last executing test programs: 14m57.190697949s ago: executing program 1 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 14m56.043728194s ago: executing program 1 (id=533): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x72bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x24044092) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14m55.556773872s ago: executing program 1 (id=534): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m51.204587485s ago: executing program 1 (id=547): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) close_range(r0, 0xffffffffffffffff, 0x0) 14m40.956528264s ago: executing program 1 (id=578): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5514, &(0x7f000000b380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) creat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') 14m38.035672967s ago: executing program 1 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)=@nfc_llcp, 0x80}, 0xdabf1a1f74bc8680) tgkill(0x0, 0x0, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x64001, 0x0) 14m22.671188807s ago: executing program 32 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)=@nfc_llcp, 0x80}, 0xdabf1a1f74bc8680) tgkill(0x0, 0x0, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x64001, 0x0) 10m34.858711427s ago: executing program 6 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x3f) 10m34.381391131s ago: executing program 6 (id=1245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(0x0, 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000), 0x0, r4) r5 = fsmount(r3, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) syz_open_dev$dmmidi(0x0, 0x6, 0x70202) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x58, &(0x7f00000011c0)=ANY=[@ANYBLOB="1201010212a93c20e204201473020102030109024600010e80a006090473080002401122052406000005240002000d240f010800000000000b00030524060001052400060f0d240f016d16ad12060009001006241a07"], &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) 10m29.235857195s ago: executing program 6 (id=1258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) unshare(0x8040480) cachestat(0xffffffffffffffff, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000016c0)="d6", 0x1}], 0x1, 0x0, 0x0, 0x20008081}, 0x38) r3 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x101842) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000001080)) fsopen(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) 10m24.755101984s ago: executing program 6 (id=1271): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,nodots,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,dots,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,euid=', @ANYRESDEC=0x0, @ANYBLOB="2ca169643e309d", @ANYRESDEC=0x0, @ANYBLOB=',audit,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x140008, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, 0x0, 0x164) newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x0, {0x9, 0xff800, 0x0, {0x1, 0x4, 0x0, 0x8, 0x3, 0x7fffffffffffffff, 0x63, 0x0, 0x7, 0x4000, 0x7, 0xffffffffffffffff, 0x0, 0x200, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 10m23.540126846s ago: executing program 6 (id=1274): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x24044084) 10m22.014240682s ago: executing program 6 (id=1276): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 10m20.769093199s ago: executing program 33 (id=1276): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 27.667944633s ago: executing program 0 (id=2561): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(0x0, 0x80) shutdown(r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40", 0x47, 0x0, &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) syz_open_dev$dmmidi(0x0, 0x6, 0x70202) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x58, &(0x7f00000011c0)=ANY=[@ANYBLOB="1201010212a93c20e204201473020102030109024600010e80a006090473080002401122052406000005240002000d240f010800000000000b00030524060001052400060f0d240f016d16ad12060009001006241a07"], &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) 23.195889779s ago: executing program 0 (id=2572): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0), 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0x2cc0, 0x18000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 22.427984451s ago: executing program 7 (id=2575): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0), 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0x2cc0, 0x18000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 18.343533587s ago: executing program 4 (id=2585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(0x0, 0x80) shutdown(r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40", 0x47, 0x0, &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) syz_open_dev$dmmidi(0x0, 0x6, 0x70202) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x58, &(0x7f00000011c0)=ANY=[@ANYBLOB="1201010212a93c20e204201473020102030109024600010e80a006090473080002401122052406000005240002000d240f010800000000000b00030524060001052400060f0d240f016d16ad12060009001006241a07"], &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) 18.230024532s ago: executing program 5 (id=2586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd17, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd09, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xcf5, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f718"}}}}}}, 0x0) 16.810809976s ago: executing program 5 (id=2588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) 16.681011541s ago: executing program 2 (id=2589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 16.240130638s ago: executing program 0 (id=2591): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) socket$kcm(0x10, 0x2, 0x0) 12.105950272s ago: executing program 0 (id=2592): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000003c0)={@loopback}, &(0x7f0000000400)=0x14) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 11.833388841s ago: executing program 4 (id=2594): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00007deb18b4c29aa0e60208000004000000004022cb3a7efb1305bc6d08194d7031", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x100) listen(r4, 0x9) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000200)}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, 0x0, 0x0) shutdown(r5, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 10.890691465s ago: executing program 7 (id=2595): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 10.707455786s ago: executing program 0 (id=2596): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(0x0, 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000), 0x0, r4) r5 = fsmount(r3, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40", 0x47, 0x0, &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) syz_open_dev$dmmidi(0x0, 0x6, 0x70202) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x58, &(0x7f00000011c0)=ANY=[@ANYBLOB="1201010212a93c20e204201473020102030109024600010e80a006090473080002401122052406000005240002000d240f010800000000000b00030524060001052400060f0d240f016d16ad12060009001006241a07"], &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) 10.121929474s ago: executing program 4 (id=2597): syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x0, 0xa1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x8, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x210, 0x3, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x3, 0x94}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xa, 0x5, 0x7, 0x10, 0x1}, 0x5, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.675925611s ago: executing program 7 (id=2599): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x84rusted:'}, 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x0, 0x0, 0x20000}) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close(0x3) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x11, &(0x7f0000000040), 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) r5 = userfaultfd(0xc0001) ppoll(&(0x7f0000000180)=[{r5, 0x404}], 0x1, 0x0, &(0x7f0000000340)={[0x401]}, 0x8) bind$alg(r0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r6, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 8.518215236s ago: executing program 3 (id=2601): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 8.486262918s ago: executing program 4 (id=2602): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x3, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) 8.144543943s ago: executing program 4 (id=2603): syz_io_uring_setup(0x8d2, &(0x7f0000000500)={0x0, 0x16c4a, 0x800, 0x4, 0x376}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b52, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 7.944555865s ago: executing program 3 (id=2604): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) socket$kcm(0x10, 0x2, 0x0) 7.882571389s ago: executing program 7 (id=2605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 6.433167162s ago: executing program 2 (id=2606): r0 = dup(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000000)="be", 0x1}, {0x0}], 0x2}, 0x20041000) 6.429058912s ago: executing program 3 (id=2607): ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d40460000001400000011"], 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000485", @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.142318971s ago: executing program 4 (id=2608): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) unshare(0x8040480) cachestat(0xffffffffffffffff, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000016c0)="d6", 0x1}], 0x1, 0x0, 0x0, 0x20008081}, 0x38) syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x101842) fremovexattr(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 4.171559211s ago: executing program 7 (id=2609): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00007deb18b4c29aa0e60208000004000000004022cb3a7efb1305bc6d08194d7031", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x100) listen(r4, 0x9) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000200)}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, 0x0, 0x0) shutdown(r5, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 4.159521989s ago: executing program 2 (id=2610): sched_setattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x6) 3.918365163s ago: executing program 3 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) 3.888288254s ago: executing program 5 (id=2612): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000006c0)={0x0, @bt={0x2, 0x1, 0x0, 0x0, 0xffffffff, 0x2, 0x5, 0x5, 0xa, 0x10, 0x3, 0x80, 0x0, 0x2d1e, 0x11, 0x22, {0x3, 0x80000000}, 0x0, 0x3}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.346904353s ago: executing program 2 (id=2613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd4c, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd3e, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd2a, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 2.281177753s ago: executing program 3 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030003310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000800) gettid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000002050005000a000000050001000700ff0005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008001240000000"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@mcast2, 0x2a}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x44}, 0x1, 0xba01}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.215865879s ago: executing program 7 (id=2615): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c40), 0x4924924924925b2, 0x0) 1.980105276s ago: executing program 2 (id=2616): sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x7, 0x7, 0x1, 0x17, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}, @TCA_GRED_STAB={0x104, 0x2, "07131a8338f71303b029053baf1c5d5e8e3b4d2f8d1e3d630542c096f63a725b0ddbb277fca687f8c047c2fabd5a4f0869e2b1b2e9929afe5b3a4a66220ae0768e40965e25ed74bd695628e221ee284fd939b35806efee31c9c5f344c4ff16659ddb8b67740c168c60ff9eb629a157edeba6cbc627557012e171afc81942d21d59286d23e7f7e04f4137c9320d21bc2533a790ab26f63b662c686470e8a07d407a5d10a06962c259673b03f4f81d4012d447653edc6a96fc8711c9ec1147f118563838c23b9d3877c1659ccf45ee60a10c8dc5d80ed8d09e86071dc6bfa2a32239d136e8779e72c1d9a9200e8cfd626b0ca445d1420718178e8d8fb65cacdb79"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.945621444s ago: executing program 5 (id=2617): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370426bd70000000000000000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.791841736s ago: executing program 3 (id=2618): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.611484866s ago: executing program 2 (id=2619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000180)='proc\x00', 0x1) 1.524984272s ago: executing program 5 (id=2620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x800000000, 0x0, 0x0, 0x10, 0x1}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) 1.338374304s ago: executing program 0 (id=2621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 0s ago: executing program 5 (id=2622): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x3, 0x4002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r4}, 0x20) close(0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0xfffd, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "1204000000f2aa1d1e0d494f6c4903de8a08e2328997b8ac46b04400", "a04027fa124125c63a5b0e4412c6ab5c", {"4186dbba08364dba146d6e8dda52d97b", "ff027abe261f352c54d03f15919eb36c"}}}}}}}, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000002000)=""/94, 0x5e}], 0x2) kernel console output (not intermixed with test programs): upported read-only [ 493.253230][ T9363] ufs: ufs_fill_super(): bad magic number [ 495.072579][ T6291] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 495.236178][ T6291] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 495.247941][ T7723] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 495.258914][ T6291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 495.301718][ T6291] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 495.397316][ T6291] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 495.423107][ T7723] usb 3-1: Using ep0 maxpacket: 32 [ 495.465872][ T7723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 495.494916][ T6291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.566222][ T7723] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 495.582257][ T6291] usb 1-1: Product: syz [ 495.594004][ T7723] usb 3-1: config 14 has no interface number 0 [ 495.606998][ T6291] usb 1-1: Manufacturer: syz [ 495.619089][ T6291] usb 1-1: SerialNumber: syz [ 495.627642][ T7723] usb 3-1: config 14 interface 115 has no altsetting 0 [ 495.671740][ T6291] usb 1-1: config 0 descriptor?? [ 495.684862][ T7723] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 495.701604][ T9375] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 495.753768][ T7723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.829616][ T7723] usb 3-1: Product: syz [ 495.851304][ T7723] usb 3-1: Manufacturer: syz [ 495.891936][ T7723] usb 3-1: SerialNumber: syz [ 496.873962][ T9384] netlink: 'syz.3.977': attribute type 12 has an invalid length. [ 499.013914][ T31] audit: type=1804 audit(1768407411.161:265): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.982" name="file0" dev="tmpfs" ino=1143 res=1 errno=0 [ 500.670178][ T7723] xr_serial 3-1:14.115: More than one union descriptor, skipping ... [ 500.722426][ T7723] usb 3-1: USB disconnect, device number 15 [ 500.789428][ T6291] usb 1-1: USB disconnect, device number 26 [ 500.997642][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.387914][ T6291] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 502.582268][ T6291] usb 3-1: Using ep0 maxpacket: 32 [ 502.657841][ T6291] usb 3-1: unable to get BOS descriptor or descriptor too short [ 502.845546][ T6291] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 502.906377][ T6291] usb 3-1: config 14 has no interface number 0 [ 502.942770][ T6291] usb 3-1: config 14 interface 115 has no altsetting 0 [ 503.005727][ T6291] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 503.113269][ T6291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.167724][ T6291] usb 3-1: Product: syz [ 503.171937][ T6291] usb 3-1: Manufacturer: syz [ 503.252319][ T6291] usb 3-1: SerialNumber: syz [ 503.287017][ T9433] fuse: Unknown parameter 'user_i00000000000000000000' [ 503.451837][ T9436] loop6: detected capacity change from 0 to 128 [ 503.668547][ T9436] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 503.707392][ T9436] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.429414][ T8107] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.800956][ T9449] blktrace: Concurrent blktraces are not allowed on loop4 [ 507.211447][ T9460] ufs: You didn't specify the type of your ufs filesystem [ 507.211447][ T9460] [ 507.211447][ T9460] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 507.211447][ T9460] [ 507.211447][ T9460] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 507.243525][ T9460] ufs: ufstype=old is supported read-only [ 507.249696][ T9460] ufs: ufs_fill_super(): bad magic number [ 507.761070][ T6291] xr_serial 3-1:14.115: More than one union descriptor, skipping ... [ 507.805159][ T6291] usb 3-1: USB disconnect, device number 16 [ 508.472835][ T9472] siw: device registration error -23 [ 510.018382][ T9489] loop6: detected capacity change from 0 to 128 [ 511.087052][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.141484][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.271639][ T9489] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 512.344466][ T9489] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.737012][ T8107] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 513.316360][ T9500] blktrace: Concurrent blktraces are not allowed on loop4 [ 515.205976][ T9519] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 516.533967][ T9525] siw: device registration error -23 [ 517.792200][ T9536] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1023'. [ 518.325679][ T9543] veth3: entered allmulticast mode [ 518.655063][ T9548] set match dimension is over the limit! [ 518.953571][ T5829] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 519.002979][ T9554] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 519.009515][ T9554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.094075][ T9554] vhci_hcd vhci_hcd.0: Device attached [ 519.332192][ T790] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 519.339677][ T6083] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 519.512123][ T6083] usb 1-1: Using ep0 maxpacket: 16 [ 519.523229][ T6083] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 519.762876][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1033'. [ 520.075201][ T6083] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 520.122546][ T6083] usb 1-1: can't read configurations, error -61 [ 520.383435][ T6083] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 520.457622][ T9581] lo speed is unknown, defaulting to 1000 [ 520.593711][ T6083] usb 1-1: Using ep0 maxpacket: 16 [ 520.599735][ T6083] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 520.621816][ T6083] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 520.636589][ T6083] usb 1-1: can't read configurations, error -61 [ 520.656140][ T6083] usb usb1-port1: attempt power cycle [ 521.002144][ T6083] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 521.054095][ T6083] usb 1-1: Using ep0 maxpacket: 16 [ 521.065210][ T6083] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 521.095266][ T6083] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 521.103554][ T6083] usb 1-1: can't read configurations, error -61 [ 521.300960][ T6083] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 521.344254][ T6083] usb 1-1: Using ep0 maxpacket: 16 [ 521.354384][ T6083] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 521.395895][ T6083] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 521.406018][ T6083] usb 1-1: can't read configurations, error -61 [ 521.430354][ T6083] usb usb1-port1: unable to enumerate USB device [ 522.073689][ T9555] vhci_hcd: connection reset by peer [ 522.124599][ T6053] vhci_hcd vhci_hcd.0: stop threads [ 522.139436][ T6053] vhci_hcd vhci_hcd.0: release socket [ 522.202477][ T6053] vhci_hcd vhci_hcd.0: disconnect device [ 523.974301][ T9606] IPv6: NLM_F_CREATE should be specified when creating new route [ 523.989580][ T9606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.997257][ T9606] IPv6: NLM_F_CREATE should be set when creating new route [ 524.492206][ T790] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 525.492250][ T5829] Bluetooth: hci6: unexpected event for opcode 0x0c25 [ 526.579009][ T9622] lo speed is unknown, defaulting to 1000 [ 528.559824][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.628484][ T9634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.527824][ T3467] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.547469][ T9642] loop2: detected capacity change from 0 to 1024 [ 529.580906][ T3467] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.625989][ T3467] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.807792][ T3467] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.656808][ T3467] hfsplus: b-tree write err: -5, ino 4 [ 530.742832][ T6306] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 530.982150][ T6306] usb 4-1: Using ep0 maxpacket: 8 [ 530.997529][ T6306] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 531.016904][ T6306] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.047996][ T6306] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.086411][ T6306] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.150784][ T6306] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.198776][ T6306] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 531.210015][ T31] audit: type=1804 audit(1768407443.351:266): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1058" name="/newroot/161/file0" dev="tmpfs" ino=860 res=1 errno=0 [ 531.228764][ T6306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.497361][ T6306] usb 4-1: usb_control_msg returned -32 [ 531.536099][ T6306] usbtmc 4-1:16.0: can't read capabilities [ 531.777644][ T9664] set match dimension is over the limit! [ 532.073047][ T9674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1061'. [ 533.895530][ T790] usb 4-1: USB disconnect, device number 22 [ 538.218273][ T5829] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 538.612128][ T7723] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 538.762204][ T7723] usb 3-1: Using ep0 maxpacket: 8 [ 538.770393][ T7723] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 538.807582][ T7723] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.852455][ T7723] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.877331][ T7723] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.914028][ T7723] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.926161][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1082'. [ 538.957438][ T7723] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.978920][ T7723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.082146][ T790] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 539.212373][ T7723] usb 3-1: usb_control_msg returned -32 [ 539.218844][ T7723] usbtmc 3-1:16.0: can't read capabilities [ 539.269653][ T790] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 539.296297][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.327076][ T790] usb 4-1: Product: syz [ 539.335661][ T790] usb 4-1: Manufacturer: syz [ 539.351933][ T790] usb 4-1: SerialNumber: syz [ 539.401675][ T790] usb 4-1: config 0 descriptor?? [ 539.641525][ T790] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 540.187305][ T9751] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1085'. [ 540.784445][ T31] audit: type=1804 audit(1768407452.931:267): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1086" name="file0" dev="tmpfs" ino=1118 res=1 errno=0 [ 540.921549][ T790] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 540.961466][ T790] usb 4-1: USB disconnect, device number 23 [ 541.374261][ T6083] usb 3-1: USB disconnect, device number 17 [ 542.728294][ T9774] binder_alloc: binder_alloc_mmap_handler: 9773 200000bdf000-200000be1000 already mapped failed -16 [ 542.732228][ T790] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 542.930634][ T9780] netlink: 'syz.2.1098': attribute type 4 has an invalid length. [ 543.024749][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 543.056035][ T790] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 543.079998][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.130734][ T790] usb 4-1: config 0 descriptor?? [ 543.159787][ T9770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 543.272155][ T5928] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 543.452145][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 543.485067][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 543.494765][ T5928] usb 3-1: can't read configurations, error -61 [ 543.503062][ T5894] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 543.594099][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 543.602429][ T790] usbhid 4-1:0.0: can't add hid device: -71 [ 543.610963][ T790] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 543.643601][ T5928] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 543.662738][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 543.672523][ T5894] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 543.680147][ T790] usb 4-1: USB disconnect, device number 24 [ 543.680790][ T5894] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.717757][ T5894] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.728590][ T5894] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.739207][ T5894] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.757751][ T5894] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 543.770304][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.872252][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 543.895452][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 543.903534][ T5928] usb 3-1: can't read configurations, error -61 [ 543.911933][ T5928] usb usb3-port1: attempt power cycle [ 543.989500][ T5894] usb 1-1: usb_control_msg returned -32 [ 543.995946][ T5894] usbtmc 1-1:16.0: can't read capabilities [ 544.262660][ T5928] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 544.409733][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 544.448024][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 544.476052][ T5928] usb 3-1: can't read configurations, error -61 [ 545.060231][ T5928] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 545.124880][ T9811] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1109'. [ 545.632552][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 545.681639][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 545.730952][ T5928] usb 3-1: can't read configurations, error -61 [ 545.893421][ T5928] usb usb3-port1: unable to enumerate USB device [ 546.244075][ T6083] usb 1-1: USB disconnect, device number 31 [ 546.270275][ T9817] loop6: detected capacity change from 0 to 128 [ 546.350248][ T9817] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 546.415347][ T9817] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.014096][ T8107] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 548.782955][ T6083] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 548.952522][ T6083] usb 4-1: Using ep0 maxpacket: 8 [ 548.983057][ T6083] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 548.991204][ T6083] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 549.059737][ T6083] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 549.212784][ T6083] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 549.262119][ T6083] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 549.321139][ T6083] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.352184][ T6083] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 549.373938][ T6083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.418435][ T6083] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 549.452652][ T7723] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 549.649326][ T5894] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 549.661671][ T7723] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 549.680584][ T7723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.694394][ T7723] usb 7-1: Product: syz [ 549.699917][ T7723] usb 7-1: Manufacturer: syz [ 549.707696][ T7723] usb 7-1: SerialNumber: syz [ 549.732171][ T7723] usb 7-1: config 0 descriptor?? [ 549.825338][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 549.851014][ T5894] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 549.870365][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.893747][ T5894] usb 3-1: config 0 descriptor?? [ 549.902814][ T9856] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 549.961807][ T7723] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 550.404321][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 550.404632][ T6083] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 550.411973][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 550.508668][ T5894] usb 3-1: USB disconnect, device number 22 [ 550.624390][ T6083] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 550.636238][ T6083] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 550.665639][ T6083] usb 1-1: config 0 interface 0 has no altsetting 0 [ 550.698351][ T6083] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 550.713303][ T6083] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 550.731546][ T6083] usb 1-1: Product: syz [ 550.750776][ T6083] usb 1-1: Manufacturer: syz [ 550.761299][ T6083] usb 1-1: SerialNumber: syz [ 550.787085][ T6083] usb 1-1: config 0 descriptor?? [ 550.804033][ T6083] usb 1-1: selecting invalid altsetting 0 [ 551.419319][ T7723] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 552.167346][ T7723] usb 7-1: USB disconnect, device number 4 [ 552.189251][ T9889] veth0: entered promiscuous mode [ 552.228176][ T24] usb 4-1: USB disconnect, device number 25 [ 552.292143][ T9889] batadv_slave_1: entered promiscuous mode [ 552.336842][ T9889] batadv_slave_1: left promiscuous mode [ 552.358640][ T9889] veth0: left promiscuous mode [ 553.880220][ T24] usb 1-1: USB disconnect, device number 32 [ 554.804338][ T9912] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1141'. [ 554.827914][ T9912] netlink: 'syz.6.1141': attribute type 10 has an invalid length. [ 554.939658][ T9912] syz_tun: entered promiscuous mode [ 555.045371][ T9912] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 555.702157][ T6083] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 555.862208][ T6083] usb 7-1: Using ep0 maxpacket: 8 [ 555.869608][ T6083] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 556.072202][ T6083] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.134611][ T6083] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.162182][ T6083] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 556.213076][ T6083] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.235776][ T6083] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 556.251619][ T6083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.489135][ T6083] usb 7-1: usb_control_msg returned -32 [ 556.510630][ T6083] usbtmc 7-1:16.0: can't read capabilities [ 558.472995][ T24] usb 7-1: USB disconnect, device number 5 [ 559.099102][ T9953] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1155'. [ 559.152210][ T5901] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 559.180796][ T9953] netlink: 'syz.6.1155': attribute type 10 has an invalid length. [ 559.347362][ T5901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 559.356716][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.367855][ T5901] usb 1-1: Product: syz [ 559.375747][ T5901] usb 1-1: Manufacturer: syz [ 559.382362][ T5928] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 559.392119][ T5901] usb 1-1: SerialNumber: syz [ 559.407973][ T5901] usb 1-1: config 0 descriptor?? [ 559.574136][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 559.609645][ T5928] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 559.652574][ T5901] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 559.680603][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.720644][ T5928] usb 4-1: config 0 descriptor?? [ 559.752392][ T9951] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 560.206668][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 560.229394][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 560.232188][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 560.253650][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 560.304098][ T5928] usb 4-1: USB disconnect, device number 26 [ 560.888252][ T5901] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 561.709147][ T5901] usb 1-1: USB disconnect, device number 33 [ 562.994420][ T9983] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1167'. [ 566.226680][T10006] fuse: Unknown parameter 'fd0x0000000000000003' [ 567.162191][ T5834] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 567.352115][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 567.374422][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 567.401940][ T5834] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 567.457928][ T5834] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.468925][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.477324][ T5834] usb 4-1: Product: syz [ 567.496250][ T5834] usb 4-1: Manufacturer: syz [ 567.500998][ T5834] usb 4-1: SerialNumber: syz [ 568.310914][ T5834] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 568.353539][ T5834] usb 4-1: found format II with max.bitrate = 113, frame size=6 [ 568.384577][ T5834] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 568.492823][ T5834] usb 4-1: USB disconnect, device number 27 [ 570.997640][T10061] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 571.004201][T10061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 571.047030][T10061] vhci_hcd vhci_hcd.0: Device attached [ 571.292505][ T5901] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 571.332434][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 571.872234][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 571.882176][ T5928] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 571.932842][ T5928] usb 4-1: config 0 has no interfaces? [ 571.946718][ T5928] usb 4-1: config 0 has no interfaces? [ 572.003481][ T5928] usb 4-1: config 0 has no interfaces? [ 572.010003][ T5928] usb 4-1: config 0 has no interfaces? [ 572.042933][ T5928] usb 4-1: config 0 has no interfaces? [ 572.058653][ T5928] usb 4-1: config 0 has no interfaces? [ 572.083496][ T5928] usb 4-1: config 0 has no interfaces? [ 572.092698][ T5928] usb 4-1: config 0 has no interfaces? [ 572.118838][ T5928] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 572.152116][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 572.160715][ T5928] usb 4-1: Product: syz [ 572.192184][ T5928] usb 4-1: Manufacturer: syz [ 572.196809][ T5928] usb 4-1: SerialNumber: syz [ 572.235246][ T5928] usb 4-1: config 0 descriptor?? [ 572.458571][ T5928] usb 4-1: USB disconnect, device number 28 [ 572.475308][T10062] vhci_hcd: connection reset by peer [ 572.495568][ T3501] vhci_hcd vhci_hcd.3: stop threads [ 572.516727][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.525654][ T3501] vhci_hcd vhci_hcd.3: release socket [ 572.532362][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.553630][ T3501] vhci_hcd vhci_hcd.3: disconnect device [ 572.630288][T10082] lo speed is unknown, defaulting to 1000 [ 573.765277][T10096] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1197'. [ 574.272181][ T5834] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 574.433210][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 574.444342][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 574.455626][ T5834] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 574.472919][ T5834] usb 3-1: config 14 has no interface number 0 [ 574.494312][ T5834] usb 3-1: config 14 interface 115 has no altsetting 0 [ 574.529312][ T5834] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 574.538678][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.576183][ T5834] usb 3-1: Product: syz [ 574.584181][ T5834] usb 3-1: Manufacturer: syz [ 574.619099][ T5834] usb 3-1: SerialNumber: syz [ 575.562400][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1200'. [ 576.413856][ T5901] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 578.586792][T10126] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 578.593361][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 578.634815][T10126] vhci_hcd vhci_hcd.0: Device attached [ 578.872747][ T7723] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 578.932253][ T6083] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 579.102237][ T6083] usb 1-1: Using ep0 maxpacket: 16 [ 579.114513][ T6083] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 579.176361][ T6083] usb 1-1: config 0 has no interfaces? [ 579.208365][ T6083] usb 1-1: config 0 has no interfaces? [ 579.223839][ T6083] usb 1-1: config 0 has no interfaces? [ 579.250707][ T6083] usb 1-1: config 0 has no interfaces? [ 579.263117][ T5834] xr_serial 3-1:14.115: More than one union descriptor, skipping ... [ 579.273687][ T6083] usb 1-1: config 0 has no interfaces? [ 579.284517][ T6083] usb 1-1: config 0 has no interfaces? [ 579.292734][ T6083] usb 1-1: config 0 has no interfaces? [ 579.315415][ T6083] usb 1-1: config 0 has no interfaces? [ 579.324607][ T5834] usb 3-1: USB disconnect, device number 23 [ 579.348421][ T6083] usb 1-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 579.384382][ T6083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 579.403104][ T6083] usb 1-1: Product: syz [ 579.417848][ T6083] usb 1-1: Manufacturer: syz [ 579.427919][ T6083] usb 1-1: SerialNumber: syz [ 579.444875][ T6083] usb 1-1: config 0 descriptor?? [ 579.659453][ T5834] usb 1-1: USB disconnect, device number 34 [ 579.667017][T10129] vhci_hcd: connection reset by peer [ 579.686530][ T1095] vhci_hcd vhci_hcd.0: stop threads [ 579.712190][ T1095] vhci_hcd vhci_hcd.0: release socket [ 579.747070][ T1095] vhci_hcd vhci_hcd.0: disconnect device [ 579.813840][ T31] audit: type=1804 audit(1768407491.961:268): pid=10143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1213" name="file0" dev="tmpfs" ino=1387 res=1 errno=0 [ 580.237528][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1214'. [ 581.000264][T10155] lo speed is unknown, defaulting to 1000 [ 583.144617][ T5894] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 584.052532][ T7723] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 584.356087][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 584.759554][ T5894] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 584.892367][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.937158][T10190] loop3: detected capacity change from 0 to 128 [ 585.247142][T10190] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 585.266127][T10190] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.805809][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 585.838077][ T5894] usb 7-1: config 0 descriptor?? [ 586.081575][ T31] audit: type=1804 audit(1768407498.221:269): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1229" name="/newroot/169/file0" dev="tmpfs" ino=898 res=1 errno=0 [ 586.228094][ T5894] usb 7-1: can't set config #0, error -71 [ 586.342361][ T5894] usb 7-1: USB disconnect, device number 6 [ 588.471661][T10216] lo speed is unknown, defaulting to 1000 [ 592.081494][ T5834] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 592.174490][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 592.284784][ T5834] usb 7-1: Using ep0 maxpacket: 32 [ 592.305267][ T5834] usb 7-1: unable to get BOS descriptor or descriptor too short [ 592.315693][ T5834] usb 7-1: config 14 has an invalid interface number: 115 but max is 0 [ 592.325413][ T5834] usb 7-1: config 14 has no interface number 0 [ 592.344450][T10264] netlink: 'syz.2.1247': attribute type 1 has an invalid length. [ 592.401609][ T5834] usb 7-1: config 14 interface 115 has no altsetting 0 [ 592.409617][T10264] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1247'. [ 592.530161][ T5834] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 592.542914][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.551662][ T5834] usb 7-1: Product: syz [ 592.576477][ T5834] usb 7-1: Manufacturer: syz [ 592.595177][ T5834] usb 7-1: SerialNumber: syz [ 593.652964][ T5894] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 593.789050][T10280] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1254'. [ 593.846206][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 593.857756][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 593.891234][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 593.964968][ T5894] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 593.982349][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.014872][ T5894] usb 4-1: Product: syz [ 594.048254][ T5894] usb 4-1: Manufacturer: syz [ 594.069672][ T5894] usb 4-1: SerialNumber: syz [ 594.112328][ T5894] usb 4-1: config 0 descriptor?? [ 594.141358][T10276] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 594.154925][T10276] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 594.197814][ T5894] usb 4-1: ucan: probing device on interface #0 [ 594.874136][ T5894] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 594.985855][ T5894] usb 4-1: USB disconnect, device number 29 [ 596.233919][ T790] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 596.385849][ T5834] xr_serial 7-1:14.115: More than one union descriptor, skipping ... [ 596.436113][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 596.468102][ T790] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 596.503350][ T5834] usb 7-1: USB disconnect, device number 7 [ 596.522134][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.884219][ T790] usb 4-1: config 0 descriptor?? [ 596.896110][T10283] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 597.193770][ T5829] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 597.582761][ T790] usbhid 4-1:0.0: can't add hid device: -71 [ 597.604549][ T790] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 597.678187][ T790] usb 4-1: USB disconnect, device number 30 [ 599.411939][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 599.595830][T10317] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 599.605150][T10317] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1266'. [ 599.871378][T10323] netlink: 'syz.4.1267': attribute type 4 has an invalid length. [ 600.512307][ T5829] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 601.226765][ T5829] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 601.235430][ T5829] Bluetooth: hci0: Injecting HCI hardware error event [ 601.246991][ T5829] Bluetooth: hci0: hardware error 0x00 [ 601.299931][T10332] loop6: detected capacity change from 0 to 256 [ 601.687133][T10323] lo speed is unknown, defaulting to 1000 [ 602.011878][ T5901] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 602.244831][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 602.266157][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 602.280267][ T5901] usb 4-1: config 14 has an invalid interface number: 115 but max is 0 [ 602.332485][ T5901] usb 4-1: config 14 has no interface number 0 [ 602.561825][ T5901] usb 4-1: config 14 interface 115 has no altsetting 0 [ 602.691846][ T5901] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 602.969472][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.090877][ T5901] usb 4-1: Product: syz [ 603.106465][ T5901] usb 4-1: Manufacturer: syz [ 603.123357][ T5901] usb 4-1: SerialNumber: syz [ 603.389459][ T8107] bond0: (slave syz_tun): Releasing backup interface [ 603.549949][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 603.569517][ T5829] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 604.054050][ T6244] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.367218][ T6244] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.696359][ T6244] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.924888][ T6244] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.219097][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1279'. [ 605.936851][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 605.963368][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 605.973051][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 605.993395][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 606.001360][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 606.352440][ T6244] bridge_slave_1: left allmulticast mode [ 606.361421][ T6244] bridge_slave_1: left promiscuous mode [ 607.152390][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.276717][ T6244] bridge_slave_0: left allmulticast mode [ 607.307066][ T6244] bridge_slave_0: left promiscuous mode [ 607.333594][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.692534][ T5845] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 607.701204][ T5845] Bluetooth: hci1: Injecting HCI hardware error event [ 607.711187][ T5845] Bluetooth: hci1: hardware error 0x00 [ 608.112568][ T5829] Bluetooth: hci2: command tx timeout [ 608.215053][ T5901] xr_serial 4-1:14.115: More than one union descriptor, skipping ... [ 608.502952][ T5901] usb 4-1: USB disconnect, device number 31 [ 608.876161][T10380] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 608.882727][T10380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 608.939432][T10380] vhci_hcd vhci_hcd.0: Device attached [ 609.242298][ T5834] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 609.281661][ T6006] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 610.116404][ T5845] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 610.182385][ T5845] Bluetooth: hci2: command tx timeout [ 610.253155][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 610.263354][ T5834] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 610.276217][ T5834] usb 4-1: config 0 has no interfaces? [ 610.287757][ T5834] usb 4-1: config 0 has no interfaces? [ 610.350160][ T5834] usb 4-1: config 0 has no interfaces? [ 610.373241][ T5834] usb 4-1: config 0 has no interfaces? [ 610.426211][ T5834] usb 4-1: config 0 has no interfaces? [ 610.433238][ T5834] usb 4-1: config 0 has no interfaces? [ 610.443321][ T5834] usb 4-1: config 0 has no interfaces? [ 610.455091][ T5834] usb 4-1: config 0 has no interfaces? [ 610.495907][ T5834] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 610.516337][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 610.533380][ T5834] usb 4-1: Product: syz [ 610.557974][ T5834] usb 4-1: Manufacturer: syz [ 610.569991][ T5834] usb 4-1: SerialNumber: syz [ 610.591287][ T5834] usb 4-1: config 0 descriptor?? [ 610.827653][ T5901] usb 4-1: USB disconnect, device number 32 [ 610.843500][T10381] usbip_core: unknown command [ 610.859553][T10381] vhci_hcd: unknown pdu 0 [ 610.876960][T10381] usbip_core: unknown command [ 610.902603][ T6061] vhci_hcd vhci_hcd.3: stop threads [ 610.916067][ T6061] vhci_hcd vhci_hcd.3: release socket [ 610.941487][ T6061] vhci_hcd vhci_hcd.3: disconnect device [ 612.273693][ T5845] Bluetooth: hci2: command tx timeout [ 612.455065][ T6244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.543657][ T6244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.588801][ T6244] bond0 (unregistering): Released all slaves [ 612.745400][T10362] lo speed is unknown, defaulting to 1000 [ 613.211066][ T6244] IPVS: stopping backup sync thread 9519 ... [ 613.480638][T10420] loop0: detected capacity change from 0 to 128 [ 613.494021][T10420] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 613.506981][T10420] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.639479][ T5824] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 614.382241][ T5845] Bluetooth: hci2: command tx timeout [ 614.412294][ T6006] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 614.445168][ T5901] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 615.242122][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 615.286541][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 615.310626][ T5901] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 615.340753][T10445] lo speed is unknown, defaulting to 1000 [ 615.402098][ T5901] usb 3-1: config 14 has no interface number 0 [ 615.429063][ T5901] usb 3-1: config 14 interface 115 has no altsetting 0 [ 615.449771][ T5901] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 615.459226][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.482141][ T5901] usb 3-1: Product: syz [ 615.486317][ T5901] usb 3-1: Manufacturer: syz [ 615.548538][ T5901] usb 3-1: SerialNumber: syz [ 616.192801][T10462] siw: device registration error -23 [ 616.697150][ T6244] hsr_slave_0: left promiscuous mode [ 616.732840][ T6244] hsr_slave_1: left promiscuous mode [ 616.757646][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.781486][ T6244] net_ratelimit: 10 callbacks suppressed [ 616.781507][ T6244] batadv0: mtu less than device minimum [ 616.820490][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.832682][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.844609][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.856429][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.868240][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.880060][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.891862][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.903685][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.915499][ T6244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 617.062165][ T6244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.122352][T10469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1303'. [ 617.568008][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.742019][ T6244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.753662][ T6244] batman_adv: batadv0: Interface deactivated: dummy0 [ 617.760422][ T6244] batman_adv: batadv0: Removing interface: dummy0 [ 617.881350][ T6244] veth1_macvtap: left promiscuous mode [ 617.903263][ T6244] veth0_macvtap: left promiscuous mode [ 617.939418][ T6244] veth1_vlan: left promiscuous mode [ 617.958169][ T6244] veth0_vlan: left promiscuous mode [ 619.039954][ T5901] xr_serial 3-1:14.115: More than one union descriptor, skipping ... [ 619.092702][ T5901] usb 3-1: USB disconnect, device number 24 [ 620.486923][ T6244] team0 (unregistering): Port device team_slave_1 removed [ 620.658211][ T6244] team0 (unregistering): Port device team_slave_0 removed [ 621.601273][T10487] netlink: 'syz.2.1311': attribute type 12 has an invalid length. [ 621.852652][T10362] chnl_net:caif_netlink_parms(): no params data found [ 623.239099][T10475] lo speed is unknown, defaulting to 1000 [ 623.405772][T10515] set match dimension is over the limit! [ 623.510585][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.559355][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.613233][T10362] bridge_slave_0: entered allmulticast mode [ 623.644239][T10362] bridge_slave_0: entered promiscuous mode [ 623.664196][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.673226][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.680686][T10362] bridge_slave_1: entered allmulticast mode [ 623.859303][T10362] bridge_slave_1: entered promiscuous mode [ 624.132844][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.178389][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.377668][T10362] team0: Port device team_slave_0 added [ 624.544820][T10362] team0: Port device team_slave_1 added [ 625.534180][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.541161][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.672145][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.938707][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.952299][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.978528][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.070334][T10362] hsr_slave_0: entered promiscuous mode [ 627.125601][T10362] hsr_slave_1: entered promiscuous mode [ 627.172204][T10362] debugfs: 'hsr0' already exists in 'hsr' [ 627.177960][T10362] Cannot create hsr debugfs directory [ 627.246065][T10553] blktrace: Concurrent blktraces are not allowed on loop4 [ 627.442429][T10556] autofs: Unknown parameter '0x0000000000000000' [ 628.439212][T10561] lo speed is unknown, defaulting to 1000 [ 629.761904][T10362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 629.818523][T10362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 629.940471][T10362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 630.247685][T10362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 631.593307][ T37] Bluetooth: hci6: Frame reassembly failed (-84) [ 631.742887][T10362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.877206][T10362] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.936397][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.943631][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.105777][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.112957][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.351698][T10605] lo speed is unknown, defaulting to 1000 [ 633.622189][ T5829] Bluetooth: hci6: command 0x1003 tx timeout [ 633.628523][ T5845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 633.848611][T10619] autofs: Unknown parameter '0x0000000000000000' [ 633.946903][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.309359][T10629] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 634.620947][T10362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.902217][ T7723] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 636.112158][ T7723] usb 1-1: Using ep0 maxpacket: 32 [ 636.160766][ T7723] usb 1-1: unable to get BOS descriptor or descriptor too short [ 636.203360][ T7723] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 636.236365][ T7723] usb 1-1: config 14 has no interface number 0 [ 636.274324][ T7723] usb 1-1: config 14 interface 115 has no altsetting 0 [ 636.302961][ T7723] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 636.330356][ T7723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.366711][ T7723] usb 1-1: Product: syz [ 636.398984][ T7723] usb 1-1: Manufacturer: syz [ 636.421289][ T7723] usb 1-1: SerialNumber: syz [ 636.563347][T10648] autofs: Unknown parameter '' [ 638.661745][T10667] loop2: detected capacity change from 0 to 128 [ 638.706584][T10667] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 638.740202][T10667] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.752716][T10669] siw: device registration error -23 [ 638.793414][T10362] veth0_vlan: entered promiscuous mode [ 638.824938][T10362] veth1_vlan: entered promiscuous mode [ 638.927773][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 639.084010][T10362] veth0_macvtap: entered promiscuous mode [ 639.163742][T10362] veth1_macvtap: entered promiscuous mode [ 639.345697][T10362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.548561][T10362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.782850][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.824638][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.873161][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.949187][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.305091][ T9473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.345085][ T9473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.558700][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.602658][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.930117][ T7723] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 641.010211][ T7723] usb 1-1: USB disconnect, device number 35 [ 641.209122][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'. [ 643.880275][T10717] blktrace: Concurrent blktraces are not allowed on loop4 [ 644.004968][T10719] lo speed is unknown, defaulting to 1000 [ 645.732376][ T6006] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 645.741405][T10731] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1362'. [ 645.942166][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 645.950625][ T6006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 645.992212][ T6006] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 646.057099][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.084514][ T6006] usb 4-1: Product: syz [ 646.089384][ T6006] usb 4-1: Manufacturer: syz [ 646.099603][ T6006] usb 4-1: SerialNumber: syz [ 646.123336][ T6006] usb 4-1: config 0 descriptor?? [ 646.141137][ T6006] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 646.291819][ T6006] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 647.172880][ T6006] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 648.473283][ T6006] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 648.481609][ T6006] em28xx 4-1:0.0: board has no eeprom [ 648.716097][T10759] loop0: detected capacity change from 0 to 512 [ 648.855196][T10762] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1370'. [ 648.896558][ T6006] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 649.290957][T10759] EXT4-fs error (device loop0): ext4_iget_extra_inode:5072: inode #15: comm syz.0.1369: corrupted in-inode xattr: e_value size too large [ 649.313488][ T6006] em28xx 4-1:0.0: dvb set to bulk mode. [ 649.328414][ T5834] em28xx 4-1:0.0: Binding DVB extension [ 649.339945][T10759] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1369: couldn't read orphan inode 15 (err -117) [ 649.411276][T10759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.816444][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.867992][T10728] em28xx 4-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 649.989905][ T6306] usb 4-1: USB disconnect, device number 33 [ 650.028017][ T6306] em28xx 4-1:0.0: Disconnecting em28xx [ 650.193642][ T5834] em28xx 4-1:0.0: Registering input extension [ 650.215683][ T6306] em28xx 4-1:0.0: Closing input extension [ 651.036439][ T6306] em28xx 4-1:0.0: Freeing device [ 652.565104][ T31] audit: type=1804 audit(1768407564.711:270): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1378" name="file0" dev="tmpfs" ino=1521 res=1 errno=0 [ 657.996395][ T5894] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 658.165739][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 658.772631][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 658.803194][ T5894] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 658.889864][ T5894] usb 1-1: config 14 has no interface number 0 [ 658.914638][ T5894] usb 1-1: config 14 interface 115 has no altsetting 0 [ 659.133770][ T5894] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 659.155114][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.029419][ T5894] usb 1-1: Product: syz [ 660.052139][ T5894] usb 1-1: Manufacturer: syz [ 660.056815][ T5894] usb 1-1: SerialNumber: syz [ 660.131926][ T5894] usb 1-1: can't set config #14, error -71 [ 660.187005][ T5894] usb 1-1: USB disconnect, device number 36 [ 662.934252][T10889] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1397'. [ 670.671021][T10959] loop2: detected capacity change from 0 to 8 [ 670.762572][T10959] SQUASHFS error: Failed to read block 0x71: -5 [ 670.816904][ T31] audit: type=1800 audit(1768407582.961:271): pid=10959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1416" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 671.104028][T10966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1417'. [ 673.879100][T10993] autofs: Unknown parameter '0x0000000000000000' [ 674.053372][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1424'. [ 679.962501][ T6306] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 680.294699][ T6306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 680.372163][ T6306] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 680.410230][ T6306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.460074][ T6306] usb 1-1: config 0 descriptor?? [ 680.704158][T11055] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 682.083563][ T6306] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 683.169085][ T6306] usb 1-1: USB disconnect, device number 37 [ 685.403140][T11082] fido_id[11082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 686.346599][T11096] blktrace: Concurrent blktraces are not allowed on loop4 [ 688.983559][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 689.113031][T11125] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 689.120801][T11125] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1459'. [ 689.702082][T11140] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 690.822459][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 690.992339][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 691.017670][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 691.062989][ T24] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 691.093826][ T24] usb 1-1: config 14 has no interface number 0 [ 691.114734][ T24] usb 1-1: config 14 interface 115 has no altsetting 0 [ 691.146766][ T24] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 691.157215][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.231472][ T24] usb 1-1: Product: syz [ 691.244465][ T24] usb 1-1: Manufacturer: syz [ 691.261365][ T24] usb 1-1: SerialNumber: syz [ 692.562486][ T7723] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 692.752152][ T7723] usb 3-1: Using ep0 maxpacket: 16 [ 692.778309][ T7723] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 692.825256][ T7723] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 692.864417][ T7723] usb 3-1: Product: syz [ 692.868639][ T7723] usb 3-1: Manufacturer: syz [ 692.955121][ T7723] usb 3-1: SerialNumber: syz [ 693.265732][ T7723] usb 3-1: config 0 descriptor?? [ 695.184132][T11177] syz_tun: entered allmulticast mode [ 695.324231][T11177] dvmrp6: entered allmulticast mode [ 695.396886][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.082626][ T7723] usb 3-1: USB disconnect, device number 25 [ 696.741211][ T24] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 698.220406][ T24] usb 1-1: USB disconnect, device number 38 [ 699.992118][ T7723] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 700.332223][ T7723] usb 1-1: Using ep0 maxpacket: 32 [ 700.344535][ T7723] usb 1-1: unable to get BOS descriptor or descriptor too short [ 700.373679][ T7723] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 700.472498][ T7723] usb 1-1: config 14 has no interface number 0 [ 700.509355][ T7723] usb 1-1: config 14 interface 115 has no altsetting 0 [ 700.540378][T11229] dvmrp6: entered allmulticast mode [ 700.799761][ T7723] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 700.902172][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 701.205616][ T7723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.252498][ T7723] usb 1-1: Product: syz [ 701.257368][ T7723] usb 1-1: Manufacturer: syz [ 701.262462][ T7723] usb 1-1: SerialNumber: syz [ 701.453757][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 701.483716][ T24] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 701.516847][ T24] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 701.555888][ T24] usb 4-1: Product: syz [ 701.560090][ T24] usb 4-1: Manufacturer: syz [ 701.584455][ T24] usb 4-1: SerialNumber: syz [ 701.623734][ T24] usb 4-1: config 0 descriptor?? [ 703.695567][ T24] usb 4-1: USB disconnect, device number 34 [ 704.257735][T11241] loop3: detected capacity change from 0 to 4096 [ 704.314513][T11241] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 704.876199][T11246] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 706.080660][ T7723] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 706.210721][ T7723] usb 1-1: USB disconnect, device number 39 [ 706.223163][ T50] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 706.287191][T11241] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 706.341265][T11241] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 706.450061][T11241] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 707.065975][ T60] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 708.710797][T11272] loop0: detected capacity change from 0 to 512 [ 708.754640][T11272] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 708.830576][T11272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.189216][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.349187][T11283] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1503'. [ 709.992104][ T5829] Bluetooth: hci6: command 0x1003 tx timeout [ 709.998492][ T5845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 710.802204][ T6083] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 711.037058][ T6083] usb 1-1: Using ep0 maxpacket: 16 [ 711.135242][ T6083] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 711.151589][ T6083] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 711.184470][ T6083] usb 1-1: Product: syz [ 711.192014][ T6083] usb 1-1: Manufacturer: syz [ 711.212213][ T6083] usb 1-1: SerialNumber: syz [ 711.259000][ T6083] usb 1-1: config 0 descriptor?? [ 713.713031][ T5834] usb 1-1: USB disconnect, device number 40 [ 714.129445][T11316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1512'. [ 716.162215][ T5834] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 717.449313][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 717.472708][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 717.498376][T11345] loop3: detected capacity change from 0 to 64 [ 717.506558][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 717.536136][ T5834] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 717.552289][ T5834] usb 3-1: config 14 has no interface number 0 [ 717.581279][ T5834] usb 3-1: config 14 interface 115 has no altsetting 0 [ 717.624207][ T5834] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 717.637203][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.664396][T11345] syz.3.1523: attempt to access beyond end of device [ 717.664396][T11345] loop3: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 717.702525][ T5834] usb 3-1: Product: syz [ 717.732085][ T5834] usb 3-1: Manufacturer: syz [ 717.742332][ T5834] usb 3-1: SerialNumber: syz [ 717.744980][T11345] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 717.813696][T11345] syz.3.1523: attempt to access beyond end of device [ 717.813696][T11345] loop3: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 717.910556][T11345] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 717.968682][T11345] syz.3.1523: attempt to access beyond end of device [ 717.968682][T11345] loop3: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 718.082301][T11345] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 718.090916][T11345] syz.3.1523: attempt to access beyond end of device [ 718.090916][T11345] loop3: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 718.265961][T11345] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 719.045009][T11345] syz.3.1523: attempt to access beyond end of device [ 719.045009][T11345] loop3: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 719.162632][T11345] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 719.188572][T11345] syz.3.1523: attempt to access beyond end of device [ 719.188572][T11345] loop3: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 719.234769][T11345] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 719.278575][T11345] syz.3.1523: attempt to access beyond end of device [ 719.278575][T11345] loop3: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 719.315557][T11345] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 719.462607][ T5829] Bluetooth: hci6: command 0x1003 tx timeout [ 719.474464][ T5845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 721.436004][ T31] audit: type=1804 audit(1768407633.581:272): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1532" name="file0" dev="tmpfs" ino=1691 res=1 errno=0 [ 722.451241][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1536'. [ 722.946341][ T5834] xr_serial 3-1:14.115: More than one union descriptor, skipping ... [ 725.594732][ T6306] usb 3-1: USB disconnect, device number 26 [ 725.687038][T11397] loop0: detected capacity change from 0 to 128 [ 728.182174][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 728.485516][ T6306] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 728.686384][ T6306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 728.715679][ T6306] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 728.734190][ T6306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.768945][ T6306] usb 1-1: config 0 descriptor?? [ 728.775473][T11423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 729.195946][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1551'. [ 729.276951][ T6306] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 729.464986][ T6306] usb 1-1: USB disconnect, device number 41 [ 729.613189][T11434] fido_id[11434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 735.615827][T11505] loop2: detected capacity change from 0 to 1024 [ 740.139607][ T3467] hfsplus: b-tree write err: -5, ino 4 [ 741.447072][T11541] loop7: detected capacity change from 0 to 2640 [ 741.464965][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.491519][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.553631][T11545] Invalid logical block size (5) [ 741.566618][ T31] audit: type=1326 audit(1768407653.711:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.2.1580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd84998f749 code=0x0 [ 741.592392][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.603810][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.611718][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.620988][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.629243][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.639950][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.660026][ T8167] ldm_validate_partition_table(): Disk read failed. [ 741.676332][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.693168][ T8167] Buffer I/O error on dev loop7, logical block 0, async page read [ 741.705595][ T8167] Dev loop7: unable to read RDB block 0 [ 741.711413][ T8167] loop7: unable to read partition table [ 741.738672][T11541] ldm_validate_partition_table(): Disk read failed. [ 741.747025][T11541] Dev loop7: unable to read RDB block 0 [ 741.752883][T11541] loop7: unable to read partition table [ 741.758874][T11541] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 747.504553][T11590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 748.613111][ T31] audit: type=1804 audit(1768407660.761:274): pid=11594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1599" name="/newroot/224/file0" dev="tmpfs" ino=1190 res=1 errno=0 [ 750.566688][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1606'. [ 750.630766][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1607'. [ 752.318497][T11636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1611'. [ 754.864103][ T31] audit: type=1804 audit(1768407666.851:275): pid=11646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1615" name="/newroot/37/file0" dev="tmpfs" ino=209 res=1 errno=0 [ 756.359997][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1620'. [ 756.827833][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.079842][T11664] blktrace: Concurrent blktraces are not allowed on loop4 [ 757.438329][T11667] netlink: 'syz.7.1624': attribute type 12 has an invalid length. [ 757.693309][T11675] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1623'. [ 760.598243][T11696] afs: Unknown parameter '' [ 760.660113][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1634'. [ 760.824470][T11704] No control pipe specified [ 762.553211][T11718] netlink: 'syz.3.1640': attribute type 4 has an invalid length. [ 762.908966][T11720] siw: device registration error -23 [ 763.389199][T11718] lo speed is unknown, defaulting to 1000 [ 763.652125][ T790] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 763.972122][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 764.074746][ T790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 764.089958][ T790] usb 4-1: can't read configurations, error -61 [ 764.282198][ T790] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 764.530870][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 764.570994][ T790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 764.604088][ T790] usb 4-1: can't read configurations, error -61 [ 764.621675][ T790] usb usb4-port1: attempt power cycle [ 765.827983][ T790] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 769.072152][ T5834] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 769.264826][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 769.274372][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 769.284901][ T5834] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 769.295608][ T5834] usb 3-1: config 14 has no interface number 0 [ 769.301796][ T5834] usb 3-1: config 14 interface 115 has no altsetting 0 [ 769.344894][ T5834] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 769.364560][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.378492][ T5834] usb 3-1: Product: syz [ 769.392158][ T5834] usb 3-1: Manufacturer: syz [ 769.430340][ T5834] usb 3-1: SerialNumber: syz [ 769.618491][ T790] usb 4-1: device descriptor read/8, error -71 [ 773.135737][T11792] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1662'. [ 773.702861][ T5834] xr_serial 3-1:14.115: More than one union descriptor, skipping ... [ 773.769871][ T5834] usb 3-1: USB disconnect, device number 27 [ 773.852597][ T31] audit: type=1804 audit(1768407686.001:276): pid=11801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1666" name="/newroot/270/file0" dev="tmpfs" ino=1423 res=1 errno=0 [ 774.064356][T11808] netlink: 'syz.7.1667': attribute type 4 has an invalid length. [ 774.157983][T11808] lo speed is unknown, defaulting to 1000 [ 774.392424][ T5996] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 774.453168][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'. [ 774.702098][ T5996] usb 4-1: Using ep0 maxpacket: 16 [ 774.787253][ T5996] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 774.819686][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 774.848264][ T5996] usb 4-1: Product: syz [ 774.860393][ T5996] usb 4-1: Manufacturer: syz [ 774.875394][ T5996] usb 4-1: SerialNumber: syz [ 774.904199][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 774.964366][ T5996] usb 4-1: config 0 descriptor?? [ 775.223882][ T5996] usb 4-1: USB disconnect, device number 39 [ 775.584012][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.606082][T11835] loop3: detected capacity change from 0 to 128 [ 776.777449][T11835] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 776.815275][T11835] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.897872][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.053808][T11854] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1678'. [ 781.914479][T11878] netlink: 'syz.5.1685': attribute type 12 has an invalid length. [ 782.090138][T11873] lo speed is unknown, defaulting to 1000 [ 785.345623][T11897] loop0: detected capacity change from 0 to 128 [ 785.495686][T11897] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 785.524812][T11897] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.333077][ T5824] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.682858][T11914] netlink: 'syz.0.1696': attribute type 10 has an invalid length. [ 786.693235][T11914] hsr0: entered promiscuous mode [ 786.713048][T11914] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 786.723977][T11914] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 786.736458][T11914] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 786.763022][T11915] netlink: 'syz.3.1697': attribute type 4 has an invalid length. [ 786.974947][T11915] lo speed is unknown, defaulting to 1000 [ 787.682145][ T790] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 787.963185][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 788.216717][ T790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 788.242336][ T790] usb 4-1: can't read configurations, error -61 [ 788.424591][ T790] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 789.442122][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 789.450531][ T790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 789.459831][ T790] usb 4-1: can't read configurations, error -61 [ 789.479164][ T790] usb usb4-port1: attempt power cycle [ 789.552200][ T5928] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 789.932569][ T790] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 789.966476][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.000819][ T5928] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 790.036216][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.092090][ T5928] usb 1-1: Product: syz [ 790.096337][ T5928] usb 1-1: Manufacturer: syz [ 790.100937][ T5928] usb 1-1: SerialNumber: syz [ 790.158977][ T5928] usb 1-1: config 0 descriptor?? [ 791.630986][ T5928] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 791.813980][T11937] lo speed is unknown, defaulting to 1000 [ 792.215776][ T7242] udevd[7242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.805288][ T6006] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 793.030101][ T6006] usb 3-1: Using ep0 maxpacket: 32 [ 793.089367][ T6006] usb 3-1: unable to get BOS descriptor or descriptor too short [ 793.119519][ T6006] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 793.162159][ T6006] usb 3-1: config 14 has no interface number 0 [ 793.168445][ T6006] usb 3-1: config 14 interface 115 has no altsetting 0 [ 793.496637][ T6006] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 795.631288][ T790] usb 4-1: device descriptor read/8, error -110 [ 795.642487][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.650544][ T6006] usb 3-1: Product: syz [ 795.655477][ T6006] usb 3-1: Manufacturer: syz [ 795.692086][ T6006] usb 3-1: SerialNumber: syz [ 795.912213][ T790] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 796.063409][ T31] audit: type=1804 audit(1768407708.211:277): pid=11964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1711" name="file0" dev="tmpfs" ino=1774 res=1 errno=0 [ 796.211628][ T790] usb 4-1: device not accepting address 43, error -71 [ 796.503037][ T790] usb usb4-port1: unable to enumerate USB device [ 796.858487][ T24] usb 1-1: USB disconnect, device number 42 [ 799.498395][ T31] audit: type=1326 audit(1768407711.641:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11988 comm="syz.4.1720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91df58f749 code=0x0 [ 800.852016][ T6006] usb 3-1: can't set config #14, error -110 [ 801.086985][ T31] audit: type=1804 audit(1768407713.231:279): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1726" name="file0" dev="tmpfs" ino=1795 res=1 errno=0 [ 801.285494][T12010] netlink: 'syz.5.1724': attribute type 4 has an invalid length. [ 801.328513][T12011] loop3: detected capacity change from 0 to 256 [ 801.452964][T12011] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 801.922504][ T5996] usb 3-1: USB disconnect, device number 28 [ 802.235855][T12011] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 803.233500][T12010] lo speed is unknown, defaulting to 1000 [ 806.709262][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1735'. [ 807.413392][T12048] loop3: detected capacity change from 0 to 128 [ 807.543388][T12048] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 807.565329][T12048] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.035451][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 809.409256][ T31] audit: type=1804 audit(1768407721.551:280): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1741" name="file0" dev="tmpfs" ino=1811 res=1 errno=0 [ 809.577091][T12065] loop3: detected capacity change from 0 to 64 [ 809.622137][T12065] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 813.446318][T12088] lo speed is unknown, defaulting to 1000 [ 816.564281][ T790] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 816.902188][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 816.988284][ T790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 816.999374][ T790] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 817.010161][ T790] usb 3-1: config 14 has no interface number 0 [ 817.502097][ T790] usb 3-1: config 14 interface 115 has no altsetting 0 [ 818.274056][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 820.793395][T12149] lo speed is unknown, defaulting to 1000 [ 821.437706][T12156] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1768'. [ 822.067379][ T790] usb 3-1: string descriptor 0 read error: -71 [ 822.111090][ T790] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 822.173833][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.238547][ T790] usb 3-1: can't set config #14, error -71 [ 822.293186][ T790] usb 3-1: USB disconnect, device number 29 [ 830.815485][T12257] binder: 12255:12257 ioctl c0306201 200000000180 returned -14 [ 839.476833][T12332] loop2: detected capacity change from 0 to 1024 [ 839.777709][T12339] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1823'. [ 839.808959][T12332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 840.685107][T12332] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.027770][T12351] siw: device registration error -23 [ 842.981584][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 845.733766][T12382] trusted_key: syz.0.1832 sent an empty control message without MSG_MORE. [ 847.951447][ T31] audit: type=1326 audit(1768407760.081:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12397 comm="syz.4.1838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91df58f749 code=0x0 [ 850.736869][T12418] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1843'. [ 852.368352][ T5834] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 853.312092][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 853.326228][ T5834] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 853.344465][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 853.360597][ T5834] usb 1-1: Product: syz [ 853.508092][ T5834] usb 1-1: Manufacturer: syz [ 853.530341][ T5834] usb 1-1: SerialNumber: syz [ 853.582248][ T5834] usb 1-1: config 0 descriptor?? [ 856.753518][T12450] ip6erspan0: entered promiscuous mode [ 857.637813][T12457] lo speed is unknown, defaulting to 1000 [ 858.873023][T12475] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1858'. [ 859.321742][T12477] netlink: 'syz.5.1856': attribute type 4 has an invalid length. [ 861.036707][T12484] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1859'. [ 861.541340][T12489] lo speed is unknown, defaulting to 1000 [ 861.568628][ T5834] usb 1-1: USB disconnect, device number 43 [ 863.649724][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1863'. [ 864.163085][ T5834] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 864.392104][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 864.452121][ T5834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 864.558191][ T5834] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 864.584592][ T5834] usb 1-1: config 14 has no interface number 0 [ 864.603231][ T5834] usb 1-1: config 14 interface 115 has no altsetting 0 [ 864.683946][ T5834] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 864.702472][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.737567][ T5834] usb 1-1: Product: syz [ 864.765403][ T5834] usb 1-1: Manufacturer: syz [ 864.770028][ T5834] usb 1-1: SerialNumber: syz [ 865.591121][ T31] audit: type=1804 audit(1768407777.731:282): pid=12520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1867" name="/newroot/277/file0" dev="tmpfs" ino=1467 res=1 errno=0 [ 865.961452][T12527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1871'. [ 866.637068][T12533] lo speed is unknown, defaulting to 1000 [ 867.855055][T12544] siw: device registration error -23 [ 869.891165][ T5834] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 871.317357][ T5834] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 871.512136][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 871.732944][ T5834] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 871.750099][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 872.562114][ T5834] usb 3-1: Product: syz [ 872.566329][ T5834] usb 3-1: Manufacturer: syz [ 872.570937][ T5834] usb 3-1: SerialNumber: syz [ 873.256497][ T5834] usb 3-1: config 0 descriptor?? [ 873.361111][ T5834] usb 3-1: can't set config #0, error -71 [ 873.407400][ T5834] usb 3-1: USB disconnect, device number 30 [ 873.469700][T12577] netlink: 'syz.3.1882': attribute type 4 has an invalid length. [ 873.599182][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1883'. [ 873.734461][T12577] lo speed is unknown, defaulting to 1000 [ 873.906197][ T5901] usb 1-1: USB disconnect, device number 44 [ 874.002408][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 874.178505][T12586] loop0: detected capacity change from 0 to 764 [ 874.183223][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 874.232683][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 874.256157][ T24] usb 4-1: can't read configurations, error -61 [ 874.302492][T12586] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 874.554956][T12589] lo speed is unknown, defaulting to 1000 [ 874.634751][T12586] Symlink component flag not implemented [ 874.663034][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 874.673430][T12586] Symlink component flag not implemented (7) [ 874.822121][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 874.836593][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 874.866576][ T24] usb 4-1: can't read configurations, error -61 [ 874.896503][ T24] usb usb4-port1: attempt power cycle [ 875.270838][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 875.547532][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 875.615743][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 875.802907][T12605] loop0: detected capacity change from 0 to 128 [ 875.822273][ T24] usb 4-1: can't read configurations, error -61 [ 876.097017][T12605] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 876.102180][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 876.120135][T12605] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 877.021765][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 877.038438][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 877.188495][ T24] usb 4-1: can't read configurations, error -61 [ 877.235565][ T24] usb usb4-port1: unable to enumerate USB device [ 877.263208][T12605] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 877.406504][T12605] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 877.875177][ T5824] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 879.394750][T12637] netlink: 'syz.2.1901': attribute type 12 has an invalid length. [ 879.612138][ T5996] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 879.716867][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.772167][ T5996] usb 1-1: Using ep0 maxpacket: 32 [ 879.801793][ T5996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 879.830758][ T5996] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 879.872289][ T5996] usb 1-1: config 14 has no interface number 0 [ 879.896111][ T5996] usb 1-1: config 14 interface 115 has no altsetting 0 [ 879.974402][ T5996] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 880.008562][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.045630][ T5996] usb 1-1: Product: syz [ 880.059735][ T5996] usb 1-1: Manufacturer: syz [ 880.096353][ T5996] usb 1-1: SerialNumber: syz [ 885.236770][ T5996] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 885.356996][T12684] lo speed is unknown, defaulting to 1000 [ 887.932683][T12694] binder: 12693:12694 ioctl c0306201 200000000180 returned -14 [ 888.382166][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 888.592341][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 888.949957][ T24] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 888.972493][ T5834] usb 1-1: USB disconnect, device number 45 [ 888.998884][ T24] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 889.043270][ T24] usb 4-1: Product: syz [ 889.073399][ T24] usb 4-1: Manufacturer: syz [ 889.078047][ T24] usb 4-1: SerialNumber: syz [ 889.146897][ T24] usb 4-1: config 0 descriptor?? [ 891.318057][ T5996] usb 4-1: USB disconnect, device number 48 [ 891.562658][T12729] netlink: 'syz.7.1933': attribute type 12 has an invalid length. [ 894.892214][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 895.084098][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 895.117590][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 895.202581][ T24] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 895.294870][ T24] usb 1-1: config 14 has no interface number 0 [ 895.301113][ T24] usb 1-1: config 14 interface 115 has no altsetting 0 [ 895.336724][ T24] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 895.362228][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.580454][ T24] usb 1-1: Product: syz [ 895.592160][ T24] usb 1-1: Manufacturer: syz [ 895.598373][ T24] usb 1-1: SerialNumber: syz [ 895.839005][T12769] siw: device registration error -23 [ 899.000212][T12771] lo speed is unknown, defaulting to 1000 [ 899.252128][ T790] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 899.594721][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 899.654188][ T790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 899.812139][ T790] usb 4-1: can't read configurations, error -61 [ 899.860473][T12789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1953'. [ 899.992154][ T790] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 900.004071][T12791] netlink: 'syz.7.1952': attribute type 12 has an invalid length. [ 901.679923][ T24] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 901.741746][ T31] audit: type=1804 audit(1768407813.881:283): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1960" name="file0" dev="tmpfs" ino=2010 res=1 errno=0 [ 901.843402][ T24] usb 1-1: USB disconnect, device number 46 [ 908.083890][ T5901] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 908.095930][ T5928] IPVS: starting estimator thread 0... [ 908.314265][T12848] IPVS: using max 21 ests per chain, 50400 per kthread [ 908.506969][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 908.730323][ T5901] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 908.739274][ T5901] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 908.751050][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.765170][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 908.774485][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.788584][ T5901] usbtmc 4-1:16.0: bulk endpoints not found [ 910.593190][ T5996] usb 4-1: USB disconnect, device number 51 [ 910.922139][ T5928] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 911.159171][T12875] lo speed is unknown, defaulting to 1000 [ 911.182309][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 911.263511][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 911.551108][ T5928] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 912.319809][ T5928] usb 3-1: config 14 has no interface number 0 [ 912.350951][ T5928] usb 3-1: config 14 interface 115 has no altsetting 0 [ 915.580312][T12897] netlink: 'syz.4.1977': attribute type 10 has an invalid length. [ 915.598899][T12897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1977'. [ 915.706533][T12897] team0: Failed to send options change via netlink (err -105) [ 915.729302][T12897] team0: Port device geneve0 added [ 916.331460][ T5928] usb 3-1: string descriptor 0 read error: -71 [ 916.370489][ T5928] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 916.394672][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.458094][ T5928] usb 3-1: can't set config #14, error -71 [ 916.495884][ T5928] usb 3-1: USB disconnect, device number 31 [ 917.489976][T12915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1990'. [ 920.194791][T12936] siw: device registration error -23 [ 921.359064][T12944] Invalid ELF header magic: != ELF [ 921.454579][T12942] loop7: detected capacity change from 0 to 4096 [ 921.845907][T12954] lo speed is unknown, defaulting to 1000 [ 922.202214][ T6306] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 922.311910][ T5928] IPVS: starting estimator thread 0... [ 922.802605][ T6306] usb 1-1: Using ep0 maxpacket: 16 [ 922.832399][T12965] IPVS: using max 23 ests per chain, 55200 per kthread [ 922.873732][ T6306] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 922.952809][ T6306] usb 1-1: can't read configurations, error -61 [ 923.082741][ T6306] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 923.522139][ T6306] usb 1-1: Using ep0 maxpacket: 16 [ 924.492970][ T6306] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 924.541257][ T6306] usb 1-1: can't read configurations, error -61 [ 924.592579][ T6306] usb usb1-port1: attempt power cycle [ 924.992287][ T6306] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 928.075130][T12991] siw: device registration error -23 [ 929.739027][ T6306] usb 1-1: device descriptor read/8, error -71 [ 930.961686][T12997] loop2: detected capacity change from 0 to 2048 [ 931.123746][T12997] NILFS: invalid option "cp=0": invalid checkpoint number 0 [ 931.322996][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2017'. [ 931.644828][ T6306] IPVS: starting estimator thread 0... [ 931.772220][T13011] IPVS: using max 23 ests per chain, 55200 per kthread [ 936.128175][T13049] lo speed is unknown, defaulting to 1000 [ 936.458911][ T790] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 936.992261][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 937.024917][ T790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 937.052130][ T790] usb 4-1: can't read configurations, error -61 [ 937.312392][ T790] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 937.702581][T13058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2033'. [ 937.792126][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 937.917653][ T790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 937.929559][ T790] usb 4-1: can't read configurations, error -61 [ 937.950616][ T790] usb usb4-port1: attempt power cycle [ 938.215216][T13063] ptrace attach of "./syz-executor exec"[5824] was attempted by " [ 939.047568][ T790] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 941.146630][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 943.845373][ T790] usb 4-1: device descriptor read/8, error -71 [ 944.992992][T13098] netlink: 'syz.7.2044': attribute type 12 has an invalid length. [ 950.358537][T13144] lo speed is unknown, defaulting to 1000 [ 952.996328][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2066'. [ 961.249842][T13224] loop3: detected capacity change from 0 to 128 [ 961.554860][T13224] EXT4-fs (loop3): Test dummy encryption mode enabled [ 962.435812][T13224] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 962.573176][T13224] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 963.638236][T13224] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 965.820525][T13261] netlink: 'syz.5.2089': attribute type 4 has an invalid length. [ 965.868486][T13261] lo speed is unknown, defaulting to 1000 [ 966.043222][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 971.582431][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2103'. [ 977.205812][T13345] loop3: detected capacity change from 0 to 2048 [ 977.293475][T13345] NILFS: invalid option "cp=0": invalid checkpoint number 0 [ 978.409522][T13360] netlink: 'syz.2.2118': attribute type 4 has an invalid length. [ 978.500714][T13360] lo speed is unknown, defaulting to 1000 [ 979.813276][ T6006] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 980.932161][ T6006] usb 3-1: Using ep0 maxpacket: 16 [ 980.984261][ T6006] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 980.991949][ T6006] usb 3-1: can't read configurations, error -61 [ 981.153505][ T6006] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 982.052111][ T6006] usb 3-1: Using ep0 maxpacket: 16 [ 982.742273][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 984.052108][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 986.368720][ T24] usb 1-1: device descriptor read/all, error -71 [ 986.582705][T13403] netlink: 'syz.0.2131': attribute type 10 has an invalid length. [ 986.637933][T13403] dummy0: entered promiscuous mode [ 986.660633][T13403] team0: Failed to send options change via netlink (err -105) [ 986.724790][T13403] team0: Port device dummy0 added [ 986.772551][T13405] netlink: 'syz.0.2131': attribute type 10 has an invalid length. [ 986.835214][T13405] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 987.229507][ T6006] usb 3-1: device descriptor read/all, error -110 [ 987.252888][T13405] dummy0: left promiscuous mode [ 987.263819][ T6006] usb usb3-port1: attempt power cycle [ 987.495965][T13405] team0: Failed to send options change via netlink (err -105) [ 988.052423][T13405] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 988.061895][T13405] team0: Port device dummy0 removed [ 988.215721][T13405] dummy0: entered promiscuous mode [ 988.255141][T13405] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 988.312206][ T6006] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 988.316293][T13413] lo speed is unknown, defaulting to 1000 [ 988.404597][ T6006] usb 3-1: device descriptor read/8, error -32 [ 995.436740][T13474] netlink: 'syz.3.2147': attribute type 4 has an invalid length. [ 995.485116][T13474] lo speed is unknown, defaulting to 1000 [ 996.132247][ T6006] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 996.362176][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 996.385042][ T6006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 996.408286][ T6006] usb 4-1: can't read configurations, error -61 [ 996.562237][ T6006] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 996.792163][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 997.195049][T13487] siw: device registration error -23 [ 997.885211][ T6006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 997.928695][ T6006] usb 4-1: can't read configurations, error -61 [ 997.946597][ T6006] usb usb4-port1: attempt power cycle [ 998.372522][ T6006] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 998.598666][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2153'. [ 1002.752819][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.107969][ T6006] usb 4-1: device descriptor read/8, error -71 [ 1004.564783][T13532] loop2: detected capacity change from 0 to 128 [ 1004.677786][T13532] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1004.813064][T13532] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.543592][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1007.042511][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2170'. [ 1009.536614][T13576] netlink: 'syz.5.2174': attribute type 4 has an invalid length. [ 1009.720992][T13576] lo speed is unknown, defaulting to 1000 [ 1014.844116][T13614] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2188'. [ 1015.078456][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'. [ 1015.432751][T13614] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2188'. [ 1017.122334][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1017.330553][T13638] siw: device registration error -23 [ 1018.123418][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1019.001388][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1019.112184][ T24] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 1019.120451][ T24] usb 1-1: config 14 has no interface number 0 [ 1019.185479][ T24] usb 1-1: config 14 interface 115 has no altsetting 0 [ 1019.188357][T13649] loop7: detected capacity change from 0 to 128 [ 1019.335234][T13649] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1019.763774][T13649] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.334589][T10362] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1022.671589][T13666] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2198'. [ 1024.565571][ T24] usb 1-1: string descriptor 0 read error: -32 [ 1024.571874][ T24] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1025.050201][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.592173][ T24] usb 1-1: can't set config #14, error -32 [ 1025.773237][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2203'. [ 1026.418728][T13691] loop7: detected capacity change from 0 to 128 [ 1026.554011][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2206'. [ 1026.760634][T13694] vlan2: entered promiscuous mode [ 1026.765997][T13694] bond0: entered promiscuous mode [ 1026.771199][T13694] bond_slave_0: entered promiscuous mode [ 1026.782497][T13694] bond_slave_1: entered promiscuous mode [ 1027.305362][ T6306] IPVS: starting estimator thread 0... [ 1027.678206][ T24] usb 1-1: USB disconnect, device number 53 [ 1027.733172][T13698] netlink: 'syz.4.2205': attribute type 4 has an invalid length. [ 1027.761739][T13696] IPVS: using max 23 ests per chain, 55200 per kthread [ 1030.163610][T13698] lo speed is unknown, defaulting to 1000 [ 1030.171612][ T7723] IPVS: starting estimator thread 0... [ 1030.292224][T13718] IPVS: using max 23 ests per chain, 55200 per kthread [ 1030.457806][T13724] loop3: detected capacity change from 0 to 1024 [ 1032.077479][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2218'. [ 1032.087021][T13724] hfsplus: xattr searching failed [ 1032.103331][T13724] hfsplus: xattr searching failed [ 1032.452961][T13724] hfsplus: b-tree write err: -5, ino 3 [ 1033.079095][ T9473] hfsplus: b-tree write err: -5, ino 3 [ 1035.762138][ T6308] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1036.042277][ T6308] usb 3-1: Using ep0 maxpacket: 32 [ 1036.347013][ T6308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1036.527441][ T6308] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 1036.553096][ T6308] usb 3-1: config 14 has no interface number 0 [ 1036.570380][ T6308] usb 3-1: config 14 interface 115 has no altsetting 0 [ 1036.595372][ T6308] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1036.644216][ T6308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.695029][ T6308] usb 3-1: Product: syz [ 1036.719270][ T6308] usb 3-1: Manufacturer: syz [ 1036.739148][ T6308] usb 3-1: SerialNumber: syz [ 1042.052743][ T6308] xr_serial 3-1:14.115: More than one union descriptor, skipping ... [ 1044.329559][T13815] loop7: detected capacity change from 0 to 128 [ 1044.388743][T13815] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1044.404583][T13815] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.493545][T10362] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1045.256214][T13828] netlink: 'syz.7.2239': attribute type 4 has an invalid length. [ 1045.501348][ T7723] usb 3-1: USB disconnect, device number 36 [ 1045.663877][T13828] lo speed is unknown, defaulting to 1000 [ 1047.184342][T13845] loop2: detected capacity change from 0 to 1024 [ 1049.792842][ T4511] hfsplus: b-tree write err: -5, ino 4 [ 1051.241715][T13873] loop3: detected capacity change from 0 to 128 [ 1051.336437][T13873] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1051.413954][T13873] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.005489][T13880] siw: device registration error -23 [ 1052.879809][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1053.230696][T13888] loop0: detected capacity change from 0 to 2048 [ 1053.260661][T13888] NILFS: invalid option "cp=0": invalid checkpoint number 0 [ 1056.374735][T13924] netlink: 'syz.4.2266': attribute type 4 has an invalid length. [ 1056.825089][T13926] loop2: detected capacity change from 0 to 128 [ 1057.048920][T13924] lo speed is unknown, defaulting to 1000 [ 1057.969774][T13926] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1058.237989][T13926] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.442767][T13939] siw: device registration error -23 [ 1059.686671][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1062.220609][T13970] ip6erspan0: entered promiscuous mode [ 1065.432656][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1067.064132][T13991] siw: device registration error -23 [ 1072.654293][T14041] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2302'. [ 1072.697411][T14042] netlink: 'syz.7.2300': attribute type 4 has an invalid length. [ 1072.818825][T14042] lo speed is unknown, defaulting to 1000 [ 1080.974650][T14112] blktrace: Concurrent blktraces are not allowed on loop4 [ 1082.157217][T14121] siw: device registration error -23 [ 1086.879801][T14147] ip6erspan0: entered promiscuous mode [ 1094.141754][T14201] loop3: detected capacity change from 0 to 128 [ 1094.484356][T14201] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1094.500858][T14201] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.864296][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1097.422644][ T7723] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1097.777754][ T7723] usb 4-1: Using ep0 maxpacket: 32 [ 1101.182229][ T6306] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1101.752439][ T6306] usb 1-1: Using ep0 maxpacket: 8 [ 1101.846239][ T6306] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1101.872186][ T6306] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1101.910717][ T6306] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1101.972073][ T6306] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1102.624321][ T6306] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.743769][ T6306] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1103.223271][ T7723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1103.231186][ T6306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.290200][ T6306] usb 1-1: can't set config #16, error -71 [ 1103.339296][ T6306] usb 1-1: USB disconnect, device number 54 [ 1103.364751][ T7723] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 1103.844612][ T7723] usb 4-1: chopping to 0 config(s) [ 1104.022136][ T7723] usb 4-1: can't read configurations, error -32 [ 1104.099924][ T6006] IPVS: starting estimator thread 0... [ 1104.382463][T14280] IPVS: using max 30 ests per chain, 72000 per kthread [ 1104.386517][ T7723] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1105.383961][ T7723] usb 4-1: device descriptor read/64, error -32 [ 1105.497990][ T7723] usb usb4-port1: attempt power cycle [ 1110.454120][T14325] siw: device registration error -23 [ 1111.302194][ T6006] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1111.623713][ T6006] usb 3-1: Using ep0 maxpacket: 8 [ 1112.353648][ T6006] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1112.386962][ T6006] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1112.418870][ T6006] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1112.601700][ T6006] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1112.637859][ T6006] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.752188][ T6006] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1112.770204][ T6006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.239736][ T6006] usb 3-1: can't set config #16, error -71 [ 1113.278234][ T6006] usb 3-1: USB disconnect, device number 37 [ 1125.581785][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.402266][ T790] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1126.792129][ T790] usb 3-1: Using ep0 maxpacket: 8 [ 1126.801309][ T790] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1126.848936][ T790] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1127.122889][ T790] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1127.146432][ T790] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1128.143207][ T790] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.156620][ T790] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1128.195680][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.460758][ T790] usb 3-1: usb_control_msg returned -32 [ 1128.479744][ T790] usbtmc 3-1:16.0: can't read capabilities [ 1130.390082][ T6006] usb 3-1: USB disconnect, device number 38 [ 1151.286811][T14651] loop3: detected capacity change from 0 to 128 [ 1151.379651][T14651] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1151.393667][T14651] ext4 filesystem being mounted at /386/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.430617][T14651] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1152.747695][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1158.972512][ T6306] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1159.291363][ T6306] usb 1-1: Using ep0 maxpacket: 32 [ 1159.915345][ T6306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1160.021978][ T6306] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 1160.182858][ T6306] usb 1-1: config 14 has no interface number 0 [ 1160.232493][ T6306] usb 1-1: config 14 interface 115 has no altsetting 0 [ 1160.309209][ T6306] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1160.620588][ T6306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.650874][ T6306] usb 1-1: Product: syz [ 1160.677954][ T6306] usb 1-1: Manufacturer: syz [ 1160.696635][ T6306] usb 1-1: SerialNumber: syz [ 1162.987683][ T6306] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 1163.028053][ T6306] usb 1-1: USB disconnect, device number 55 [ 1175.721197][ T6308] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1175.982372][ T6308] usb 1-1: Using ep0 maxpacket: 32 [ 1176.048303][ T6308] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1176.074518][ T6308] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 1176.322201][ T6308] usb 1-1: config 14 has no interface number 0 [ 1176.349084][ T6308] usb 1-1: config 14 interface 115 has no altsetting 0 [ 1176.386356][ T6308] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1176.428109][ T6308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.461239][ T6308] usb 1-1: Product: syz [ 1176.479823][ T6308] usb 1-1: Manufacturer: syz [ 1176.488494][ T6308] usb 1-1: SerialNumber: syz [ 1178.948712][ T6308] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 1178.992442][ T6308] usb 1-1: USB disconnect, device number 56 [ 1180.420062][T14876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2524'. [ 1186.032617][ T790] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1186.393668][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 1186.487818][T14921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2539'. [ 1187.260805][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.293187][ T790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1187.363578][ T790] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 1187.371909][ T790] usb 3-1: config 14 has no interface number 0 [ 1187.462983][ T790] usb 3-1: config 14 interface 115 has no altsetting 0 [ 1187.520403][ T790] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1187.566956][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.623295][ T790] usb 3-1: Product: syz [ 1187.632387][ T790] usb 3-1: Manufacturer: syz [ 1187.644497][ T790] usb 3-1: SerialNumber: syz [ 1189.223802][ T5928] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1189.392253][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 1189.418484][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1189.499999][ T5928] usb 4-1: config 14 has an invalid interface number: 115 but max is 0 [ 1189.528663][ T5928] usb 4-1: config 14 has no interface number 0 [ 1189.542122][ T5928] usb 4-1: config 14 interface 115 has no altsetting 0 [ 1189.574527][ T5928] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1189.603362][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.652227][ T5928] usb 4-1: Product: syz [ 1189.656505][ T5928] usb 4-1: Manufacturer: syz [ 1189.661374][ T5928] usb 4-1: SerialNumber: syz [ 1191.272300][ T790] xr_serial 3-1:14.115: More than one union descriptor, skipping ... [ 1191.355077][ T790] usb 3-1: USB disconnect, device number 39 [ 1191.513972][ T5928] xr_serial 4-1:14.115: More than one union descriptor, skipping ... [ 1191.881388][ T5928] usb 4-1: USB disconnect, device number 63 [ 1195.305982][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2554'. [ 1195.818463][T14980] Can't find ip_set type [ 1198.972499][ T5928] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1199.892602][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 1199.936207][ T6308] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1199.975557][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1200.052232][ T5928] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 1200.087692][ T5928] usb 1-1: config 14 has no interface number 0 [ 1200.100874][ T5928] usb 1-1: config 14 interface 115 has no altsetting 0 [ 1200.352096][ T6308] usb 3-1: Using ep0 maxpacket: 32 [ 1200.377353][ T5928] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1200.428992][ T6308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1200.834459][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.884362][ T6308] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 1200.896851][ T5928] usb 1-1: Product: syz [ 1200.936836][ T5928] usb 1-1: Manufacturer: syz [ 1200.942454][ T6308] usb 3-1: config 14 has no interface number 0 [ 1200.962532][ T5928] usb 1-1: SerialNumber: syz [ 1200.968112][ T6308] usb 3-1: config 14 interface 115 has no altsetting 0 [ 1201.449684][T15033] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2570'. [ 1201.903741][T15033] Can't find ip_set type [ 1202.454848][ T5928] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 1202.560506][ T5928] usb 1-1: USB disconnect, device number 57 [ 1202.757237][T15039] loop7: detected capacity change from 0 to 128 [ 1202.828092][T15039] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1202.864793][T15039] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.925004][T15044] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1203.295138][T10362] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1203.844866][T15054] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2575'. [ 1206.113306][ T6308] usb 3-1: string descriptor 0 read error: -32 [ 1206.172889][ T6308] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1206.181985][ T6308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.542484][ T6308] usb 3-1: can't set config #14, error -71 [ 1206.593127][ T6308] usb 3-1: USB disconnect, device number 40 [ 1206.623219][T15072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2583'. [ 1207.125940][T15072] Can't find ip_set type [ 1217.382919][T15026] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1217.552420][T15026] usb 1-1: Using ep0 maxpacket: 32 [ 1217.576144][T15026] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1217.600472][T15026] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 1217.616513][T15026] usb 1-1: config 14 has no interface number 0 [ 1217.634324][T15026] usb 1-1: config 14 interface 115 has no altsetting 0 [ 1217.727765][T15026] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1217.746429][T15026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.807405][T15026] usb 1-1: Product: syz [ 1217.863665][T15026] usb 1-1: Manufacturer: syz [ 1217.868319][T15026] usb 1-1: SerialNumber: syz [ 1223.427300][T15026] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 1223.927061][T15176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2617'. [ 1224.244598][T15026] usb 1-1: USB disconnect, device number 58 [ 1248.356138][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1329.722065][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1329.729144][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5827/1:b..l [ 1329.737892][ C1] rcu: (detected by 1, t=10502 jiffies, g=79969, q=297 ncpus=2) [ 1329.745651][ C1] task:syz-executor state:R running task stack:23256 pid:5827 tgid:5827 ppid:5822 task_flags:0x400140 flags:0x00080000 [ 1329.761635][ C1] Call Trace: [ 1329.764938][ C1] [ 1329.767886][ C1] ? __schedule+0x10b9/0x6150 [ 1329.772610][ C1] __schedule+0x1139/0x6150 [ 1329.777160][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.782854][ C1] ? __pfx___schedule+0x10/0x10 [ 1329.788018][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.793694][ C1] preempt_schedule_irq+0x51/0x90 [ 1329.798782][ C1] irqentry_exit+0x1d8/0x8c0 [ 1329.803417][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1329.809435][ C1] RIP: 0010:dput.part.0+0xc7/0x570 [ 1329.814582][ C1] Code: 45 e8 6d 8a 7c ff e8 58 86 34 09 31 ff 89 c3 89 c6 e8 fd 84 7c ff 85 db 0f 85 9b 02 00 00 e8 50 8a 7c ff 48 c7 c7 a0 96 3c 8e <48> 8d 35 00 00 00 00 e8 8d 94 57 ff e8 38 e0 61 ff 5b 5d 41 5c 41 [ 1329.834229][ C1] RSP: 0018:ffffc900030f7d78 EFLAGS: 00000293 [ 1329.840332][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff824263cb [ 1329.848329][ C1] RDX: ffff8880304d0000 RSI: ffffffff82426120 RDI: ffffffff8e3c96a0 [ 1329.856341][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1329.864341][ C1] R10: 0000000000000001 R11: ffff8880304d0b30 R12: ffff888057b3d9b0 [ 1329.872427][ C1] R13: ffff888055158eb0 R14: ffffc900030f7ea8 R15: 0000000000000009 [ 1329.880439][ C1] ? dput.part.0+0x36b/0x570 [ 1329.885066][ C1] ? dput.part.0+0xc0/0x570 [ 1329.889787][ C1] ? dput.part.0+0xc0/0x570 [ 1329.894321][ C1] dput+0x1f/0x30 [ 1329.897978][ C1] path_umount+0x6f6/0x1220 [ 1329.902524][ C1] ? putname+0xf5/0x1a0 [ 1329.906728][ C1] ? __pfx_path_umount+0x10/0x10 [ 1329.911714][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.917386][ C1] ? putname+0xf5/0x1a0 [ 1329.921686][ C1] __x64_sys_umount+0x16a/0x1a0 [ 1329.926597][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 1329.932014][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 1329.937432][ C1] ? rcu_is_watching+0x12/0xc0 [ 1329.942228][ C1] do_syscall_64+0xcd/0xf80 [ 1329.946763][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.952684][ C1] RIP: 0033:0x7fb921990a77 [ 1329.957128][ C1] RSP: 002b:00007ffd49dfee28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1329.965578][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb921990a77 [ 1329.973579][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd49dfeee0 [ 1329.981583][ C1] RBP: 00007ffd49dfeee0 R08: 0000000000000000 R09: 0000000000000000 [ 1329.989593][ C1] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd49dfff70 [ 1329.997580][ C1] R13: 00007fb921a13d7d R14: 000000000012af2e R15: 00007ffd49dfffb0 [ 1330.005593][ C1] [ 1330.008621][ C1] rcu: rcu_preempt kthread starved for 10339 jiffies! g79969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1330.019840][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1330.029824][ C1] rcu: RCU grace-period kthread stack dump: [ 1330.035720][ C1] task:rcu_preempt state:R running task stack:28248 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1330.049311][ C1] Call Trace: [ 1330.052606][ C1] [ 1330.055567][ C1] ? __schedule+0x10b9/0x6150 [ 1330.060292][ C1] __schedule+0x1139/0x6150 [ 1330.064845][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.070535][ C1] ? __pfx___schedule+0x10/0x10 [ 1330.075437][ C1] ? find_held_lock+0x2b/0x80 [ 1330.080168][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.085843][ C1] schedule+0xe7/0x3a0 [ 1330.089958][ C1] schedule_timeout+0x123/0x290 [ 1330.094845][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1330.100258][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1330.105580][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.111329][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1330.117270][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.122933][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1330.128436][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1330.133257][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.138922][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1330.144243][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1330.149493][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1330.154575][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1330.159509][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1330.165377][ C1] rcu_gp_kthread+0x26d/0x380 [ 1330.170101][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1330.175345][ C1] ? rcu_is_watching+0x12/0xc0 [ 1330.180143][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1330.185394][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.191065][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.196730][ C1] ? __kthread_parkme+0x19e/0x250 [ 1330.201785][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1330.207018][ C1] kthread+0x3c5/0x780 [ 1330.211125][ C1] ? __pfx_kthread+0x10/0x10 [ 1330.215745][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.221440][ C1] ? rcu_is_watching+0x12/0xc0 [ 1330.226237][ C1] ? __pfx_kthread+0x10/0x10 [ 1330.230868][ C1] ret_from_fork+0x983/0xb10 [ 1330.235497][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1330.240641][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1330.246304][ C1] ? __switch_to+0x7af/0x10d0 [ 1330.251022][ C1] ? __pfx_kthread+0x10/0x10 [ 1330.255648][ C1] ret_from_fork_asm+0x1a/0x30 [ 1330.260477][ C1] [ 1330.263505][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1330.269843][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.280384][ C1] Tainted: [L]=SOFTLOCKUP [ 1330.284718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1330.294801][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1330.300492][ C1] Code: b6 60 02 e9 5e 63 99 f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 69 13 00 fb f4 37 63 99 f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1330.320138][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1330.326246][ C1] RAX: 0000000002ba921b RBX: 0000000000000001 RCX: ffffffff8b76f6d9 [ 1330.334255][ C1] RDX: 0000000000000000 RSI: ffffffff8daccd5f RDI: ffffffff8bf2b700 [ 1330.342272][ C1] RBP: ffffed1003b52b70 R08: 0000000000000001 R09: ffffed10170a673d [ 1330.350280][ C1] R10: ffff8880b85339eb R11: ffff88801da966b0 R12: 0000000000000001 [ 1330.358403][ C1] R13: ffff88801da95b80 R14: ffffffff9088f3d0 R15: 0000000000000000 [ 1330.366401][ C1] FS: 0000000000000000(0000) GS:ffff8881249f3000(0000) knlGS:0000000000000000 [ 1330.375369][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1330.382045][ C1] CR2: 00007f03a3f9c428 CR3: 000000007f50e000 CR4: 0000000000350ef0 [ 1330.390043][ C1] Call Trace: [ 1330.393333][ C1] [ 1330.396271][ C1] default_idle+0x13/0x20 [ 1330.400632][ C1] default_idle_call+0x6c/0xb0 [ 1330.405428][ C1] do_idle+0x38d/0x510 [ 1330.409685][ C1] ? __pfx_do_idle+0x10/0x10 [ 1330.414335][ C1] cpu_startup_entry+0x4f/0x60 [ 1330.419151][ C1] start_secondary+0x21d/0x2d0 [ 1330.423951][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1330.429281][ C1] common_startup_64+0x13e/0x148 [ 1330.434290][ C1] [ 1331.196486][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.676109][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 206s! [ 1432.685795][ C0] Showing busy workqueues and worker pools: [ 1432.692102][ C0] workqueue events: flags=0x100 [ 1432.696989][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=19 refcnt=20 [ 1432.697052][ C0] pending: 5*ovs_dp_masks_rebalance, 8*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, vmstat_shepherd, 3*psi_avgs_work [ 1432.697263][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 1432.697325][ C0] pending: 2*psi_avgs_work, 2*ovs_dp_masks_rebalance [ 1432.697408][ C0] workqueue events_highpri: flags=0x110 [ 1432.737800][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1432.737865][ C0] pending: fill_page_cache_func [ 1432.737918][ C0] workqueue events_long: flags=0x100 [ 1432.756118][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=11 refcnt=12 [ 1432.756179][ C0] pending: br_fdb_cleanup, 7*defense_work_handler, 3*br_fdb_cleanup [ 1432.756288][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 1432.756344][ C0] pending: 3*br_fdb_cleanup [ 1432.756387][ C0] workqueue events_unbound: flags=0x2 [ 1432.789783][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1432.789840][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 1432.789920][ C0] workqueue events_unbound: flags=0x2 [ 1432.809935][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=10 refcnt=11 [ 1432.809990][ C0] pending: 3*cfg80211_wiphy_work, 4*nsim_dev_trap_report_work, cfg80211_wiphy_work, crng_reseed, macvlan_process_broadcast [ 1432.810120][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=9 refcnt=10 [ 1432.810168][ C0] pending: 3*cfg80211_wiphy_work, 4*nsim_dev_trap_report_work, 2*idle_cull_fn [ 1432.810265][ C0] workqueue events_power_efficient: flags=0x180 [ 1432.852809][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=11 refcnt=12 [ 1432.852874][ C0] pending: neigh_managed_work, hash_ipportip6_gc, wg_ratelimiter_gc_entries, neigh_periodic_work, do_cache_clean, 6*check_lifetime [ 1432.853085][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=7 refcnt=8 [ 1432.853139][ C0] in-flight: 15026:gc_worker [ 1432.853188][ C0] pending: 3*hash_ipportip6_gc, neigh_managed_work, check_lifetime, neigh_periodic_work [ 1432.853328][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 1432.902986][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1432.903048][ C0] pending: kfree_rcu_monitor [ 1432.903100][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1432.903149][ C0] pending: kfree_rcu_monitor [ 1432.903197][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1432.932110][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1432.932179][ C0] pending: vmstat_update [ 1432.932233][ C0] workqueue writeback: flags=0x4a [ 1432.949819][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1432.949876][ C0] pending: wb_workfn [ 1432.949946][ C0] workqueue iou_exit: flags=0x2 [ 1432.965874][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1432.965927][ C0] in-flight: 50:io_ring_exit_work [ 1432.966024][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 1432.983907][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=10 [ 1432.983969][ C0] pending: addrconf_verify_work [ 1432.984014][ C0] inactive: 6*addrconf_verify_work [ 1432.984055][ C0] workqueue krdsd: flags=0x6000a [ 1433.006645][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=9 [ 1433.006702][ C0] pending: rds_connect_worker [ 1433.006748][ C0] inactive: 5*rds_connect_worker [ 1433.006792][ C0] workqueue bat_events: flags=0x6000a [ 1433.029609][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=51 [ 1433.029667][ C0] pending: batadv_dat_purge [ 1433.029718][ C0] inactive: batadv_dat_purge, 6*batadv_mcast_mla_update, 16*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, 6*batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, 5*batadv_bla_periodic_work, batadv_dat_purge [ 1433.030192][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1433.081046][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 1433.081114][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 1433.081222][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1433.103184][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 1433.103249][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material, wg_packet_handshake_send_worker [ 1433.103353][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1433.127984][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1433.128050][ C0] pending: wg_packet_encrypt_worker [ 1433.128100][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.146104][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.146161][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1433.146246][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.146298][ C0] pending: wg_packet_handshake_send_worker [ 1433.146344][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1433.181040][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1433.181116][ C0] pending: wg_packet_encrypt_worker [ 1433.181173][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1433.199166][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.199225][ C0] pending: wg_packet_handshake_send_worker [ 1433.199285][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.199333][ C0] pending: wg_packet_handshake_send_worker [ 1433.199381][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1433.230615][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.230673][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.230729][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.230779][ C0] pending: wg_queued_expired_zero_key_material [ 1433.230821][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.262474][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.262537][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.262594][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1433.281143][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.281212][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1433.281299][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1433.302654][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 1433.302721][ C0] pending: wg_packet_handshake_send_worker, 2*wg_queued_expired_zero_key_material [ 1433.302811][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.302868][ C0] pending: wg_packet_handshake_send_worker [ 1433.302921][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.337375][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.337441][ C0] pending: wg_packet_handshake_send_worker [ 1433.337501][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.337560][ C0] pending: wg_packet_handshake_send_worker [ 1433.337634][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1433.368834][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.368896][ C0] pending: wg_packet_handshake_send_worker [ 1433.368948][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.368998][ C0] pending: wg_packet_handshake_send_worker [ 1433.369046][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1433.400280][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1433.400343][ C0] pending: 2*wg_packet_handshake_send_worker [ 1433.400410][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1433.418617][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.418684][ C0] pending: wg_packet_handshake_send_worker [ 1433.418741][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1433.418799][ C0] pending: wg_packet_handshake_send_worker [ 1433.418868][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=101s workers=6 idle: 5928 6306 6308 5901 24 [ 1433.419021][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=207s workers=25 idle: 12 1095 6084 37 13 6092 6043 6053 5994 6244 137 6004 4511 6033 232 12670 3448 60 9473 3501 3467 3783 6121 6061 [ 1433.419490][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: