last executing test programs: 20m13.57875652s ago: executing program 4 (id=24): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf"]) bind$tipc(0xffffffffffffffff, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 20m7.278717982s ago: executing program 4 (id=37): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20901, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000011c0)={0x34, 0x33, 0x4, 0x6, 0x40000002, 0x1, 0x2, 0xf4}) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 20m5.361291918s ago: executing program 4 (id=41): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x40078, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) 19m55.379016275s ago: executing program 4 (id=59): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x40078, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf255a00000008000300", @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x9) ioperm(0x0, 0x83, 0x1f) gettid() add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "ae8726ab5188a0f5067e3bd54759496126c86baf237e45829712ce015304b94835019543b83b67ddd04d71425cd7e91c2002d71e8c58555fea7b2b3e9571a19f", 0x23}, 0x48, 0xfffffffffffffffd) 19m47.866613885s ago: executing program 4 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19m46.217544781s ago: executing program 4 (id=73): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0, r0], 0x3, 0x0, 0x0, {0x0, r1}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0x4}}]}, {0x4}, {0x33, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x200008d1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/132, 0x84}], 0x1, 0x2, 0x7fe) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r3, &(0x7f0000000b40)={0x2020}, 0x2040) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0x2) 19m30.974611665s ago: executing program 32 (id=73): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0, r0], 0x3, 0x0, 0x0, {0x0, r1}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0x4}}]}, {0x4}, {0x33, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x200008d1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/132, 0x84}], 0x1, 0x2, 0x7fe) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r3, &(0x7f0000000b40)={0x2020}, 0x2040) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0x2) 19m10.524631584s ago: executing program 2 (id=97): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x6000, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8004}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) 19m9.192386064s ago: executing program 2 (id=100): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20901, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000011c0)={0x34, 0x33, 0x4, 0x6, 0x40000002, 0x1, 0x2, 0xf4}) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000071100010402000000080000240000", @ANYRES32=0x0, @ANYBLOB="00100000421004001800128008000100767469000c00028008000600080000001400030069705f76746930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 19m8.509962164s ago: executing program 2 (id=103): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m3.745839645s ago: executing program 2 (id=113): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf"]) bind$tipc(r1, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 19m2.046033072s ago: executing program 2 (id=117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x4) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) 18m57.486215004s ago: executing program 2 (id=123): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x40078, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf255a00000008000300", @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setrlimit(0x6, &(0x7f0000000180)={0x6, 0x1fffe}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) gettid() add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "ae8726ab5188a0f5067e3bd54759496126c86baf237e45829712ce015304b94835019543b83b67ddd04d71425cd7e91c2002d71e8c58555fea7b2b3e9571a19f", 0x23}, 0x48, 0xfffffffffffffffd) 18m41.86316269s ago: executing program 33 (id=123): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x40078, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf255a00000008000300", @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setrlimit(0x6, &(0x7f0000000180)={0x6, 0x1fffe}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) gettid() add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "ae8726ab5188a0f5067e3bd54759496126c86baf237e45829712ce015304b94835019543b83b67ddd04d71425cd7e91c2002d71e8c58555fea7b2b3e9571a19f", 0x23}, 0x48, 0xfffffffffffffffd) 17m47.767974138s ago: executing program 1 (id=253): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) 17m46.022041771s ago: executing program 1 (id=257): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) 17m44.556416904s ago: executing program 1 (id=261): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17m41.487651863s ago: executing program 1 (id=266): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="ddff00"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000540)=""/55, 0x37) 17m39.950085827s ago: executing program 1 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 17m39.26678763s ago: executing program 1 (id=271): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x104) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x3, 0x0, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) sync() sync() sync() syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 17m23.991413978s ago: executing program 34 (id=271): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x104) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x3, 0x0, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) sync() sync() sync() syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 8m11.148102255s ago: executing program 3 (id=1050): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2000]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 8m10.899046212s ago: executing program 3 (id=1051): bind$alg(0xffffffffffffffff, &(0x7f0000002980)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="820faeb46dcd3592ea915d564c90c20000", 0x11) 8m10.771697337s ago: executing program 3 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x6, 0xb, 0x3, 0x5}, 0x4, 0x11}, [{0xfffffffc, 0xfffffff9, 0x1d47, 0x3, 0x2, 0xe}, {0x8, 0x3, 0x0, 0x7e2, 0x2, 0x3}, {0x9, 0x27c, 0x9fc, 0x7, 0x8, 0x4}, {0x6, 0x80, 0xc, 0x9, 0x3364, 0x8001}, {0x10001, 0x5, 0xf, 0xffffffff, 0x81, 0x13b}, {0x3, 0x14349d83, 0x1000, 0x0, 0x77, 0x7ff}, {0x7, 0xc, 0xff, 0xfffffffe, 0x1, 0x3}, {0xb17, 0x5, 0x5, 0xc2, 0x8, 0x7}, {0x5, 0xffffff62, 0x0, 0x3, 0xf5, 0x2}, {0x4538, 0x4, 0x9406, 0x1, 0x81, 0x197d}, {0xfffffff9, 0x25e0, 0x1, 0x5, 0xd, 0x8}, {0x4, 0x91, 0x10004, 0x200, 0x5}, {0x0, 0xfffff4e1, 0x7fffffff, 0x1, 0x1, 0xe2}, {0x9, 0x10001, 0x7fffffff, 0x4, 0x6, 0x4f}, {0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x9}, {0xffffc92f, 0x7fff, 0x6, 0x2, 0x5, 0x3}, {0x1, 0x6, 0x401, 0xffffa1fe, 0x0, 0x881}, {0x3, 0xf, 0x6b, 0x9bb5, 0x2, 0x8000}, {0xf, 0x3, 0x2, 0x6a41, 0x2, 0x1}, {0x100, 0x1, 0x7, 0x8001, 0x5, 0x8}, {0x7, 0x0, 0x7ff, 0x9, 0x634, 0x9}, {0x2, 0x186, 0x0, 0x9, 0x4, 0x5}, {0x10001, 0x19, 0x6, 0x800, 0x7, 0xfffffffe}, {0x39, 0x8, 0x0, 0x5, 0xc3f, 0x6d}, {0xfffffff7, 0xe3, 0x1, 0xffffffd2, 0x8, 0x944}, {0x0, 0x8000, 0x4, 0xffffffff, 0x0, 0x4}, {0x4, 0x4, 0xea82, 0xd16, 0xe687, 0xb}, {0xb9e, 0x800, 0x3eaa2532, 0x80000001, 0x2, 0x5}, {0x0, 0x4, 0x3, 0xa9, 0x2, 0x23f3}, {0x1f, 0x47, 0xfffffff7, 0x4, 0x6, 0x8}, {0x3, 0xb01, 0x26, 0x10000, 0x4b, 0x3}, {0x6, 0x9, 0xfffffffc, 0x4, 0x2, 0x1}, {0x668, 0x6, 0x10000, 0x10001, 0xd66e, 0x4}, {0x0, 0xf, 0x0, 0x1ff, 0xcb, 0xffff8001}, {0x4, 0x2, 0xb853, 0x9}, {0x9, 0x5, 0xa, 0x8000, 0x7, 0x1a}, {0x800, 0x4, 0x80, 0x0, 0x4, 0xa}, {0x1, 0x0, 0x400, 0x39, 0x40, 0xffff}, {0xe, 0xa8, 0x7fffffff, 0x6, 0x7, 0x6}, {0x10, 0x10, 0xfffffffc, 0x3, 0x0, 0x80}, {0xc, 0x8001, 0x6cbf, 0x2, 0x7fffffff, 0xfffffffc}, {0x5, 0x80000000, 0x8, 0x5, 0x10, 0x200}, {0x800, 0x8, 0x3, 0x8001, 0x81, 0x2}, {0x8, 0xe25, 0x8, 0xffff0001, 0x9, 0xa}, {0x3, 0x8, 0x7, 0x9, 0x4, 0x24}, {0xcd85, 0xb, 0x218a, 0x4, 0x5, 0x1}, {0x200, 0x2, 0x97e, 0x1, 0xa, 0xd814}, {0x1, 0x3ff, 0x2d2c, 0x2, 0x8, 0x11898e13}, {0x6, 0x2, 0x8000, 0x9, 0x6, 0x2}, {0x80f, 0x852, 0xc66, 0x7, 0x6, 0x3}, {0x2, 0x9, 0xfffffffa, 0x5, 0x4, 0x2}, {0x3, 0xb, 0x1, 0x9, 0x3dbc0000, 0x200}, {0xfffffffe, 0xc, 0x5b, 0x5, 0x5, 0x2}, {0x9, 0x5, 0x8, 0xffff, 0x7f3b, 0x80}, {0x3, 0x5, 0x8, 0xf96, 0xfe0, 0x9}, {0x10001, 0x4, 0xf, 0x1, 0x401, 0x8}, {0xfffffff5, 0x7ff, 0xffff, 0x8000, 0x7, 0x8}, {0x0, 0xffe00000, 0x9, 0x2, 0xd91, 0x7}, {0x5, 0x2, 0x7fffffff, 0x0, 0xfffffff8, 0xfff}, {0x400, 0x9, 0x6, 0x5, 0x3d63, 0x2}, {0xb6f, 0x9, 0x7fff, 0x48bc, 0x2, 0x7ff}, {0x0, 0x5, 0x2, 0x8, 0x85, 0x10}, {0xff, 0x5, 0x0, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x200, 0x9, 0x5, 0x3}, {0x9, 0x40, 0x18d, 0x7, 0x0, 0x3}, {0x5, 0x7ff80000, 0xffffffff, 0xd, 0x80000000, 0x3}, {0x80000001, 0x81, 0x7a82, 0x0, 0x3, 0x4}, {0x1000, 0x298edb52, 0x8, 0x6cd, 0xfffffff8, 0xeecf}, {0x5, 0x2, 0x6, 0x3ff, 0x8, 0x10}, {0x4, 0x9, 0x7, 0x1, 0x7, 0x1}, {0x80000001, 0xffffff80, 0x7ff, 0x9, 0x9, 0x6}, {0x3, 0x8, 0x7, 0xb2d, 0x8, 0x85}, {0xb3b, 0x9fee, 0xbe1, 0xb1a0, 0x9, 0x100}, {0x0, 0x5b, 0x6fc, 0x9, 0x7, 0x41}, {0x5, 0x7, 0x3, 0x3, 0x0, 0x10001}, {0x8, 0x84, 0x3, 0x80000001, 0x3}, {0x8, 0x8001, 0x7, 0x7f, 0x2, 0x8}, {0x4, 0x1ff, 0x6d3, 0x6, 0x6, 0xa000}, {0x10001, 0xbf4, 0x2, 0x8001, 0x7f, 0x9}, {0x3800000, 0x6, 0x1ff, 0x10000, 0xffffff9e, 0x3}, {0x7, 0x0, 0x4, 0x1, 0x3, 0x7}, {0x8, 0x7, 0x5, 0x5, 0x10000, 0x1}, {0x6, 0x4, 0x90f3, 0x4, 0xa9, 0x3}, {0x7fffffff, 0x9, 0x6, 0x3, 0xd105, 0x4}, {0x5, 0x4, 0xa, 0x6, 0x5, 0x2}, {0x5, 0x7a96, 0xa54, 0x100, 0x0, 0xe}, {0x1, 0xfffffffe, 0x4, 0x6, 0x6}, {0x0, 0x2, 0x4, 0x2, 0x2, 0xe4}, {0xc000000, 0xfff, 0x6, 0x6, 0x894, 0x6}, {0x3, 0x3, 0x2, 0x1678, 0x5, 0x2}, {0x6, 0x80000001, 0xde1, 0xff, 0x7, 0x8}, {0x2, 0x0, 0x7fff, 0x80000003, 0x2, 0x86db}, {0xf7ef, 0x7, 0x200, 0x4, 0x8, 0xc6ab}, {0x2, 0x1, 0x2, 0x4, 0x6, 0x7}, {0x5e27, 0x8, 0xffffffff, 0x6, 0x1000, 0x8}, {0x2, 0x2, 0xff, 0x6, 0xf, 0x5}, {0x7, 0x8, 0x2e16, 0x3ff, 0x8, 0x401}, {0x6, 0x3, 0x5, 0xfffffff9, 0xbd83, 0x7}, {0x7e1, 0x9, 0x7ff, 0x100000, 0x8, 0x401}, {0x4, 0xb, 0x6, 0x8, 0x95, 0xf32}, {0x7, 0xfff, 0x3, 0xaeb3, 0x7, 0xffff}, {0xfff, 0x5f, 0x3ff, 0x8, 0x101, 0xffffd453}, {0x0, 0x9, 0x6, 0x400, 0x2, 0x7}, {0xbda0, 0x4, 0x8, 0x4, 0x557, 0x101}, {0x3, 0x1000, 0x5, 0x37, 0xbcc2, 0x345}, {0x100, 0x0, 0x7f, 0xffffff00, 0x1ff, 0x8}, {0x1, 0x4, 0xfff, 0x2, 0x2, 0x7}, {0x9, 0x9, 0x467, 0x4, 0x4, 0x2}, {0x8cd, 0x5, 0x2, 0x4c, 0xc, 0x8}, {0x2, 0x10000, 0x8, 0x0, 0x200, 0x2}, {0x7, 0x80000000, 0x101, 0x401, 0x1ff, 0x4}, {0x10, 0x8, 0x9, 0x6, 0x1, 0x3}, {0x2, 0x0, 0x9, 0x3, 0x3, 0x5}, {0xfd, 0x2, 0x6, 0x101, 0x1, 0x401}, {0x42, 0x1, 0x2, 0x4, 0x0, 0x1}, {0x6, 0x4, 0x9, 0x3, 0x2097, 0x7}, {0x10001, 0x9, 0x9, 0x2, 0x6539, 0xfffffff7}, {0x80, 0xb00, 0x86, 0x1, 0x10, 0x80000001}, {0x8, 0x9, 0xc, 0x8000, 0x3, 0x5}, {0x0, 0xfffffff7, 0x6, 0x6, 0x7fff, 0x3}, {0x4, 0x1800000, 0xfffffffd, 0x4, 0x1c000, 0x68}, {0x0, 0xfffffffb, 0x5, 0x6c, 0x4, 0x5}, {0x5, 0x7, 0x9, 0x9, 0x2, 0x4}, {0x9, 0x1, 0xfff, 0x9, 0xc, 0xfffffffb}, {0x9, 0x7f3, 0x1000, 0x4, 0x5, 0x3}, {0x1, 0x401, 0xffffe7ad, 0xa, 0x894, 0x7}, {0x64d7e3ec, 0x2000009, 0x1ff, 0x5, 0x8001, 0x8}, {0x0, 0x78f3, 0x7fffffff, 0x78b, 0xffffffff, 0x3}], [{0x1, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6}, {0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x1}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x7}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x1}, {0x1}, {0x5}, {}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0xdc11eedf34026e23}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 8m7.136282453s ago: executing program 3 (id=1057): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 8m6.116198834s ago: executing program 3 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @link_local}) 8m5.1157618s ago: executing program 3 (id=1062): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="480000001400190d09004beafd0d8c560a84476080ffe006000000000904000000000000", 0x24}], 0x1) 8m4.609566193s ago: executing program 35 (id=1062): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="480000001400190d09004beafd0d8c560a84476080ffe006000000000904000000000000", 0x24}], 0x1) 6m15.616687513s ago: executing program 8 (id=1840): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "a7bec4bf"}]}}, 0x0}, 0x0) 6m14.971142563s ago: executing program 8 (id=1844): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 6m14.530906412s ago: executing program 8 (id=1847): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f5, 0x6021, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m13.459613433s ago: executing program 8 (id=1855): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 6m13.267100437s ago: executing program 8 (id=1856): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f5, 0x6021, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m12.346098689s ago: executing program 8 (id=1866): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000540)=""/249, 0xf9, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000840)=""/211, 0x4d, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 6m11.952534761s ago: executing program 36 (id=1866): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000540)=""/249, 0xf9, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000840)=""/211, 0x4d, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 3m41.226503261s ago: executing program 0 (id=3914): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) 3m40.751759973s ago: executing program 5 (id=3918): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000004000000000000000000850000000700000018", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000700001000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}, 0x1, 0x1000000000000000}, 0x0) 3m40.592458321s ago: executing program 5 (id=3920): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8905, &(0x7f0000000240)={'vlan1\x00', @ifru_mtu=0xa}) 3m40.387589843s ago: executing program 5 (id=3923): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 3m40.140541643s ago: executing program 5 (id=3926): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0003050000001408"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m39.413610719s ago: executing program 0 (id=3934): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 3m38.817507787s ago: executing program 0 (id=3938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3m38.743008597s ago: executing program 0 (id=3940): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)={0xa, 0x4f23, 0x0, @local, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x676}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4abe}}], 0x18}}], 0x2, 0x0) 3m38.555888302s ago: executing program 0 (id=3942): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000400)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000c00)={0x40, 0x16, 0x1, 'o'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000240)={0x60, 0xf}, 0x0, 0x0}) 3m38.339715732s ago: executing program 5 (id=3945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m37.819700622s ago: executing program 5 (id=3950): syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000740)='erofs\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x2004}}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40046208, 0x0) 3m35.377297281s ago: executing program 0 (id=3980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) 3m22.692562281s ago: executing program 37 (id=3950): syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000740)='erofs\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x2004}}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40046208, 0x0) 3m20.069838561s ago: executing program 38 (id=3980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) 2m34.980909492s ago: executing program 7 (id=4631): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.464693766s ago: executing program 7 (id=4636): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 2m33.499809629s ago: executing program 7 (id=4645): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) 2m32.995972109s ago: executing program 7 (id=4650): syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) 2m32.088013261s ago: executing program 7 (id=4661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r1, 0x1cf97d32b8445327, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x38664066aeb96049}, 0x24000000) 2m31.785983659s ago: executing program 7 (id=4665): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2m16.673273912s ago: executing program 39 (id=4665): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 743.850708ms ago: executing program 6 (id=6472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 730.658645ms ago: executing program 9 (id=6473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x50, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0xffffffffffffffff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x8004) 636.509188ms ago: executing program 6 (id=6474): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 539.869201ms ago: executing program 9 (id=6475): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x80000203, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f00000000c0), 0x10) 491.70267ms ago: executing program 6 (id=6476): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0xffff}}}}}}, 0x0) 441.29201ms ago: executing program 9 (id=6477): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x112}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 295.945041ms ago: executing program 6 (id=6478): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 275.298346ms ago: executing program 9 (id=6479): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 182.662409ms ago: executing program 6 (id=6480): futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x9c000002) 91.905061ms ago: executing program 9 (id=6481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x66, 0x2, 0x4, 0x1, 0x1, 0x6000, 0x4}}, {0x4}}]}]}, 0x70}}, 0x0) 32.053013ms ago: executing program 6 (id=6482): socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 0s ago: executing program 9 (id=6483): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)) kernel console output (not intermixed with test programs): Failed to read reg index 0x0000: -61 [ 1007.128059][ T5859] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 1007.128380][ T5859] asix 1-1:0.251: probe with driver asix failed with error -5 [ 1007.331059][ T9130] usb 1-1: USB disconnect, device number 50 [ 1008.316028][T14110] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1008.667190][ T6233] usb 10-1: USB disconnect, device number 4 [ 1009.519928][ T9130] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1009.669847][ T9130] usb 6-1: Using ep0 maxpacket: 32 [ 1009.696101][ T9130] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1009.696258][ T9130] usb 6-1: config 0 has no interface number 0 [ 1009.715987][ T9130] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1009.716018][ T9130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.716037][ T9130] usb 6-1: Product: syz [ 1009.716052][ T9130] usb 6-1: Manufacturer: syz [ 1009.716067][ T9130] usb 6-1: SerialNumber: syz [ 1009.755682][ T9130] usb 6-1: config 0 descriptor?? [ 1009.804240][ T9130] smsc95xx v2.0.0 [ 1010.181733][ T9130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1010.181778][ T9130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1010.987585][ T9130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1010.987916][ T9130] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 1011.193399][ T9130] usb 6-1: USB disconnect, device number 25 [ 1011.500464][T14242] netlink: 1404 bytes leftover after parsing attributes in process `syz.9.2389'. [ 1012.413321][T14288] netlink: 1404 bytes leftover after parsing attributes in process `syz.5.2406'. [ 1013.439931][ T5963] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1013.589868][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 1013.593931][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1013.593966][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1013.593996][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1013.594053][ T5963] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1013.594077][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.612403][ T5963] usb 1-1: config 0 descriptor?? [ 1013.637527][T14328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1013.687880][ T5963] hub 1-1:0.0: USB hub found [ 1013.888862][ T5963] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1013.964889][ T5963] usbhid 1-1:0.0: can't add hid device: -71 [ 1013.965028][ T5963] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1014.343358][ T5963] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 1014.666613][T14328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1015.004100][ T6152] usb 1-1: USB disconnect, device number 51 [ 1015.560191][ T6152] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1015.722286][ T6152] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1015.722322][ T6152] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1015.722360][ T6152] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1015.722384][ T6152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.827955][ T6152] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1015.829094][ T6152] usb 6-1: invalid MIDI out EP 0 [ 1016.104429][ T6152] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1016.123514][ T6152] usb 6-1: USB disconnect, device number 26 [ 1016.225949][T11679] udevd[11679]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.930137][ T6198] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1017.091756][ T6198] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1017.091790][ T6198] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.098130][ T6198] usb 10-1: config 0 descriptor?? [ 1017.131579][ T6198] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1017.263621][T14480] vlan0: entered promiscuous mode [ 1017.508223][T14480] team0: Port device vlan0 added [ 1017.543072][ T6198] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 1017.744145][ T6198] gspca_cpia1: usb_control_msg 01, error -32 [ 1017.746101][ T6198] gspca_cpia1: usb_control_msg 01, error -32 [ 1017.748394][ T6198] gspca_cpia1: usb_control_msg 01, error -71 [ 1017.748414][ T6198] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1017.797565][ T6198] usb 10-1: USB disconnect, device number 5 [ 1018.173110][T14514] netlink: 'syz.5.2493': attribute type 39 has an invalid length. [ 1018.540097][T14532] netlink: 1404 bytes leftover after parsing attributes in process `syz.9.2501'. [ 1019.116691][T14555] vlan0: entered promiscuous mode [ 1019.506282][ T6152] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1019.663622][ T6152] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1019.663658][ T6152] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1019.663687][ T6152] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1019.663715][ T6152] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1019.663759][ T6152] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1019.663784][ T6152] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.669069][ T6152] usb 10-1: config 0 descriptor?? [ 1019.700502][T14565] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1019.809948][ T5879] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1019.994945][ T5879] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1019.994977][ T5879] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1019.994997][ T5879] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1019.995115][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1019.995143][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1019.997157][ T5879] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1019.997246][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1019.997268][ T5879] usb 6-1: Product: syz [ 1019.997285][ T5879] usb 6-1: Manufacturer: syz [ 1020.114914][ T6152] usbhid 10-1:0.0: can't add hid device: -71 [ 1020.115212][ T6152] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1020.118440][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 1020.118460][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 1020.152631][ T5879] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1020.152655][ T5879] cdc_wdm 6-1:1.0: Unknown control protocol [ 1020.159708][ T6152] usb 10-1: USB disconnect, device number 6 [ 1020.310781][ C1] wdm_int_callback: 470 callbacks suppressed [ 1020.310812][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1020.310832][ C1] wdm_int_callback: 470 callbacks suppressed [ 1020.310856][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1020.311100][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1020.311123][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1020.311520][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1020.311537][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1020.311751][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1020.311766][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1020.311990][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1020.312005][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1020.312111][ T5859] usb 6-1: USB disconnect, device number 27 [ 1020.312201][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1020.312215][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1020.312228][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1020.804580][T14619] netlink: 1404 bytes leftover after parsing attributes in process `syz.0.2542'. [ 1021.283588][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2553'. [ 1021.426589][T14647] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2558'. [ 1021.850004][ T5859] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 1022.027724][ T5859] usb 10-1: config 0 has an invalid interface number: 153 but max is 0 [ 1022.027756][ T5859] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.027778][ T5859] usb 10-1: config 0 has no interface number 0 [ 1022.027814][ T5859] usb 10-1: config 0 interface 153 has no altsetting 0 [ 1022.035701][ T5859] usb 10-1: string descriptor 0 read error: -22 [ 1022.035883][ T5859] usb 10-1: New USB device found, idVendor=03ac, idProduct=0000, bcdDevice=ea.00 [ 1022.035910][ T5859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.094666][ T5859] usb 10-1: config 0 descriptor?? [ 1022.118357][ T5859] uvcvideo 10-1:0.153: Found Unit with invalid ID 0 [ 1022.118515][ T5859] uvcvideo 10-1:0.153: Found UVC 0.00 device (03ac:0000) [ 1022.118552][ T5859] uvcvideo 10-1:0.153: No valid video chain found. [ 1022.341101][ T6152] usb 10-1: USB disconnect, device number 7 [ 1023.589910][ T5859] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1023.744372][ T5859] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1023.744411][ T5859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.744434][ T5859] usb 10-1: Product: syz [ 1023.744450][ T5859] usb 10-1: Manufacturer: syz [ 1023.744466][ T5859] usb 10-1: SerialNumber: syz [ 1023.783839][ T5859] usb 10-1: config 0 descriptor?? [ 1023.802533][ T5859] ch341 10-1:0.0: ch341-uart converter detected [ 1023.997266][ T5859] usb 10-1: failed to receive control message: -71 [ 1023.997341][ T5859] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1024.056059][ T5859] usb 10-1: USB disconnect, device number 8 [ 1024.076781][ T5859] ch341 10-1:0.0: device disconnected [ 1025.130407][T14817] support for cryptoloop has been removed. Use dm-crypt instead. [ 1025.209954][ T5879] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1025.378864][ T5879] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1025.378898][ T5879] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1025.378919][ T5879] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1025.378994][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1025.379023][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1025.438942][ T5879] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1025.438981][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1025.439003][ T5879] usb 6-1: Product: syz [ 1025.439019][ T5879] usb 6-1: Manufacturer: syz [ 1025.522937][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 1025.522960][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 1025.525409][T14829] netlink: 'syz.0.2645': attribute type 39 has an invalid length. [ 1025.537329][ T5879] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1025.537353][ T5879] cdc_wdm 6-1:1.0: Unknown control protocol [ 1025.773016][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1025.773049][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1025.773352][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1025.773375][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1025.773608][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1025.773629][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1025.774040][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1025.774062][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1025.774286][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1025.774307][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1025.774578][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1025.774599][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1025.774736][ T5886] usb 6-1: USB disconnect, device number 28 [ 1025.774821][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1025.774841][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1025.774859][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1027.059952][T10852] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1027.179982][ T5886] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 1027.232043][T10852] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 1027.232083][T10852] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.232104][T10852] usb 6-1: config 0 has no interface number 0 [ 1027.232146][T10852] usb 6-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 1027.232164][T10852] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1027.232196][T10852] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1027.232214][T10852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.236578][T10852] usb 6-1: config 0 descriptor?? [ 1027.239661][T14879] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1027.406180][ T5886] usb 10-1: config 0 has an invalid interface number: 153 but max is 0 [ 1027.406213][ T5886] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.406234][ T5886] usb 10-1: config 0 has no interface number 0 [ 1027.406271][ T5886] usb 10-1: config 0 interface 153 has no altsetting 0 [ 1027.414405][ T5886] usb 10-1: string descriptor 0 read error: -22 [ 1027.414534][ T5886] usb 10-1: New USB device found, idVendor=03ac, idProduct=0000, bcdDevice=ea.00 [ 1027.414559][ T5886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.490010][ T5886] usb 10-1: config 0 descriptor?? [ 1027.491063][T10852] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1027.572876][ T5886] uvcvideo 10-1:0.153: Found Unit with invalid ID 0 [ 1027.572981][ T5886] uvcvideo 10-1:0.153: Found UVC 0.00 device (03ac:0000) [ 1027.573012][ T5886] uvcvideo 10-1:0.153: No valid video chain found. [ 1027.601021][ T6066] usb 6-1: Failed to submit usb control message: -71 [ 1027.601118][ T6066] usb 6-1: unable to send the bmi data to the device: -71 [ 1027.601168][ T6066] usb 6-1: unable to get target info from device [ 1027.601195][ T6066] usb 6-1: could not get target info (-71) [ 1027.602383][ T6066] usb 6-1: could not probe fw (-71) [ 1027.616313][T10852] usb 6-1: USB disconnect, device number 29 [ 1027.823803][ T6040] usb 10-1: USB disconnect, device number 9 [ 1028.765840][T14963] mmap: syz.0.2710 (14963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1029.393667][T14995] overlayfs: missing 'lowerdir' [ 1029.869193][T15018] netlink: 'syz.5.2736': attribute type 15 has an invalid length. [ 1029.869221][T15018] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2736'. [ 1030.022523][T15026] overlayfs: missing 'lowerdir' [ 1030.612699][T15057] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1030.612731][T15057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1030.643346][T15057] vhci_hcd vhci_hcd.0: Device attached [ 1030.873606][ T6040] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1030.953227][ T5879] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 1030.953600][ T6040] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 1031.102103][ T5879] usb 1-1: config 0 has no interfaces? [ 1031.102145][ T5879] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1031.102171][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.140560][ T5879] usb 1-1: config 0 descriptor?? [ 1031.360404][ T5879] usb 1-1: USB disconnect, device number 52 [ 1031.421763][T15059] vhci_hcd: connection reset by peer [ 1031.439994][ T6040] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1031.448189][ T68] vhci_hcd vhci_hcd.0: stop threads [ 1031.474919][ T68] vhci_hcd vhci_hcd.0: release socket [ 1031.500025][ T6040] usb 33-1: device descriptor read/64, error -71 [ 1031.506919][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 1031.687419][ T6040] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1031.901001][T15122] i2c i2c-0: Invalid block write size 252 [ 1032.369897][ T6233] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1032.530680][ T6233] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1032.530718][ T6233] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1032.530758][ T6233] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1032.530782][ T6233] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.584954][T15129] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1032.618293][ T6233] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1032.895178][ T6233] usb 10-1: USB disconnect, device number 10 [ 1033.033278][T15167] netlink: 'syz.5.2810': attribute type 3 has an invalid length. [ 1033.597223][T15195] netlink: 'syz.9.2824': attribute type 39 has an invalid length. [ 1033.677202][T15203] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1033.677264][T15203] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1034.110183][ T5886] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1034.353617][T15233] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1034.353677][T15233] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1034.365687][ T5886] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 1034.365796][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.366030][ T5886] usb 1-1: config 0 has no interface number 0 [ 1034.366174][ T5886] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1034.366240][ T5886] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1034.366359][ T5886] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1034.366440][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.398147][ T5886] usb 1-1: config 0 descriptor?? [ 1034.533650][ T5886] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1034.606902][ T85] usb 1-1: Failed to submit usb control message: -71 [ 1034.606940][ T85] usb 1-1: unable to send the bmi data to the device: -71 [ 1034.606960][ T85] usb 1-1: unable to get target info from device [ 1034.606976][ T85] usb 1-1: could not get target info (-71) [ 1034.606995][ T85] usb 1-1: could not probe fw (-71) [ 1034.632071][ T5886] usb 1-1: USB disconnect, device number 53 [ 1035.059552][T15257] netlink: 'syz.9.2852': attribute type 15 has an invalid length. [ 1035.059579][T15257] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2852'. [ 1035.747265][T15288] i2c i2c-0: Invalid block write size 252 [ 1037.265502][T15366] netlink: 'syz.0.2904': attribute type 39 has an invalid length. [ 1037.545300][T15381] binder: 15380:15381 ioctl c0306201 200000000080 returned -11 [ 1038.101428][T15411] fuse: Invalid rootmode [ 1038.390510][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2933'. [ 1038.664865][T15446] netlink: 1404 bytes leftover after parsing attributes in process `syz.5.2944'. [ 1039.463521][T15488] netlink: 'syz.9.2963': attribute type 39 has an invalid length. [ 1040.138819][T15520] netlink: 1404 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1040.181271][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.222417][T15525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.238731][T15525] bridge0: entered allmulticast mode [ 1040.330834][T15527] bridge_slave_1: left allmulticast mode [ 1040.331074][T15527] bridge_slave_1: left promiscuous mode [ 1040.372276][ T9264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1040.411661][ T9264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1040.416239][ T9264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1040.419119][ T9264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1040.435253][ T9264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1040.532284][T15527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.703869][T15527] bridge_slave_0: left allmulticast mode [ 1040.703901][T15527] bridge_slave_0: left promiscuous mode [ 1040.704167][T15527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.913786][ T5886] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1041.093555][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1041.093593][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1041.093616][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1041.096162][ T5886] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1041.096193][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.096215][ T5886] usb 1-1: Product: syz [ 1041.096231][ T5886] usb 1-1: Manufacturer: syz [ 1041.096247][ T5886] usb 1-1: SerialNumber: syz [ 1041.163751][ T5886] usb 1-1: config 0 descriptor?? [ 1041.167024][T15535] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1041.414675][ T6152] usb 1-1: USB disconnect, device number 54 [ 1041.650052][ T5886] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1041.799841][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1041.801685][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.801719][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.801747][ T5886] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1041.801764][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.837840][ T5886] usb 6-1: config 0 descriptor?? [ 1042.268172][ T5886] usbhid 6-1:0.0: can't add hid device: -71 [ 1042.268298][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1042.301291][ T5886] usb 6-1: USB disconnect, device number 30 [ 1042.349135][ T6115] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.349992][ T6198] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1042.490622][ T6198] usb 10-1: device descriptor read/64, error -71 [ 1042.516044][ T8592] Bluetooth: hci4: command tx timeout [ 1042.547306][T15586] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3010'. [ 1042.729898][ T6198] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1042.785916][ T6115] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.859909][ T6198] usb 10-1: device descriptor read/64, error -71 [ 1042.971134][ T6198] usb usb10-port1: attempt power cycle [ 1042.975816][T15603] i2c i2c-0: Invalid block write size 252 [ 1043.198137][ T6115] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.310379][ T6198] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1043.330621][ T6198] usb 10-1: device descriptor read/8, error -71 [ 1043.443454][T15620] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1043.460698][T15618] IPVS: stopping backup sync thread 15620 ... [ 1043.574562][ T6198] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1043.590669][ T6198] usb 10-1: device descriptor read/8, error -71 [ 1043.617457][ T6115] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.698055][T15626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3028'. [ 1043.709408][ T6198] usb usb10-port1: unable to enumerate USB device [ 1043.773619][T15528] chnl_net:caif_netlink_parms(): no params data found [ 1044.503152][T15654] vlan0: entered promiscuous mode [ 1044.530383][T15654] team0: Port device vlan0 added [ 1044.590412][ T8592] Bluetooth: hci4: command tx timeout [ 1044.747261][T15528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.747477][T15528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.748054][T15528] bridge_slave_0: entered allmulticast mode [ 1044.786490][T15528] bridge_slave_0: entered promiscuous mode [ 1044.805641][T15528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.805790][T15528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.806039][T15528] bridge_slave_1: entered allmulticast mode [ 1044.808929][T15528] bridge_slave_1: entered promiscuous mode [ 1045.005850][ T6115] bridge_slave_1: left allmulticast mode [ 1045.005879][ T6115] bridge_slave_1: left promiscuous mode [ 1045.006123][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.090221][ T5886] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1045.096029][ T6115] bridge_slave_0: left allmulticast mode [ 1045.096062][ T6115] bridge_slave_0: left promiscuous mode [ 1045.096329][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.240481][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1045.247842][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.247880][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.247897][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1045.247928][ T5886] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1045.247946][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.255908][ T5886] usb 6-1: config 0 descriptor?? [ 1045.460018][ T6233] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1045.609927][ T6233] usb 10-1: Using ep0 maxpacket: 16 [ 1045.655113][ T6233] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.655148][ T6233] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.655380][ T6233] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1045.655397][ T6233] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.772036][ T6233] usb 10-1: config 0 descriptor?? [ 1046.057400][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x2 [ 1046.058696][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1046.058730][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1046.058758][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1046.058785][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1046.059043][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1046.059072][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1046.059100][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1046.059128][ T5886] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1046.196229][T15700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3062'. [ 1046.330417][ T5886] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input19 [ 1046.501590][ T6233] input: HID 0458:5015 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5015.0004/input/input20 [ 1046.665528][ T5886] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1046.670174][ T6233] input: HID 0458:5015 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5015.0004/input/input21 [ 1046.680357][ T8592] Bluetooth: hci4: command tx timeout [ 1046.787841][ T5886] usb 6-1: USB disconnect, device number 31 [ 1046.929062][ T6233] input: HID 0458:5015 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5015.0004/input/input22 [ 1047.106564][T15710] fido_id[15710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1047.423058][ T6233] kye 0003:0458:5015.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.9-1/input0 [ 1047.512612][ T6233] usb 10-1: USB disconnect, device number 15 [ 1048.765068][ T8592] Bluetooth: hci4: command tx timeout [ 1049.321248][ T6115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.400487][ T6115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.483082][ T6115] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1049.521110][ T6115] bond0 (unregistering): Released all slaves [ 1049.776518][T15528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.796736][T15528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.822176][ T68] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1049.961090][ T68] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1050.021761][T15792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.026592][T15792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.028508][T15792] bridge0: entered allmulticast mode [ 1050.454472][T15814] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1050.950088][ T6040] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1051.039063][T15528] team0: Port device team_slave_0 added [ 1051.060310][T15528] team0: Port device team_slave_1 added [ 1051.080091][T15838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3125'. [ 1051.134259][ T6040] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1051.134291][ T6040] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.134312][ T6040] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1051.134365][ T6040] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.134402][ T6040] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.136519][ T6040] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1051.136550][ T6040] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1051.136571][ T6040] usb 6-1: Product: syz [ 1051.136587][ T6040] usb 6-1: Manufacturer: syz [ 1051.223158][ T6040] cdc_wdm 6-1:1.0: skipping garbage [ 1051.223807][ T6040] cdc_wdm 6-1:1.0: skipping garbage [ 1051.226399][ T6040] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1051.226420][ T6040] cdc_wdm 6-1:1.0: Unknown control protocol [ 1051.422838][T15848] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3130'. [ 1051.437288][T15824] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 1051.447425][ T5859] usb 6-1: USB disconnect, device number 32 [ 1051.818949][ T6066] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1051.867778][T15528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.867797][T15528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.867829][T15528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.953876][T15528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.953903][T15528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.953934][T15528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.997151][ T6066] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1052.150295][T15872] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3141'. [ 1052.273016][ T6115] hsr_slave_0: left promiscuous mode [ 1052.307976][ T6115] hsr_slave_1: left promiscuous mode [ 1052.309154][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.309183][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.357647][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3145'. [ 1052.370266][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.370297][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.552357][T15890] i2c i2c-0: Invalid block write size 252 [ 1052.566449][ T6115] veth1_macvtap: left promiscuous mode [ 1052.566525][ T6115] veth0_macvtap: left promiscuous mode [ 1052.566719][ T6115] veth1_vlan: left promiscuous mode [ 1052.566923][ T6115] veth0_vlan: left promiscuous mode [ 1053.230964][T15914] i2c i2c-0: Invalid block write size 252 [ 1054.440487][T15962] syz.9.3183 uses obsolete (PF_INET,SOCK_PACKET) [ 1056.446880][ T6115] team0 (unregistering): Port device team_slave_1 removed [ 1056.780780][ T6115] team0 (unregistering): Port device team_slave_0 removed [ 1059.830044][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.659893][ T6040] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1060.834481][ T6040] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.834510][ T6040] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.837472][ T6040] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1060.837500][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1060.837522][ T6040] usb 6-1: SerialNumber: syz [ 1061.024421][T15528] hsr_slave_0: entered promiscuous mode [ 1061.025894][T15528] hsr_slave_1: entered promiscuous mode [ 1061.026882][T15528] debugfs: 'hsr0' already exists in 'hsr' [ 1061.026909][T15528] Cannot create hsr debugfs directory [ 1061.066963][ T6040] usb 6-1: 0:2 : does not exist [ 1061.250269][ T6040] usb 6-1: USB disconnect, device number 33 [ 1061.455702][T16129] udevd[16129]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.186865][T16186] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1063.459958][ T6040] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1063.609848][ T6040] usb 1-1: Using ep0 maxpacket: 32 [ 1063.622920][ T6040] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1063.635664][ T6040] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1063.635696][ T6040] usb 1-1: can't read configurations, error -71 [ 1064.165038][ T5879] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1064.341819][ T5879] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1064.346306][ T5879] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1064.346339][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.346360][ T5879] usb 6-1: Product: syz [ 1064.346376][ T5879] usb 6-1: Manufacturer: syz [ 1064.346392][ T5879] usb 6-1: SerialNumber: syz [ 1064.389310][ T5879] usb 6-1: config 0 descriptor?? [ 1064.431418][T15528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1064.433375][T16260] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1064.499606][T15528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1064.586037][T16279] netlink: 1424 bytes leftover after parsing attributes in process `syz.9.3317'. [ 1064.622259][T15528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1064.655313][T10852] usb 6-1: USB disconnect, device number 34 [ 1064.725145][T15528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1065.213809][T15528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.322933][T15528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.353811][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.354597][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.398117][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.398273][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.831696][T16326] netlink: 1424 bytes leftover after parsing attributes in process `syz.9.3330'. [ 1066.309217][T15528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.000255][ T9264] Bluetooth: hci5: command 0x0406 tx timeout [ 1067.132997][T15528] veth0_vlan: entered promiscuous mode [ 1067.156812][T15528] veth1_vlan: entered promiscuous mode [ 1067.243996][T15528] veth0_macvtap: entered promiscuous mode [ 1067.249305][T15528] veth1_macvtap: entered promiscuous mode [ 1067.317797][T15528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.351877][T15528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.389190][ T6469] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.389451][ T6469] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.389495][ T6469] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.389533][ T6469] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.621148][T16386] fuse: Unknown parameter 'fd0x0000000000000005' [ 1067.820172][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.820195][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.970147][ T37] audit: type=1326 audit(1767190334.158:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.970454][ T37] audit: type=1326 audit(1767190334.168:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.970762][ T37] audit: type=1326 audit(1767190334.168:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.971005][ T37] audit: type=1326 audit(1767190334.168:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.971299][ T37] audit: type=1326 audit(1767190334.168:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.971539][ T37] audit: type=1326 audit(1767190334.168:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.971821][ T37] audit: type=1326 audit(1767190334.168:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.972062][ T37] audit: type=1326 audit(1767190334.168:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.972331][ T37] audit: type=1326 audit(1767190334.168:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1067.972594][ T37] audit: type=1326 audit(1767190334.168:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16395 comm="syz.9.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5dbfdf749 code=0x7ff00000 [ 1068.085564][ T763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.085628][ T763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.826324][T16417] fuse: Unknown parameter 'fd0x0000000000000005' [ 1068.855120][ T9264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1068.873665][ T9264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1068.879397][ T9264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1068.912112][ T9264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1068.913255][ T9264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1069.186277][T16425] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1069.186304][T16425] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1069.186441][T16425] vhci_hcd vhci_hcd.0: Device attached [ 1069.390253][ T6233] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1069.449917][ T6233] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1069.519890][ T6040] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1069.660350][ T6040] usb 7-1: device descriptor read/64, error -71 [ 1069.909928][ T6040] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1070.049930][ T6040] usb 7-1: device descriptor read/64, error -71 [ 1070.160670][ T6040] usb usb7-port1: attempt power cycle [ 1070.485516][T13848] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.502519][ T6040] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1070.520627][ T6040] usb 7-1: device descriptor read/8, error -71 [ 1070.563690][T16418] chnl_net:caif_netlink_parms(): no params data found [ 1070.639452][T16461] overlayfs: failed to resolve './file1': -2 [ 1070.769949][ T6040] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1070.793520][ T6040] usb 7-1: device descriptor read/8, error -71 [ 1070.896156][T13848] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.946691][ T6040] usb usb7-port1: unable to enumerate USB device [ 1070.990884][ T9264] Bluetooth: hci0: command tx timeout [ 1071.089990][ T6152] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1071.203658][T16472] netlink: 1424 bytes leftover after parsing attributes in process `syz.9.3384'. [ 1071.263115][ T6152] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1071.263146][ T6152] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1071.263168][ T6152] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1071.263219][ T6152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1071.265301][ T6152] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1071.265329][ T6152] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1071.265365][ T6152] usb 1-1: Product: syz [ 1071.265381][ T6152] usb 1-1: Manufacturer: syz [ 1071.344870][ T6152] cdc_wdm 1-1:1.0: skipping garbage [ 1071.344892][ T6152] cdc_wdm 1-1:1.0: skipping garbage [ 1071.345001][ T6152] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1071.387123][T13848] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.549059][ T5859] usb 1-1: USB disconnect, device number 57 [ 1071.707042][T13848] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.753350][T16418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.753506][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.753716][T16418] bridge_slave_0: entered allmulticast mode [ 1071.755810][T16418] bridge_slave_0: entered promiscuous mode [ 1071.757633][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3386'. [ 1071.800518][T16418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.800682][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.800924][T16418] bridge_slave_1: entered allmulticast mode [ 1071.803256][T16418] bridge_slave_1: entered promiscuous mode [ 1072.009120][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.023776][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.095749][T16485] overlayfs: failed to resolve './file1': -2 [ 1072.209633][T16426] vhci_hcd: connection reset by peer [ 1072.223994][ T6469] vhci_hcd vhci_hcd.6: stop threads [ 1072.224022][ T6469] vhci_hcd vhci_hcd.6: release socket [ 1072.224096][ T6469] vhci_hcd vhci_hcd.6: disconnect device [ 1072.451371][T16493] netlink: 1424 bytes leftover after parsing attributes in process `syz.6.3394'. [ 1072.453747][T16418] team0: Port device team_slave_0 added [ 1072.530764][T16418] team0: Port device team_slave_1 added [ 1072.656920][T16498] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3397'. [ 1072.822105][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.822124][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.822155][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.886662][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.886682][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.886713][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.040167][T16505] overlayfs: failed to resolve './file1': -2 [ 1073.067730][T16511] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1073.067759][T16511] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1073.073763][T13848] bridge_slave_1: left allmulticast mode [ 1073.073791][T13848] bridge_slave_1: left promiscuous mode [ 1073.073807][ T9264] Bluetooth: hci0: command tx timeout [ 1073.074327][T13848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.168319][T16511] vhci_hcd vhci_hcd.0: Device attached [ 1073.212687][T13848] bridge_slave_0: left allmulticast mode [ 1073.212718][T13848] bridge_slave_0: left promiscuous mode [ 1073.212974][T13848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.400003][ T6198] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1073.400167][ T5859] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1073.529879][ T5859] usb 7-1: device descriptor read/64, error -71 [ 1073.529996][ T6198] usb 1-1: device descriptor read/64, error -71 [ 1073.800155][ T5859] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 1073.800386][ T6198] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1073.929953][ T5859] usb 7-1: device descriptor read/64, error -71 [ 1073.969851][ T6198] usb 1-1: device descriptor read/64, error -71 [ 1074.041283][ T5859] usb usb7-port1: attempt power cycle [ 1074.080299][ T6198] usb usb1-port1: attempt power cycle [ 1074.379942][ T5859] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 1074.400662][ T5859] usb 7-1: device descriptor read/8, error -71 [ 1074.450015][ T6198] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1074.476678][ T6198] usb 1-1: device descriptor read/8, error -71 [ 1074.653621][ T5859] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1074.700776][ T5859] usb 7-1: device descriptor read/8, error -71 [ 1074.711592][ T6198] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1074.731115][ T6198] usb 1-1: device descriptor read/8, error -71 [ 1074.822725][ T5859] usb usb7-port1: unable to enumerate USB device [ 1074.840561][ T6198] usb usb1-port1: unable to enumerate USB device [ 1075.150868][ T9264] Bluetooth: hci0: command tx timeout [ 1075.690599][T13848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.750842][T13848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.810458][T13848] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1075.846040][T13848] bond0 (unregistering): Released all slaves [ 1076.168725][T16512] vhci_hcd: connection reset by peer [ 1076.168913][ T1176] vhci_hcd vhci_hcd.6: stop threads [ 1076.168949][ T1176] vhci_hcd vhci_hcd.6: release socket [ 1076.205035][ T1176] vhci_hcd vhci_hcd.6: disconnect device [ 1076.230014][T13848] tipc: Disabling bearer [ 1076.230293][T13848] tipc: Disabling bearer [ 1076.279968][ T6233] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1076.310733][T13848] tipc: Left network mode [ 1076.330808][T16418] hsr_slave_0: entered promiscuous mode [ 1076.337615][T16418] hsr_slave_1: entered promiscuous mode [ 1076.350505][T16418] debugfs: 'hsr0' already exists in 'hsr' [ 1076.350529][T16418] Cannot create hsr debugfs directory [ 1076.839110][T16542] overlayfs: failed to resolve './file0': -2 [ 1076.919886][ T6152] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1077.049975][T16550] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1077.050004][T16550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1077.050160][T16550] vhci_hcd vhci_hcd.0: Device attached [ 1077.109184][ T6152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1077.109217][ T6152] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1077.133508][ T6152] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1077.133540][ T6152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.133573][ T6152] usb 6-1: Product: syz [ 1077.133588][ T6152] usb 6-1: Manufacturer: syz [ 1077.133603][ T6152] usb 6-1: SerialNumber: syz [ 1077.231482][ T9264] Bluetooth: hci0: command tx timeout [ 1077.265661][ T6152] usb 6-1: config 0 descriptor?? [ 1077.331662][ T9130] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1077.381651][ T6040] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 1077.397631][ T9130] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 1077.482291][ T6198] usb 6-1: USB disconnect, device number 35 [ 1077.509896][ T6040] usb 1-1: device descriptor read/64, error -71 [ 1077.756412][T16562] sp0: Synchronizing with TNC [ 1077.781295][ T6040] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 1077.909893][ T6040] usb 1-1: device descriptor read/64, error -71 [ 1078.020245][ T6040] usb usb1-port1: attempt power cycle [ 1078.138554][T16575] overlayfs: failed to resolve './file0': -2 [ 1078.360094][ T6040] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 1078.380587][ T6040] usb 1-1: device descriptor read/8, error -71 [ 1078.501642][T13848] hsr_slave_0: left promiscuous mode [ 1078.542126][T13848] hsr_slave_1: left promiscuous mode [ 1078.543910][T13848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.543939][T13848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.581425][T13848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.581449][T13848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.619946][ T6040] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 1078.645827][ T6040] usb 1-1: device descriptor read/8, error -71 [ 1078.715407][T13848] veth1_macvtap: left promiscuous mode [ 1078.715487][T13848] veth0_macvtap: left promiscuous mode [ 1078.715661][T13848] veth1_vlan: left promiscuous mode [ 1078.715826][T13848] veth0_vlan: left promiscuous mode [ 1078.762270][ T6040] usb usb1-port1: unable to enumerate USB device [ 1079.985311][T16551] vhci_hcd: connection reset by peer [ 1080.006353][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1080.006381][ T12] vhci_hcd vhci_hcd.0: release socket [ 1080.006449][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1080.439917][ T6040] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1080.623635][ T6040] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 1080.623668][ T6040] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.623690][ T6040] usb 1-1: config 0 has no interface number 0 [ 1080.623745][ T6040] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1080.623777][ T6040] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1080.623794][ T6040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.629129][ T6040] usb 1-1: config 0 descriptor?? [ 1080.813524][ T6040] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1080.950691][ T6234] usb 1-1: Failed to submit usb control message: -71 [ 1080.950730][ T6234] usb 1-1: unable to send the bmi data to the device: -71 [ 1080.950750][ T6234] usb 1-1: unable to get target info from device [ 1080.950766][ T6234] usb 1-1: could not get target info (-71) [ 1080.950785][ T6234] usb 1-1: could not probe fw (-71) [ 1080.951281][ T6152] usb 1-1: USB disconnect, device number 66 [ 1081.890801][T13848] team0 (unregistering): Port device team_slave_1 removed [ 1082.162527][T13848] team0 (unregistering): Port device team_slave_0 removed [ 1082.525620][ T9130] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1085.407361][T16602] overlayfs: failed to resolve './file0': -2 [ 1085.650064][T16616] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1085.650097][T16616] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1085.650310][T16616] vhci_hcd vhci_hcd.0: Device attached [ 1085.868946][ T6233] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1085.921544][ T6198] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1085.939953][ T5859] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 1085.940940][ T6233] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 1086.094040][ T6198] usb 10-1: Using ep0 maxpacket: 8 [ 1086.140102][ T6198] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.140152][ T6198] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1086.140179][ T6198] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.147355][ T6198] usb 10-1: config 0 descriptor?? [ 1086.159778][ T5859] usb 1-1: no configurations [ 1086.159800][ T5859] usb 1-1: can't read configurations, error -22 [ 1086.310029][ T5859] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 1086.541151][ T5859] usb 1-1: no configurations [ 1086.541172][ T5859] usb 1-1: can't read configurations, error -22 [ 1086.571048][ T5859] usb usb1-port1: attempt power cycle [ 1086.587183][ T6198] usbhid 10-1:0.0: can't add hid device: -71 [ 1086.587332][ T6198] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1086.607727][ T6198] usb 10-1: USB disconnect, device number 16 [ 1086.834875][T16647] netlink: 'syz.6.3452': attribute type 10 has an invalid length. [ 1086.929883][ T5859] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 1087.004695][ T5859] usb 1-1: no configurations [ 1087.004718][ T5859] usb 1-1: can't read configurations, error -22 [ 1087.150175][ T5859] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 1087.181814][ T5859] usb 1-1: no configurations [ 1087.181836][ T5859] usb 1-1: can't read configurations, error -22 [ 1087.182554][ T5859] usb usb1-port1: unable to enumerate USB device [ 1087.324058][T16647] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1087.680494][T16672] overlayfs: failed to resolve './file0': -2 [ 1087.851444][T13848] IPVS: stop unused estimator thread 0... [ 1087.918336][T16677] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3460'. [ 1088.667882][T16418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1088.696732][T16699] overlayfs: failed to resolve './file0': -2 [ 1088.747400][T16617] vhci_hcd: connection reset by peer [ 1088.748318][ T3549] vhci_hcd vhci_hcd.0: stop threads [ 1088.748343][ T3549] vhci_hcd vhci_hcd.0: release socket [ 1088.748411][ T3549] vhci_hcd vhci_hcd.0: disconnect device [ 1088.801239][T16418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1088.874500][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3471'. [ 1088.874534][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3471'. [ 1088.905613][T16418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1089.002356][T16418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1089.129887][ T9130] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1089.283486][ T9130] usb 7-1: Using ep0 maxpacket: 8 [ 1089.288145][ T9130] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 1089.288175][ T9130] usb 7-1: config 150 has no interface number 0 [ 1089.288229][ T9130] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1089.288248][ T9130] usb 7-1: config 150 interface 1 has no altsetting 0 [ 1089.333667][ T9130] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1089.333701][ T9130] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.333723][ T9130] usb 7-1: Product: syz [ 1089.333740][ T9130] usb 7-1: Manufacturer: syz [ 1089.333757][ T9130] usb 7-1: SerialNumber: syz [ 1089.481836][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.624579][ T9130] xr_serial 7-1:150.204: xr_serial converter detected [ 1089.645361][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.723212][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.723808][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.730146][ T6040] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1089.882672][ T6040] usb 10-1: device descriptor read/64, error -71 [ 1089.884948][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.885136][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.121796][ T6040] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1090.140907][T16738] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1090.140935][T16738] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1090.167555][T16738] vhci_hcd vhci_hcd.0: Device attached [ 1090.227834][ T9130] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1090.227913][ T9130] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1090.262147][ T6040] usb 10-1: device descriptor read/64, error -71 [ 1090.282116][ T9130] usb 7-1: USB disconnect, device number 18 [ 1090.289034][ T9130] xr_serial 7-1:150.204: device disconnected [ 1090.370248][ T6040] usb usb10-port1: attempt power cycle [ 1090.381951][ T5859] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1090.450043][ T5891] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1090.450234][ T5859] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1090.594256][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.610530][ T5891] usb 6-1: no configurations [ 1090.610551][ T5891] usb 6-1: can't read configurations, error -22 [ 1090.712381][ T6040] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1090.732775][ T6040] usb 10-1: device descriptor read/8, error -71 [ 1090.746321][ T5891] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1090.891617][ T5891] usb 6-1: no configurations [ 1090.891637][ T5891] usb 6-1: can't read configurations, error -22 [ 1090.891929][ T5891] usb usb6-port1: attempt power cycle [ 1090.980226][ T6040] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1091.020818][ T6040] usb 10-1: device descriptor read/8, error -71 [ 1091.059916][ T6233] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1091.130447][ T6040] usb usb10-port1: unable to enumerate USB device [ 1091.234895][ T5891] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 1091.254704][ T5891] usb 6-1: no configurations [ 1091.254726][ T5891] usb 6-1: can't read configurations, error -22 [ 1091.381700][ T5891] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 1091.411323][ T5891] usb 6-1: no configurations [ 1091.411345][ T5891] usb 6-1: can't read configurations, error -22 [ 1091.411776][ T5891] usb usb6-port1: unable to enumerate USB device [ 1091.588877][T16418] veth0_vlan: entered promiscuous mode [ 1091.606190][T16418] veth1_vlan: entered promiscuous mode [ 1091.763781][T16418] veth0_macvtap: entered promiscuous mode [ 1091.786221][T16418] veth1_macvtap: entered promiscuous mode [ 1091.865759][T16418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.898722][T16418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.942477][ T1176] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.942713][ T1176] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.942751][ T1176] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.942804][ T1176] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.422460][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.422483][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.545360][T13848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.545384][T13848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.670182][ T9264] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1092.670596][ T9264] Bluetooth: hci4: Injecting HCI hardware error event [ 1092.691966][ T8592] Bluetooth: hci4: hardware error 0x00 [ 1093.097924][T16741] vhci_hcd: connection reset by peer [ 1093.122368][T13848] vhci_hcd vhci_hcd.5: stop threads [ 1093.122394][T13848] vhci_hcd vhci_hcd.5: release socket [ 1093.123008][T13848] vhci_hcd vhci_hcd.5: disconnect device [ 1093.355246][T16819] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3501'. [ 1093.847262][T16836] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1093.847293][T16836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1093.848594][T16836] vhci_hcd vhci_hcd.0: Device attached [ 1093.994191][T16842] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3512'. [ 1094.019904][ T6040] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1094.110671][ T9130] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 1094.153462][ T6040] usb 1-1: device descriptor read/64, error -71 [ 1094.264804][ T9130] usb 6-1: no configurations [ 1094.264826][ T9130] usb 6-1: can't read configurations, error -22 [ 1094.390347][ T6040] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1094.390557][ T9130] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 1094.520406][ T6040] usb 1-1: device descriptor read/64, error -71 [ 1094.540969][ T9130] usb 6-1: no configurations [ 1094.540996][ T9130] usb 6-1: can't read configurations, error -22 [ 1094.541300][ T9130] usb usb6-port1: attempt power cycle [ 1094.631123][ T6040] usb usb1-port1: attempt power cycle [ 1094.657568][T16866] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3523'. [ 1094.889858][ T9130] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 1094.911196][ T8592] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1094.941812][ T9130] usb 6-1: no configurations [ 1094.941832][ T9130] usb 6-1: can't read configurations, error -22 [ 1095.004236][ T6040] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1095.024865][ T6040] usb 1-1: device descriptor read/8, error -71 [ 1095.073034][ T9130] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 1095.099954][ T9130] usb 6-1: no configurations [ 1095.099976][ T9130] usb 6-1: can't read configurations, error -22 [ 1095.100337][ T9130] usb usb6-port1: unable to enumerate USB device [ 1095.269871][ T6040] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1095.270949][ T6233] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1095.291191][ T6040] usb 1-1: device descriptor read/8, error -71 [ 1095.412100][ T6040] usb usb1-port1: unable to enumerate USB device [ 1095.434912][ T6233] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1095.434947][ T6233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1095.434979][ T6233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1095.435005][ T6233] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1095.435065][ T6233] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1095.435090][ T6233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.511860][ T6233] usb 8-1: config 0 descriptor?? [ 1095.512808][T16878] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1095.794007][T16890] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3535'. [ 1095.927680][ T6233] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 1095.966316][ T6233] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1096.196767][ T5879] usb 8-1: USB disconnect, device number 20 [ 1096.220092][ T6233] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1096.391988][ T6233] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1096.392026][ T6233] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1096.392067][ T6233] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1096.392092][ T6233] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.459591][T16896] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1096.478230][ T6233] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1096.985624][T16837] vhci_hcd: connection reset by peer [ 1096.986948][ T3549] vhci_hcd vhci_hcd.5: stop threads [ 1096.986976][ T3549] vhci_hcd vhci_hcd.5: release socket [ 1097.011276][ T3549] vhci_hcd vhci_hcd.5: disconnect device [ 1097.079996][ T5859] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1097.192919][ T5891] usb 7-1: USB disconnect, device number 19 [ 1097.718561][ T8592] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.838412][T16948] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1097.838440][T16948] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1097.878155][T16948] vhci_hcd vhci_hcd.0: Device attached [ 1097.900146][ T6040] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1098.052560][ T6040] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1098.052596][ T6040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1098.052624][ T6040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1098.052650][ T6040] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1098.052691][ T6040] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1098.052714][ T6040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.058449][ T6040] usb 1-1: config 0 descriptor?? [ 1098.059684][T16943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1098.129269][ T5859] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1098.156146][ T5879] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1098.199875][ T5859] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 1098.382325][ T5879] usb 7-1: no configurations [ 1098.382349][ T5879] usb 7-1: can't read configurations, error -22 [ 1098.494007][ T6040] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 1098.541579][ T5879] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 1098.568945][ T6040] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1098.690978][ T5879] usb 7-1: no configurations [ 1098.691054][ T5879] usb 7-1: can't read configurations, error -22 [ 1098.691677][ T5879] usb usb7-port1: attempt power cycle [ 1098.776558][ T6198] usb 1-1: USB disconnect, device number 75 [ 1098.888415][T16975] sp0: Synchronizing with TNC [ 1098.980005][T10852] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1099.049926][ T5879] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 1099.076612][ T5879] usb 7-1: no configurations [ 1099.076634][ T5879] usb 7-1: can't read configurations, error -22 [ 1099.154727][T10852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.154762][T10852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.154802][T10852] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1099.154827][T10852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.168973][T10852] usb 6-1: config 0 descriptor?? [ 1099.200427][ T5879] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 1099.231453][ T5879] usb 7-1: no configurations [ 1099.231484][ T5879] usb 7-1: can't read configurations, error -22 [ 1099.231795][ T5879] usb usb7-port1: unable to enumerate USB device [ 1099.349873][ T9130] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1099.509957][ T9130] usb 8-1: Using ep0 maxpacket: 32 [ 1099.529408][ T9130] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1099.529436][ T9130] usb 8-1: config 0 has no interface number 0 [ 1099.531226][ T9130] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1099.576833][ T9130] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1099.576921][ T9130] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.576943][ T9130] usb 8-1: Product: syz [ 1099.576958][ T9130] usb 8-1: Manufacturer: syz [ 1099.576975][ T9130] usb 8-1: SerialNumber: syz [ 1099.653602][T10852] usbhid 6-1:0.0: can't add hid device: -71 [ 1099.653734][T10852] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1099.667703][ T9130] usb 8-1: config 0 descriptor?? [ 1099.684933][ T9130] smsc75xx v1.0.0 [ 1099.686869][T10852] usb 6-1: USB disconnect, device number 44 [ 1100.879922][T16950] vhci_hcd: connection reset by peer [ 1100.882452][ T1327] vhci_hcd vhci_hcd.6: stop threads [ 1100.882480][ T1327] vhci_hcd vhci_hcd.6: release socket [ 1100.884059][ T1327] vhci_hcd vhci_hcd.6: disconnect device [ 1100.941067][ T9130] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1100.941101][ T9130] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1100.943878][ T9130] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1100.943901][ T9130] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1100.943916][ T9130] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1100.943939][ T9130] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1100.944215][ T9130] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1101.052867][ T9130] usb 8-1: USB disconnect, device number 21 [ 1101.289983][ T5879] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1101.440642][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 1101.446906][ T5879] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 1101.446936][ T5879] usb 1-1: config 150 has no interface number 0 [ 1101.446984][ T5879] usb 1-1: config 150 interface 204 has no altsetting 0 [ 1101.447005][ T5879] usb 1-1: config 150 interface 1 has no altsetting 0 [ 1101.451154][ T5879] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1101.451239][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.451288][ T5879] usb 1-1: Product: syz [ 1101.451328][ T5879] usb 1-1: Manufacturer: syz [ 1101.451361][ T5879] usb 1-1: SerialNumber: syz [ 1101.788976][ T5879] xr_serial 1-1:150.204: xr_serial converter detected [ 1101.809552][ T5879] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1101.809614][ T5879] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1101.839508][ T5879] usb 1-1: USB disconnect, device number 76 [ 1101.879554][ T5879] xr_serial 1-1:150.204: device disconnected [ 1102.599928][T10852] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1102.639897][ T6040] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1102.752247][T10852] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1102.752280][T10852] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1102.752334][T10852] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1102.752986][T17108] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1102.753011][T17108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1102.753103][T17108] vhci_hcd vhci_hcd.0: Device attached [ 1102.815351][T10852] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1102.815381][T10852] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1102.815401][T10852] usb 8-1: Product: syz [ 1102.815415][T10852] usb 8-1: Manufacturer: syz [ 1102.851409][ T6040] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.851435][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1102.851454][ T6040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1102.851470][ T6040] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1102.851501][ T6040] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1102.851518][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.853361][T17109] vhci_hcd: cannot find the pending unlink 0 [ 1102.902538][T17109] vhci_hcd: connection closed [ 1102.905622][ T3207] vhci_hcd vhci_hcd.6: stop threads [ 1102.905705][ T3207] vhci_hcd vhci_hcd.6: release socket [ 1102.919617][T10852] cdc_wdm 8-1:1.0: skipping garbage [ 1102.938751][T10852] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1102.966691][ T3207] vhci_hcd vhci_hcd.6: disconnect device [ 1102.982267][ T6040] usb 6-1: config 0 descriptor?? [ 1103.096354][T10852] usb 8-1: USB disconnect, device number 22 [ 1103.300041][ T5859] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1103.408193][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408246][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408274][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408303][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408330][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408358][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408385][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408412][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408439][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.408466][ T6040] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1103.542347][ T6040] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1103.672320][ T6233] usb 6-1: USB disconnect, device number 45 [ 1104.380945][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3663'. [ 1105.059922][T17158] hsr_slave_1 (unregistering): left promiscuous mode [ 1105.553695][T17216] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.553714][T17216] binder: 17214:17216 ioctl 4018620d 200000000040 returned -16 [ 1107.349848][ T5859] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1107.502685][ T5859] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1107.502715][ T5859] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1107.502774][ T5859] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1107.509295][ T5859] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1107.509327][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1107.509347][ T5859] usb 1-1: Product: syz [ 1107.509362][ T5859] usb 1-1: Manufacturer: syz [ 1107.617528][ T5859] cdc_wdm 1-1:1.0: skipping garbage [ 1107.617579][ T5859] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1107.858129][ T6198] usb 1-1: USB disconnect, device number 77 [ 1107.954727][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.955735][T17343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.957096][T17343] bridge0: entered allmulticast mode [ 1108.569864][ T6040] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1108.719873][ T6040] usb 8-1: Using ep0 maxpacket: 32 [ 1108.721760][ T6040] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1108.721787][ T6040] usb 8-1: config 0 has no interface number 0 [ 1108.724510][ T6040] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1108.724540][ T6040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.724561][ T6040] usb 8-1: Product: syz [ 1108.724575][ T6040] usb 8-1: Manufacturer: syz [ 1108.724590][ T6040] usb 8-1: SerialNumber: syz [ 1108.769073][ T6040] usb 8-1: config 0 descriptor?? [ 1108.797838][ T6040] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1108.887865][T17383] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1108.887896][T17383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1108.892341][T17383] vhci_hcd vhci_hcd.0: Device attached [ 1108.903590][T17384] vhci_hcd: connection closed [ 1108.904449][ T3549] vhci_hcd vhci_hcd.5: stop threads [ 1108.904475][ T3549] vhci_hcd vhci_hcd.5: release socket [ 1108.904583][ T3549] vhci_hcd vhci_hcd.5: disconnect device [ 1108.960012][ T6233] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1109.112172][ T6233] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1109.112204][ T6233] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1109.112255][ T6233] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.114544][ T6233] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1109.114574][ T6233] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1109.114596][ T6233] usb 7-1: Product: syz [ 1109.114612][ T6233] usb 7-1: Manufacturer: syz [ 1109.192460][ T6233] cdc_wdm 7-1:1.0: skipping garbage [ 1109.192490][ T6233] cdc_wdm 7-1:1.0: skipping garbage [ 1109.192525][ T6233] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1109.408857][ T6233] usb 7-1: USB disconnect, device number 24 [ 1109.639929][ T5859] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1109.803247][ T5859] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1109.803281][ T5859] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1109.803376][ T5859] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.806636][ T5859] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1109.806670][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1109.806693][ T5859] usb 1-1: Product: syz [ 1109.806709][ T5859] usb 1-1: Manufacturer: syz [ 1109.895583][ T5859] cdc_wdm 1-1:1.0: skipping garbage [ 1109.895627][ T5859] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1110.081971][ T5891] usb 1-1: USB disconnect, device number 78 [ 1110.939951][ T6198] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1111.103567][ T6198] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1111.103597][ T6198] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1111.103618][ T6198] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1111.103667][ T6198] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1111.107807][ T6198] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1111.107841][ T6198] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1111.107864][ T6198] usb 6-1: Product: syz [ 1111.107880][ T6198] usb 6-1: Manufacturer: syz [ 1111.172827][ T6198] cdc_wdm 6-1:1.0: skipping garbage [ 1111.172876][ T6198] cdc_wdm 6-1:1.0: skipping garbage [ 1111.172915][ T6198] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1111.379105][ T5891] usb 6-1: USB disconnect, device number 46 [ 1111.439287][ T6040] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1111.439600][ T6040] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1111.457289][T17462] binder_alloc: 17461: binder_alloc_buf, no vma [ 1111.476210][ T6040] usb 8-1: USB disconnect, device number 23 [ 1112.240207][ T6198] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1112.399897][ T6198] usb 7-1: Using ep0 maxpacket: 32 [ 1112.402556][ T6198] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1112.402596][ T6198] usb 7-1: config 0 has no interface number 0 [ 1112.449945][ T6198] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1112.450080][ T6198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.450103][ T6198] usb 7-1: Product: syz [ 1112.450127][ T6198] usb 7-1: Manufacturer: syz [ 1112.450144][ T6198] usb 7-1: SerialNumber: syz [ 1112.526948][ T6198] usb 7-1: config 0 descriptor?? [ 1112.547689][ T6198] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1113.164275][ T6198] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1113.217741][ T6198] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1113.231147][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1113.255512][ T6198] usb 7-1: USB disconnect, device number 25 [ 1113.312722][ T6198] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1113.390378][ T6198] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1113.397699][ T6198] quatech2 7-1:0.51: device disconnected [ 1115.382132][ T6198] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1115.534917][ T6198] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1115.534949][ T6198] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1115.534969][ T6198] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1115.535017][ T6198] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1115.613188][ T6198] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1115.613222][ T6198] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1115.613244][ T6198] usb 7-1: Product: syz [ 1115.613261][ T6198] usb 7-1: Manufacturer: syz [ 1115.700470][ T6198] cdc_wdm 7-1:1.0: skipping garbage [ 1115.700493][ T6198] cdc_wdm 7-1:1.0: skipping garbage [ 1115.700530][ T6198] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1115.902173][ T5859] usb 7-1: USB disconnect, device number 26 [ 1116.439932][ T6198] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1116.599971][ T6198] usb 6-1: Using ep0 maxpacket: 32 [ 1116.605300][ T6198] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1116.622381][ T6198] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1116.622413][ T6198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.622436][ T6198] usb 6-1: Product: syz [ 1116.622453][ T6198] usb 6-1: Manufacturer: syz [ 1116.622469][ T6198] usb 6-1: SerialNumber: syz [ 1116.671590][ T6198] usb 6-1: config 0 descriptor?? [ 1117.140732][ T6198] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1117.971236][T17577] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1117.971267][T17577] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1117.996006][ T5859] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 1118.024094][ T6198] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1118.027670][ T6198] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 1118.080346][T17577] vhci_hcd vhci_hcd.0: Device attached [ 1118.116554][ T6198] usb 6-1: USB disconnect, device number 47 [ 1118.243452][ T5859] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1118.243491][ T5859] usb 8-1: can't read configurations, error -61 [ 1118.369979][ T5891] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1118.429938][ T5891] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1118.430327][ T5859] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 1118.584279][ T5859] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1118.584388][ T5859] usb 8-1: can't read configurations, error -61 [ 1118.584828][ T5859] usb usb8-port1: attempt power cycle [ 1118.909964][ T5879] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1118.939835][ T5859] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 1118.967213][ T5859] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1118.967252][ T5859] usb 8-1: can't read configurations, error -61 [ 1119.065335][ T5879] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1119.065367][ T5879] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1119.065393][ T5879] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1119.065431][ T5879] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1119.089926][ T5859] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 1119.136450][ T5859] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1119.136485][ T5859] usb 8-1: can't read configurations, error -61 [ 1119.136827][ T5859] usb usb8-port1: unable to enumerate USB device [ 1119.434598][ T5879] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1119.434628][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1119.434648][ T5879] usb 7-1: Product: syz [ 1119.434661][ T5879] usb 7-1: Manufacturer: syz [ 1119.502132][ T5879] cdc_wdm 7-1:1.0: skipping garbage [ 1119.502155][ T5879] cdc_wdm 7-1:1.0: skipping garbage [ 1119.502193][ T5879] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1119.681189][ T6198] usb 7-1: USB disconnect, device number 27 [ 1120.734693][T17578] vhci_hcd: connection reset by peer [ 1120.749219][ T45] vhci_hcd vhci_hcd.7: stop threads [ 1120.749248][ T45] vhci_hcd vhci_hcd.7: release socket [ 1120.749502][ T45] vhci_hcd vhci_hcd.7: disconnect device [ 1120.899924][ T6198] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1121.083255][ T6198] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1121.083288][ T6198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1121.083314][ T6198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1121.083337][ T6198] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1121.083378][ T6198] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1121.083400][ T6198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.201699][ T6198] usb 1-1: config 0 descriptor?? [ 1121.241734][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.719481][ T6198] hid_parser_main: 5 callbacks suppressed [ 1121.719505][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.719535][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.719558][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.719581][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.719605][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.719630][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.719655][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.719681][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.804428][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.804464][ T6198] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 1121.858796][ T6198] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1122.006061][ T6198] usb 1-1: USB disconnect, device number 79 [ 1122.287280][T17653] fido_id[17653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1123.550215][ T5891] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1123.656394][ T37] kauditd_printk_skb: 344 callbacks suppressed [ 1123.656415][ T37] audit: type=1326 audit(1767190389.848:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fce1f749 code=0x7ffc0000 [ 1123.656834][ T37] audit: type=1326 audit(1767190389.848:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f22fce1f749 code=0x7ffc0000 [ 1123.657524][ T37] audit: type=1326 audit(1767190389.848:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fce1f749 code=0x7ffc0000 [ 1124.850054][ T5891] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1124.999850][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 1125.002252][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.002300][ T5891] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1125.002326][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.045139][ T5891] usb 6-1: config 0 descriptor?? [ 1125.519117][ T5891] hid-multitouch 0003:0EEF:72C4.0009: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 1125.684914][ T5891] usb 6-1: USB disconnect, device number 48 [ 1125.765670][T17736] fido_id[17736]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1126.440056][ T6198] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1126.600038][ T6198] usb 1-1: Using ep0 maxpacket: 16 [ 1126.605924][ T6198] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1126.605959][ T6198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1126.645651][ T6198] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1126.645682][ T6198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.645703][ T6198] usb 1-1: Product: syz [ 1126.645719][ T6198] usb 1-1: Manufacturer: syz [ 1126.645736][ T6198] usb 1-1: SerialNumber: syz [ 1126.731956][ T6198] usb 1-1: config 0 descriptor?? [ 1126.749235][ T6198] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1129.212763][ T5859] usb 1-1: USB disconnect, device number 80 [ 1133.579853][ T6198] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1133.729967][ T6198] usb 8-1: Using ep0 maxpacket: 8 [ 1133.732335][ T6198] usb 8-1: config 150 has an invalid interface number: 204 but max is 1 [ 1133.732363][ T6198] usb 8-1: config 150 has no interface number 0 [ 1133.732411][ T6198] usb 8-1: config 150 interface 204 has no altsetting 0 [ 1133.732432][ T6198] usb 8-1: config 150 interface 1 has no altsetting 0 [ 1133.735626][ T6198] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1133.735675][ T6198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.735697][ T6198] usb 8-1: Product: syz [ 1133.735713][ T6198] usb 8-1: Manufacturer: syz [ 1133.735730][ T6198] usb 8-1: SerialNumber: syz [ 1136.337141][ T5859] usb 8-1: USB disconnect, device number 28 [ 1139.369876][ T5886] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1139.522184][ T5886] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1139.522215][ T5886] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.522245][ T5886] usb 8-1: config 0 has no interface number 0 [ 1139.522298][ T5886] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1139.522322][ T5886] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.525652][ T5886] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1139.525685][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.525708][ T5886] usb 8-1: Product: syz [ 1139.525724][ T5886] usb 8-1: Manufacturer: syz [ 1139.525741][ T5886] usb 8-1: SerialNumber: syz [ 1139.638135][ T5886] usb 8-1: config 0 descriptor?? [ 1140.090240][ T5886] usbtouchscreen 8-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1140.182081][ T5886] usb 8-1: USB disconnect, device number 29 [ 1140.992607][T18107] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1143.181659][ T8592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1143.210135][ T8592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1143.253905][ T8592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1143.255290][ T8592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1143.256128][ T8592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1144.134453][ T5859] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1144.282417][ T5859] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1144.282448][ T5859] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.282469][ T5859] usb 8-1: config 0 has no interface number 0 [ 1144.282523][ T5859] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1144.282547][ T5859] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.358969][ T5859] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1144.359001][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.359023][ T5859] usb 8-1: Product: syz [ 1144.359039][ T5859] usb 8-1: Manufacturer: syz [ 1144.359054][ T5859] usb 8-1: SerialNumber: syz [ 1144.496494][ T5859] usb 8-1: config 0 descriptor?? [ 1144.969409][ T5859] usb 8-1: USB disconnect, device number 30 [ 1145.033345][T18145] chnl_net:caif_netlink_parms(): no params data found [ 1145.309967][ T8592] Bluetooth: hci3: command tx timeout [ 1145.654829][ T9264] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1145.684765][ T9264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1145.688842][ T9264] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1145.728555][ T9264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1145.748733][ T9264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1146.800213][ T5963] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1146.962764][ T5963] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1146.962796][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.962818][ T5963] usb 8-1: config 0 has no interface number 0 [ 1146.962871][ T5963] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1146.962897][ T5963] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.027087][ T5963] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1147.027137][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.027160][ T5963] usb 8-1: Product: syz [ 1147.027177][ T5963] usb 8-1: Manufacturer: syz [ 1147.027193][ T5963] usb 8-1: SerialNumber: syz [ 1147.093691][ T5963] usb 8-1: config 0 descriptor?? [ 1147.399859][ T8592] Bluetooth: hci3: command tx timeout [ 1147.581929][ T5891] usb 8-1: USB disconnect, device number 31 [ 1147.789894][ T8592] Bluetooth: hci6: command tx timeout [ 1148.095319][T18145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.095531][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.095800][T18145] bridge_slave_0: entered allmulticast mode [ 1148.151717][T18145] bridge_slave_0: entered promiscuous mode [ 1148.215271][T18145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.215413][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.215634][T18145] bridge_slave_1: entered allmulticast mode [ 1148.264956][T18145] bridge_slave_1: entered promiscuous mode [ 1149.469813][ T8592] Bluetooth: hci3: command tx timeout [ 1149.869836][ T8592] Bluetooth: hci6: command tx timeout [ 1150.227212][T18145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.305087][T18299] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4207'. [ 1150.328460][T18145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.490301][ T5891] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 1151.549806][ T8592] Bluetooth: hci3: command tx timeout [ 1151.702621][ T5891] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1151.702662][ T5891] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1151.702688][ T5891] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1151.702716][ T5891] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1151.704204][ T5891] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.704232][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1151.704253][ T5891] usb 8-1: SerialNumber: syz [ 1151.888395][T18321] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1151.911552][ T5891] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1151.914833][ T5891] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -12 [ 1151.954847][T18145] team0: Port device team_slave_0 added [ 1151.958551][T18145] team0: Port device team_slave_1 added [ 1151.970192][ T9264] Bluetooth: hci6: command tx timeout [ 1152.097749][ T5891] usb 8-1: USB disconnect, device number 32 [ 1154.029814][ T8592] Bluetooth: hci6: command tx timeout [ 1154.970053][ T6198] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1155.127307][ T6198] usb 8-1: Using ep0 maxpacket: 32 [ 1155.137090][ T6198] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1155.137139][ T6198] usb 8-1: config 0 has no interface number 0 [ 1155.137189][ T6198] usb 8-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1155.179906][ T6198] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1155.179934][ T6198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.179950][ T6198] usb 8-1: Product: syz [ 1155.179964][ T6198] usb 8-1: Manufacturer: syz [ 1155.179976][ T6198] usb 8-1: SerialNumber: syz [ 1155.184841][ T6198] usb 8-1: config 0 descriptor?? [ 1155.243803][ T6198] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1155.489848][ T6198] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 1155.490122][ T6198] quatech2 8-1:0.51: probe with driver quatech2 failed with error -8 [ 1155.628903][T18145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.628925][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.628955][T18145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.715585][ T6198] usb 8-1: USB disconnect, device number 33 [ 1155.819185][T18145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.819204][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.819232][T18145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.166340][T18145] hsr_slave_0: entered promiscuous mode [ 1158.187750][T18145] hsr_slave_1: entered promiscuous mode [ 1158.188815][T18145] debugfs: 'hsr0' already exists in 'hsr' [ 1158.188842][T18145] Cannot create hsr debugfs directory [ 1158.189423][T18196] chnl_net:caif_netlink_parms(): no params data found [ 1167.365303][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4392'. [ 1170.829307][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4425'. [ 1171.384888][T18196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.385103][T18196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.385321][T18196] bridge_slave_0: entered allmulticast mode [ 1171.416473][T18196] bridge_slave_0: entered promiscuous mode [ 1172.703985][T18196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.704117][T18196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.704319][T18196] bridge_slave_1: entered allmulticast mode [ 1172.739959][T18196] bridge_slave_1: entered promiscuous mode [ 1175.036208][T18196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.252053][T18196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.804152][T18196] team0: Port device team_slave_0 added [ 1181.809525][T18196] team0: Port device team_slave_1 added [ 1182.678523][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.272467][T18196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.272486][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.272515][T18196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.275762][T18196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.275779][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.275813][T18196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.701804][T18196] hsr_slave_0: entered promiscuous mode [ 1186.703336][T18196] hsr_slave_1: entered promiscuous mode [ 1186.704425][T18196] debugfs: 'hsr0' already exists in 'hsr' [ 1186.704446][T18196] Cannot create hsr debugfs directory [ 1188.160175][T19180] netlink: 'syz.7.4612': attribute type 6 has an invalid length. [ 1188.199847][T19180] netlink: 'syz.7.4612': attribute type 6 has an invalid length. [ 1188.777446][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4620'. [ 1194.993654][ T9264] Bluetooth: hci0: command 0x0406 tx timeout [ 1202.692471][ T9264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1202.716097][ T9264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1202.734805][ T9264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1202.736696][ T9264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1202.737583][ T9264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1203.337262][T19547] chnl_net:caif_netlink_parms(): no params data found [ 1204.749860][ T8592] Bluetooth: hci1: command tx timeout [ 1205.573532][ T9264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1205.577833][ T9264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1205.608085][ T9264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1205.626487][ T9264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1205.629444][ T9264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1206.700653][T19547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.700864][T19547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.701152][T19547] bridge_slave_0: entered allmulticast mode [ 1206.703863][T19547] bridge_slave_0: entered promiscuous mode [ 1206.709037][T19547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.709237][T19547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.709488][T19547] bridge_slave_1: entered allmulticast mode [ 1206.810381][T19547] bridge_slave_1: entered promiscuous mode [ 1206.835692][ T8592] Bluetooth: hci1: command tx timeout [ 1207.710076][ T8592] Bluetooth: hci5: command tx timeout [ 1208.461469][ T9264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1208.466227][ T9264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1208.474955][ T9264] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1208.492613][ T9264] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1208.493518][ T9264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1208.910503][ T8592] Bluetooth: hci1: command tx timeout [ 1209.255464][T19547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.306493][T19547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.789852][ T8592] Bluetooth: hci5: command tx timeout [ 1210.591980][ T8592] Bluetooth: hci7: command tx timeout [ 1211.000186][ T8592] Bluetooth: hci1: command tx timeout [ 1211.870020][ T8592] Bluetooth: hci5: command tx timeout [ 1211.995919][T19547] team0: Port device team_slave_0 added [ 1212.074111][T19547] team0: Port device team_slave_1 added [ 1212.674330][ T8592] Bluetooth: hci7: command tx timeout [ 1213.951002][ T8592] Bluetooth: hci5: command tx timeout [ 1214.429301][T19547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.429319][T19547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.429346][T19547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.507987][T19547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.508008][T19547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.508038][T19547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.753171][ T8592] Bluetooth: hci7: command tx timeout [ 1216.829963][ T8592] Bluetooth: hci7: command tx timeout [ 1217.224989][T19547] hsr_slave_0: entered promiscuous mode [ 1217.241759][T19547] hsr_slave_1: entered promiscuous mode [ 1217.242883][T19547] debugfs: 'hsr0' already exists in 'hsr' [ 1217.242910][T19547] Cannot create hsr debugfs directory [ 1220.525367][T19615] chnl_net:caif_netlink_parms(): no params data found [ 1220.555796][T19681] chnl_net:caif_netlink_parms(): no params data found [ 1226.498979][T19615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.501079][T19615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.501364][T19615] bridge_slave_0: entered allmulticast mode [ 1226.503975][T19615] bridge_slave_0: entered promiscuous mode [ 1226.512197][T19681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.512339][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.512577][T19681] bridge_slave_0: entered allmulticast mode [ 1226.530313][T19681] bridge_slave_0: entered promiscuous mode [ 1226.542790][T19615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.542914][T19615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.543111][T19615] bridge_slave_1: entered allmulticast mode [ 1226.547218][T19615] bridge_slave_1: entered promiscuous mode [ 1226.552024][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.552148][T19681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.552351][T19681] bridge_slave_1: entered allmulticast mode [ 1226.556522][T19681] bridge_slave_1: entered promiscuous mode [ 1231.771513][T19615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.776977][T19681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.802864][T19615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.389214][T19681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.414967][T19615] team0: Port device team_slave_0 added [ 1235.208162][T19615] team0: Port device team_slave_1 added [ 1235.509347][T19681] team0: Port device team_slave_0 added [ 1236.149939][T19681] team0: Port device team_slave_1 added [ 1236.151216][T19615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.151232][T19615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1236.151262][T19615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.034866][T19615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.034885][T19615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.034914][T19615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.921412][T19681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.921432][T19681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.921463][T19681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.235677][T19681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.235697][T19681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.235729][T19681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.009282][T19615] hsr_slave_0: entered promiscuous mode [ 1242.032474][T19615] hsr_slave_1: entered promiscuous mode [ 1242.037587][T19615] debugfs: 'hsr0' already exists in 'hsr' [ 1242.037618][T19615] Cannot create hsr debugfs directory [ 1244.120030][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.987509][ T41] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.704868][T19681] hsr_slave_0: entered promiscuous mode [ 1248.718144][T19681] hsr_slave_1: entered promiscuous mode [ 1248.725743][T19681] debugfs: 'hsr0' already exists in 'hsr' [ 1248.725774][T19681] Cannot create hsr debugfs directory [ 1262.853415][ T9264] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1262.896409][ T9264] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1262.913248][ T9264] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1262.927111][ T9264] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1262.928643][ T9264] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1263.902977][T21060] chnl_net:caif_netlink_parms(): no params data found [ 1265.070521][ T9264] Bluetooth: hci8: command tx timeout [ 1265.621716][ T5801] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1265.644516][ T5801] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1265.646019][ T5801] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1265.647400][ T5801] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1265.648281][ T5801] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1266.169131][T21060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.183859][T21060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.184222][T21060] bridge_slave_0: entered allmulticast mode [ 1266.200732][T21060] bridge_slave_0: entered promiscuous mode [ 1266.208429][T21060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.208552][T21060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.208794][T21060] bridge_slave_1: entered allmulticast mode [ 1266.234534][T21060] bridge_slave_1: entered promiscuous mode [ 1266.669777][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 1267.150261][ T9264] Bluetooth: hci8: command tx timeout [ 1267.710044][ T8592] Bluetooth: hci9: command tx timeout [ 1268.791667][ T5801] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1268.816969][ T5801] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1268.818666][ T5801] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1268.854752][ T5801] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1268.856250][ T5801] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1269.164285][T21060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.240160][ T5801] Bluetooth: hci8: command tx timeout [ 1269.307068][T21060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.789934][ T5801] Bluetooth: hci9: command tx timeout [ 1270.353864][T21060] team0: Port device team_slave_0 added [ 1270.391182][T21060] team0: Port device team_slave_1 added [ 1270.910141][ T5801] Bluetooth: hci10: command tx timeout [ 1271.310123][ T5801] Bluetooth: hci8: command tx timeout [ 1271.795102][ T5801] Bluetooth: hci6: command 0x0406 tx timeout [ 1271.878916][ T5801] Bluetooth: hci9: command tx timeout [ 1272.187215][T21269] overlayfs: failed to resolve './file1': -2 [ 1273.009199][ T5801] Bluetooth: hci10: command tx timeout [ 1273.950330][ T8592] Bluetooth: hci9: command tx timeout [ 1274.620255][T21060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.620276][T21060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.620309][T21060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.814337][T21060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.814363][T21060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.814390][T21060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.070613][ T8592] Bluetooth: hci10: command tx timeout [ 1277.149999][ T8592] Bluetooth: hci10: command tx timeout [ 1277.312187][T21060] hsr_slave_0: entered promiscuous mode [ 1277.313875][T21060] hsr_slave_1: entered promiscuous mode [ 1277.314924][T21060] debugfs: 'hsr0' already exists in 'hsr' [ 1277.314948][T21060] Cannot create hsr debugfs directory [ 1284.058861][T21118] chnl_net:caif_netlink_parms(): no params data found [ 1284.283728][T21192] chnl_net:caif_netlink_parms(): no params data found [ 1289.331767][T21118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.331972][T21118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.332233][T21118] bridge_slave_0: entered allmulticast mode [ 1289.370084][T21118] bridge_slave_0: entered promiscuous mode [ 1291.332733][T21118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.332884][T21118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.347535][T21118] bridge_slave_1: entered allmulticast mode [ 1291.430330][T21118] bridge_slave_1: entered promiscuous mode [ 1291.432717][T21192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.432862][T21192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.433112][T21192] bridge_slave_0: entered allmulticast mode [ 1291.436120][T21192] bridge_slave_0: entered promiscuous mode [ 1291.724483][T21192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.724869][T21192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.725096][T21192] bridge_slave_1: entered allmulticast mode [ 1291.771207][T21192] bridge_slave_1: entered promiscuous mode [ 1294.405323][T21118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.465215][T21118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.193055][T21192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.794285][T21192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.808748][T21118] team0: Port device team_slave_0 added [ 1297.003357][T21118] team0: Port device team_slave_1 added [ 1299.028081][T21192] team0: Port device team_slave_0 added [ 1301.139091][T21192] team0: Port device team_slave_1 added [ 1301.156310][T21118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.156329][T21118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.156356][T21118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.493738][T21118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.493759][T21118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.493791][T21118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.589549][T21192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.589569][T21192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.589599][T21192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.652030][T21192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.652050][T21192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.652081][T21192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.257661][T21118] hsr_slave_0: entered promiscuous mode [ 1304.274735][T21118] hsr_slave_1: entered promiscuous mode [ 1304.275943][T21118] debugfs: 'hsr0' already exists in 'hsr' [ 1304.275970][T21118] Cannot create hsr debugfs directory [ 1305.558505][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.027104][T21192] hsr_slave_0: entered promiscuous mode [ 1307.044115][T21192] hsr_slave_1: entered promiscuous mode [ 1307.062129][T21192] debugfs: 'hsr0' already exists in 'hsr' [ 1307.062161][T21192] Cannot create hsr debugfs directory [ 1323.022299][ T5801] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1323.053771][ T5801] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1323.076726][ T5801] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1323.078608][ T5801] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1323.079495][ T5801] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1323.969542][T22544] chnl_net:caif_netlink_parms(): no params data found [ 1325.299886][ T5801] Bluetooth: hci11: command tx timeout [ 1325.716952][ T8592] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1325.754469][ T8592] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1325.758117][ T8592] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1325.779573][ T8592] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1325.781522][ T8592] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1327.295124][T22544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.295347][T22544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.295682][T22544] bridge_slave_0: entered allmulticast mode [ 1327.299970][T22544] bridge_slave_0: entered promiscuous mode [ 1327.304629][T22544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.304762][T22544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.304996][T22544] bridge_slave_1: entered allmulticast mode [ 1327.310421][ T9264] Bluetooth: hci11: command tx timeout [ 1327.325780][T22544] bridge_slave_1: entered promiscuous mode [ 1327.790288][ T9264] Bluetooth: hci12: command tx timeout [ 1328.124328][ T9264] Bluetooth: hci5: command 0x0406 tx timeout [ 1328.124374][ T9264] Bluetooth: hci1: command 0x0406 tx timeout [ 1328.819527][T22666] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1328.848584][T22666] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1328.949942][T22666] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1328.954577][T22666] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1328.958095][T22666] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1329.402243][T22613] Bluetooth: hci11: command tx timeout [ 1329.880948][ T5801] Bluetooth: hci12: command tx timeout [ 1330.220436][T22544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.393479][T22544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.081897][ T8592] Bluetooth: hci13: command tx timeout [ 1331.473599][ T8592] Bluetooth: hci11: command tx timeout [ 1331.950412][ T8592] Bluetooth: hci12: command tx timeout [ 1333.149878][ T8592] Bluetooth: hci13: command tx timeout [ 1333.236301][ T8592] Bluetooth: hci7: command 0x0406 tx timeout [ 1334.032605][ T8592] Bluetooth: hci12: command tx timeout [ 1334.532724][T22544] team0: Port device team_slave_0 added [ 1334.536455][T22544] team0: Port device team_slave_1 added [ 1335.229903][ T5801] Bluetooth: hci13: command tx timeout [ 1336.478823][T22544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.478843][T22544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.478873][T22544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.563527][T22544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.563549][T22544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.563580][T22544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.310358][ T5801] Bluetooth: hci13: command tx timeout [ 1337.948892][T22544] hsr_slave_0: entered promiscuous mode [ 1337.956767][T22544] hsr_slave_1: entered promiscuous mode [ 1337.958033][T22544] debugfs: 'hsr0' already exists in 'hsr' [ 1337.958061][T22544] Cannot create hsr debugfs directory [ 1342.512652][T22678] chnl_net:caif_netlink_parms(): no params data found [ 1342.574744][T22602] chnl_net:caif_netlink_parms(): no params data found [ 1344.595994][ T38] INFO: task syz-executor:18145 blocked for more than 143 seconds. [ 1344.596025][ T38] Tainted: G L syzkaller #0 [ 1344.596039][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1344.596050][ T38] task:syz-executor state:D stack:19656 pid:18145 tgid:18145 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1344.596112][ T38] Call Trace: [ 1344.596120][ T38] [ 1344.596136][ T38] __schedule+0x145f/0x5070 [ 1344.596187][ T38] ? check_path+0x21/0x40 [ 1344.596240][ T38] ? __pfx___schedule+0x10/0x10 [ 1344.596292][ T38] rt_mutex_schedule+0x77/0xf0 [ 1344.596329][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1344.596359][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1344.596406][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1344.596439][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1344.596470][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1344.596514][ T38] ? rcu_barrier+0x4c/0x570 [ 1344.596544][ T38] ? rcu_barrier+0x4c/0x570 [ 1344.596586][ T38] ? rcu_barrier+0x4c/0x570 [ 1344.596606][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1344.596633][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1344.596666][ T38] rcu_barrier+0x4c/0x570 [ 1344.596700][ T38] netdev_run_todo+0x327/0xea0 [ 1344.596737][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1344.596768][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 1344.596803][ T38] ? nsim_destroy+0x38d/0x680 [ 1344.596825][ T38] ? kfree+0x1bd/0x900 [ 1344.596850][ T38] ? nsim_destroy+0x38d/0x680 [ 1344.596876][ T38] nsim_destroy+0x3ae/0x680 [ 1344.596906][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 1344.596943][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 1344.596971][ T38] ? nsim_drv_remove+0x50/0x160 [ 1344.597000][ T38] nsim_drv_remove+0x58/0x160 [ 1344.597026][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1344.597050][ T38] device_release_driver_internal+0x46f/0x800 [ 1344.597085][ T38] bus_remove_device+0x355/0x450 [ 1344.597124][ T38] device_del+0x515/0x8e0 [ 1344.597161][ T38] ? __pfx_device_del+0x10/0x10 [ 1344.597201][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1344.597225][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1344.597253][ T38] device_unregister+0x21/0x100 [ 1344.597280][ T38] del_device_store+0x2aa/0x360 [ 1344.597310][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1344.597336][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1344.597368][ T38] ? sysfs_kf_write+0x166/0x260 [ 1344.597405][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1344.597435][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1344.597472][ T38] vfs_write+0x5d5/0xb40 [ 1344.597509][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1344.597538][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1344.597569][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1344.597597][ T38] ? kmem_cache_free+0x18f/0x8d0 [ 1344.597630][ T38] ? do_sys_openat2+0x15a/0x200 [ 1344.597673][ T38] ksys_write+0x14b/0x260 [ 1344.597710][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1344.597757][ T38] do_syscall_64+0xec/0xf80 [ 1344.597781][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.597804][ T38] ? trace_irq_disable+0x37/0x100 [ 1344.597829][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1344.597859][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.597882][ T38] RIP: 0033:0x7f77383fe1ff [ 1344.597911][ T38] RSP: 002b:00007ffe515f1310 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1344.597941][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f77383fe1ff [ 1344.597958][ T38] RDX: 0000000000000001 RSI: 00007ffe515f1360 RDI: 0000000000000005 [ 1344.597974][ T38] RBP: 00007f77384852cb R08: 0000000000000000 R09: 00007ffe515f1167 [ 1344.597989][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1344.598003][ T38] R13: 00007ffe515f1360 R14: 00007f7739184620 R15: 0000000000000003 [ 1344.598040][ T38] [ 1344.598052][ T38] INFO: task syz-executor:18196 blocked for more than 143 seconds. [ 1344.598071][ T38] Tainted: G L syzkaller #0 [ 1344.598084][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1344.598095][ T38] task:syz-executor state:D stack:18968 pid:18196 tgid:18196 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1344.598154][ T38] Call Trace: [ 1344.598161][ T38] [ 1344.598176][ T38] __schedule+0x145f/0x5070 [ 1344.598243][ T38] ? __pfx___schedule+0x10/0x10 [ 1344.598297][ T38] rt_mutex_schedule+0x77/0xf0 [ 1344.598333][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1344.598379][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1344.598427][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1344.598460][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1344.598491][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1344.598534][ T38] ? del_device_store+0xd1/0x360 [ 1344.598564][ T38] ? del_device_store+0xd1/0x360 [ 1344.598595][ T38] ? del_device_store+0xd1/0x360 [ 1344.598618][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1344.598653][ T38] del_device_store+0xd1/0x360 [ 1344.598677][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1344.598709][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1344.598733][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1344.598763][ T38] ? sysfs_kf_write+0x166/0x260 [ 1344.598797][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1344.598843][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1344.598878][ T38] vfs_write+0x5d5/0xb40 [ 1344.598917][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1344.598956][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1344.598986][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1344.599014][ T38] ? kmem_cache_free+0x18f/0x8d0 [ 1344.599046][ T38] ? do_sys_openat2+0x15a/0x200 [ 1344.599089][ T38] ksys_write+0x14b/0x260 [ 1344.599126][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1344.599173][ T38] do_syscall_64+0xec/0xf80 [ 1344.599196][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.599219][ T38] ? trace_irq_disable+0x37/0x100 [ 1344.599244][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1344.599273][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.599296][ T38] RIP: 0033:0x7f0346ece1ff [ 1344.599316][ T38] RSP: 002b:00007ffd47534140 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1344.599339][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f0346ece1ff [ 1344.599355][ [ 1344.599355][ T38] RDX: 0000000000000001 RSI: 00007ffd47534190 RDI: 0000000000000005 [ 1344.599371][ T38] RBP: 00007f0346f552cb R08: 0000000000000000 R09: 00007ffd47533f97 [ 1344.599387][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1344.599401][ T38] R13: 00007ffd47534190 R14: 00007f0347c54620 R15: 0000000000000003 [ 1344.599437][ T38] [ 1344.599451][ T38] INFO: task syz.7.4665:19301 blocked for more than 143 seconds. [ 1344.599469][ T38] Tainted: G L syzkaller #0 [ 1344.599482][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1344.599493][ T38] task:syz.7.4665 state:D stack:24952 pid:19301 tgid:19301 ppid:16418 task_flags:0x400040 flags:0x00080002 [ 1344.599559][ T38] Call Trace: [ 1344.599567][ T38] [ 1344.599581][ T38] __schedule+0x145f/0x5070 [ 1344.901226][ T38] ? try_to_take_rt_mutex+0x840/0xb00 [ 1344.901282][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1344.901328][ T38] ? __pfx___schedule+0x10/0x10 [ 1344.901380][ T38] rt_mutex_schedule+0x77/0xf0 [ 1344.901415][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1344.901446][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1344.901494][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1344.901529][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1344.901560][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1344.901588][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1344.901626][ T38] ? rcu_barrier+0x4c/0x570 [ 1344.901655][ T38] ? rcu_barrier+0x4c/0x570 [ 1344.901686][ T38] ? rcu_barrier+0x4c/0x570 [ 1344.901708][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1344.901736][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1344.901771][ T38] rcu_barrier+0x4c/0x570 [ 1344.901796][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1344.901819][ T38] ? rt_write_unlock+0x191/0x230 [ 1344.901863][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 1344.901897][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 1344.901929][ T38] kvm_put_kvm+0x6ca/0xa80 [ 1344.901967][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 1344.901995][ T38] kvm_vm_release+0x46/0x50 [ 1344.902023][ T38] __fput+0x45b/0xa80 [ 1344.902063][ T38] task_work_run+0x1d4/0x260 [ 1344.902102][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1344.902147][ T38] exit_to_user_mode_loop+0xef/0x4e0 [ 1344.902218][ T38] ? rcu_is_watching+0x15/0xb0 [ 1345.129904][ T38] do_syscall_64+0x2b7/0xf80 [ 1345.129936][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.129960][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1345.129986][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.130008][ T38] RIP: 0033:0x7f1bce63f749 [ 1345.130026][ T38] RSP: 002b:00007ffd00cb2898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1345.130049][ T38] RAX: 0000000000000000 RBX: 00007f1bce897da0 RCX: 00007f1bce63f749 [ 1345.130064][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1345.130077][ T38] RBP: 00007f1bce897da0 R08: 00000000000000e8 R09: 0000000700cb2b8f [ 1345.130092][ T38] R10: 00000000003ffcf4 R11: 0000000000000246 R12: 000000000012355e [ 1345.130105][ T38] R13: 00007f1bce896180 R14: ffffffffffffffff R15: 00007ffd00cb29b0 [ 1345.130139][ T38] [ 1345.130194][ T38] [ 1345.130194][ T38] Showing all locks held in the system: [ 1345.130206][ T38] 6 locks held by kworker/u8:1/13: [ 1345.130219][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1345.130283][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1345.130336][ T38] #2: ffff88803be64300 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1345.130399][ T38] #3: ffff888031960920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1345.130456][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1345.130511][ T38] #5: ffff8880b8946458 (&s->lock_key#58){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 1345.130565][ T38] 5 locks held by ktimers/0/16: [ 1345.130577][ T38] 4 locks held by pr/legacy/17: [ 1345.130589][ T38] 3 locks held by rcuc/0/20: [ 1345.130602][ T38] 3 locks held by rcuc/1/28: [ 1345.130614][ T38] 1 lock held by khungtaskd/38: [ 1345.130625][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1345.130685][ T38] 6 locks held by kworker/u8:2/41: [ 1345.130697][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1345.130746][ T38] #1: ffffc90000b37bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1345.130796][ T38] #2: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 1345.130845][ T38] #3: ffff88803317e0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 1345.131014][ T38] #4: ffff88803317d300 (&devlink->lock_key#13){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 1345.131078][ T38] #5: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1345.131132][ T38] 6 locks held by kworker/u8:3/45: [ 1345.131144][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1345.131201][ T38] #1: ffffc90000b77bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1345.131255][ T38] #2: ffff8880335a7300 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1345.131319][ T38] #3: ffff88802769d520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1345.131397][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1345.131455][ T38] #5: ffff8880b8946458 (&s->lock_key#58){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 1345.131517][ T38] 3 locks held by kworker/u8:4/68: [ 1345.131530][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1345.131591][ T38] #1: ffffc9000153fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1345.131645][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1345.131710][ T38] 6 locks held by kworker/u8:6/763: [ 1345.131746][ T38] 5 locks held by kworker/u8:13/3549: [ 1345.131766][ T38] 2 locks held by klogd/5155: [ 1345.131780][ T38] 2 locks held by getty/5554: [ 1345.131811][ T38] #0: ffff88814d6850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1345.131880][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1345.131937][ T38] 2 locks held by kworker/1:3/5859: [ 1345.131952][ T38] 2 locks held by kworker/u8:17/6115: [ 1345.131966][ T38] #0: ffff88801cf08138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1345.132024][ T38] #1: ffffc9000655fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1345.289889][ T38] 9 locks held by syz-executor/13068: [ 1345.289907][ T38] 4 locks held by syz-executor/15528: [ 1345.289924][ T38] 1 lock held by syz.0.3980/17831: [ 1345.289937][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1345.289994][ T38] 7 locks held by syz-executor/18145: [ 1345.290007][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.290074][ T38] #1: ffff88804b757478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.290130][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.290191][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.290246][ T38] #4: ffff88804ac220d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1345.290304][ T38] #5: ffff88804ac23300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1345.290362][ T38] #6: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1345.290417][ T38] 4 locks held by syz-executor/18196: [ 1345.290431][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.290495][ T38] #1: ffff88804a6dd878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.290549][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.290609][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.290670][ T38] 1 lock held by syz.7.4665/19301: [ 1345.290701][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1345.290757][ T38] 4 locks held by syz-executor/19547: [ 1345.290770][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.290837][ T38] #1: ffff88805ce82078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.290901][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.290964][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.291021][ T38] 4 locks held by syz-executor/19615: [ 1345.291035][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.291100][ T38] #1: ffff88814d733c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.291158][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.291221][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.291276][ T38] 4 locks held by syz-executor/19681: [ 1345.291290][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.291356][ T38] #1: ffff88814d732078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.291413][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.291475][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.291530][ T38] 4 locks held by syz-executor/21060: [ 1345.291543][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.291610][ T38] #1: ffff88806dfb5878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.291666][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.291729][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.291785][ T38] 4 locks held by syz-executor/21118: [ 1345.291799][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.291872][ T38] #1: ffff88805f08a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.291940][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.292001][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.292054][ T38] 4 locks held by syz-executor/21192: [ 1345.292068][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.292132][ T38] #1: ffff888059e4d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.292187][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.292247][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.292312][ T38] 4 locks held by syz-executor/22544: [ 1345.292324][ T38] #0: ffff888035900480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1345.292402][ T38] #1: ffff88808ba77878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1345.292457][ T38] #2: ffff8880272af968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1345.292517][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1345.292572][ T38] 2 locks held by syz-executor/22602: [ 1345.292585][ T38] #0: ffffffff8e021d88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1345.292648][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1345.292700][ T38] 2 locks held by syz-executor/22678: [ 1345.292714][ T38] #0: ffffffff8edb4d40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1345.292774][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1345.292830][ T38] [ 1345.292836][ T38] ============================================= [ 1345.292836][ T38] [ 1345.292853][ T38] NMI backtrace for cpu 1 [ 1345.292873][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1345.292901][ T38] Tainted: [L]=SOFTLOCKUP [ 1345.292910][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1345.292924][ T38] Call Trace: [ 1345.292934][ T38] [ 1345.292944][ T38] dump_stack_lvl+0xe8/0x150 [ 1345.292977][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1345.293008][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1345.293035][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1345.293068][ T38] sys_info+0x135/0x170 [ 1345.293093][ T38] watchdog+0xf95/0xfe0 [ 1345.293125][ T38] ? watchdog+0x20a/0xfe0 [ 1345.293169][ T38] kthread+0x711/0x8a0 [ 1345.293201][ T38] ? __pfx_watchdog+0x10/0x10 [ 1345.293223][ T38] ? __pfx_kthread+0x10/0x10 [ 1345.293251][ T38] ? rt_spin_unlock+0x150/0x200 [ 1345.293283][ T38] ? rt_spin_unlock+0x161/0x200 [ 1345.293309][ T38] ? __pfx_kthread+0x10/0x10 [ 1345.293339][ T38] ret_from_fork+0x510/0xa50 [ 1345.293365][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1345.293385][ T38] ? __switch_to+0xc9e/0x1480 [ 1345.293421][ T38] ? __pfx_kthread+0x10/0x10 [ 1345.293452][ T38] ret_from_fork_asm+0x1a/0x30 [ 1345.293499][ T38] [ 1345.293507][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1345.293547][ C0] NMI backtrace for cpu 0 [ 1345.293564][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1345.293588][ C0] Tainted: [L]=SOFTLOCKUP [ 1345.293595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1345.293606][ C0] RIP: 0010:__lock_acquire+0x32a/0x2cf0 [ 1345.293634][ C0] Code: d6 8b 54 24 20 c1 e2 0f 0f b7 d2 09 f2 41 83 e5 03 41 c1 e5 10 41 09 d5 8b 54 24 10 83 e2 01 c1 e2 12 44 09 ea c1 e3 14 09 d3 <8b> 14 24 c1 e2 13 41 c1 e4 15 41 09 d4 41 09 cc 41 09 dc 45 89 64 [ 1345.293650][ C0] RSP: 0018:ffffc90000156b70 EFLAGS: 00000006 [ 1345.293666][ C0] RAX: 0000000000000014 RBX: 0000000000020000 RCX: 000000000000000b [ 1345.293678][ C0] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1345.293689][ C0] RBP: 0000000000000004 R08: ffffffff8959a958 R09: ffffffff8d5ae940 [ 1345.293703][ C0] R10: ffffc90000156e80 R11: fffff5200002adda R12: 0000000000000000 [ 1345.293716][ C0] R13: 0000000000020000 R14: ffff88801b6e5ac0 R15: ffff88801b6e6650 [ 1345.293729][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1345.293744][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1345.293757][ C0] CR2: 00007fd5dcd656c0 CR3: 000000002f9cc000 CR4: 00000000003526f0 [ 1345.293773][ C0] Call Trace: [ 1345.293780][ C0] [ 1345.293789][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1345.293819][ C0] ? stack_trace_save+0x9c/0xe0 [ 1345.293840][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1345.293864][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1345.293890][ C0] ? l3mdev_fib_table+0x18/0x160 [ 1345.293910][ C0] lock_acquire+0x107/0x340 [ 1345.293950][ C0] ? l3mdev_fib_table+0x18/0x160 [ 1345.293971][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 1345.293991][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 1345.294010][ C0] ? nft_do_chain+0x40c/0x1920 [ 1345.294028][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 1345.294046][ C0] ? nf_hook_slow+0xc5/0x220 [ 1345.294072][ C0] ? NF_HOOK+0x206/0x3a0 [ 1345.294094][ C0] ? NF_HOOK+0x30c/0x3a0 [ 1345.294122][ C0] ? __netif_receive_skb+0x143/0x380 [ 1345.294140][ C0] ? l3mdev_fib_table+0x18/0x160 [ 1345.294161][ C0] l3mdev_fib_table+0x34/0x160 [ 1345.294181][ C0] ? l3mdev_fib_table+0x18/0x160 [ 1345.294201][ C0] inet_addr_type_dev_table+0x1f/0x50 [ 1345.294223][ C0] ip_route_me_harder+0x3db/0xf10 [ 1345.294251][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1345.294281][ C0] ? rcu_is_watching+0x15/0xb0 [ 1345.294298][ C0] ? siphash_2u64+0x25/0x2a0 [ 1345.294320][ C0] synproxy_send_tcp+0x3a7/0x700 [ 1345.294352][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 1345.294387][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1345.294416][ C0] ? nft_log_eval+0x768/0xab0 [ 1345.294442][ C0] ? synproxy_pernet+0x45/0x270 [ 1345.294464][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 1345.294487][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1345.294509][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1345.294529][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1345.294548][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1345.294570][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1345.294598][ C0] nft_do_chain+0x40c/0x1920 [ 1345.294623][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1345.294658][ C0] nft_do_chain_inet+0x25d/0x340 [ 1345.294677][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1345.294700][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1345.294724][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1345.294747][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1345.294767][ C0] nf_hook_slow+0xc5/0x220 [ 1345.294795][ C0] NF_HOOK+0x206/0x3a0 [ 1345.294831][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1345.294856][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1345.294878][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1345.294899][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1345.294923][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1345.294947][ C0] ? skb_dst+0x4f/0xd0 [ 1345.294969][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1345.294993][ C0] NF_HOOK+0x30c/0x3a0 [ 1345.295015][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1345.295038][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1345.295059][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1345.295081][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1345.295113][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1345.295153][ C0] __netif_receive_skb+0x143/0x380 [ 1345.295173][ C0] ? process_backlog+0x272/0x8f0 [ 1345.295193][ C0] process_backlog+0x315/0x8f0 [ 1345.295217][ C0] __napi_poll+0xae/0x520 [ 1345.295236][ C0] net_rx_action+0x64a/0xdb0 [ 1345.295262][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1345.295290][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1345.295317][ C0] handle_softirqs+0x1df/0x650 [ 1345.295342][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1345.295365][ C0] run_ktimerd+0x69/0x100 [ 1345.295389][ C0] smpboot_thread_fn+0x542/0xa60 [ 1345.295413][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1345.295440][ C0] kthread+0x711/0x8a0 [ 1345.295466][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1345.295490][ C0] ? __pfx_kthread+0x10/0x10 [ 1345.295514][ C0] ? rt_spin_unlock+0x150/0x200 [ 1345.295541][ C0] ? rt_spin_unlock+0x161/0x200 [ 1345.295565][ C0] ? __pfx_kthread+0x10/0x10 [ 1345.295591][ C0] ret_from_fork+0x510/0xa50 [ 1345.295612][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1345.295630][ C0] ? __switch_to+0xc9e/0x1480 [ 1345.295660][ C0] ? __pfx_kthread+0x10/0x10 [ 1345.295687][ C0] ret_from_fork_asm+0x1a/0x30 [ 1345.295722][ C0] [ 1345.296553][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1345.296577][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1345.296606][ T38] Tainted: [L]=SOFTLOCKUP [ 1345.296615][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1345.296628][ T38] Call Trace: [ 1345.296638][ T38] [ 1345.296647][ T38] vpanic+0x1e0/0x670 [ 1345.296683][ T38] panic+0xb9/0xc0 [ 1345.296713][ T38] ? __pfx_panic+0x10/0x10 [ 1345.296752][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1345.296787][ T38] watchdog+0xfdf/0xfe0 [ 1345.296816][ T38] ? watchdog+0x20a/0xfe0 [ 1345.296855][ T38] kthread+0x711/0x8a0 [ 1345.296890][ T38] ? __pfx_watchdog+0x10/0x10 [ 1345.296914][ T38] ? __pfx_kthread+0x10/0x10 [ 1345.296942][ T38] ? rt_spin_unlock+0x150/0x200 [ 1345.296976][ T38] ? rt_spin_unlock+0x161/0x200 [ 1345.297004][ T38] ? __pfx_kthread+0x10/0x10 [ 1345.297035][ T38] ret_from_fork+0x510/0xa50 [ 1345.297062][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1345.297086][ T38] ? __switch_to+0xc9e/0x1480 [ 1345.297124][ T38] ? __pfx_kthread+0x10/0x10 [ 1345.297157][ T38] ret_from_fork_asm+0x1a/0x30 [ 1345.297224][ T38] [ 1345.297834][ T38] Kernel Offset: disabled