch_to_asm+0x39/0x70 [ 663.886544][ C0] ? __switch_to_asm+0x33/0x70 [ 663.886561][ C0] ? __pfx_kthread+0x10/0x10 [ 663.886588][ C0] ret_from_fork_asm+0x1a/0x30 [ 663.886616][ C0] [ 664.413066][T12726] team0: Port device team_slave_1 added [ 665.970798][T12750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.892840][ T5804] Bluetooth: hci7: command 0x0406 tx timeout