last executing test programs: 5m23.730159117s ago: executing program 5 (id=980): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$proc_mixer(0xffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r0, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x3, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) setrlimit(0x0, &(0x7f00000003c0)={0x4, 0x100}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4b0, "0000000000f4ff00", "00000704", "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00"]}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) 5m22.40710335s ago: executing program 5 (id=982): syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="f415078807f6d8e5d630008956beb76bb69d8aae5ee308748adc607af549c702a83b4e2c6d42bac509bb61603783667f4af91eb3b9cfa4eeb06d4aa5c05e48b51e143c50256f9500866d2abb5ad49d65869cef56edd0f8d76af4035859583e756da45b432d606a72e43c202565388f843619e08fd0876e0973438b3f4df68bddf77ce3950c739f4c947605ed5f0b52e08fd5e72dc6864278ef87ceb0b612ff28f97c2d5c2c0eaf149a2f3edd9a", 0xad, 0x48004, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) poll(&(0x7f0000000080), 0x0, 0xfffffff9) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 5m16.386468011s ago: executing program 5 (id=1003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) 5m13.804052467s ago: executing program 2 (id=1013): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x8, 0x7, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000200)=0x4) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000300)={0x6, 0x9f}) 5m12.900123962s ago: executing program 2 (id=1017): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$peek(0x3, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88b81, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"10628c1965c61e00", r6}) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 5m12.018507203s ago: executing program 2 (id=1018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 5m11.705949153s ago: executing program 2 (id=1022): openat$sndseq(0xffffff9c, 0x0, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0xffffffff, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x7, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r3 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000280), &(0x7f0000000300)}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x9) 5m7.858376947s ago: executing program 2 (id=1027): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000811053000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m7.154677579s ago: executing program 2 (id=1030): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x1c0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) unshare(0x68040200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffbf}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sync() sync() sync() rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)={0x5, 0x201, 0x100, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "ecd1c4f2ceee28a8"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000980)) r6 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x541b, 0x0) 4m58.51974505s ago: executing program 32 (id=1010): sched_setaffinity(0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, 0x0, 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) 4m52.05137836s ago: executing program 33 (id=1030): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x1c0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) unshare(0x68040200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffbf}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sync() sync() sync() rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)={0x5, 0x201, 0x100, {0x77359400}, {0x77359400}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "ecd1c4f2ceee28a8"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000980)) r6 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x541b, 0x0) 12.067198173s ago: executing program 0 (id=2238): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/26, 0x1a) getdents64(0xffffffffffffffff, &(0x7f0000002400)=""/4096, 0x1000) 11.560080567s ago: executing program 0 (id=2242): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2, @time={0x2, 0x1021}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) 10.842754189s ago: executing program 7 (id=2244): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'pimreg0\x00', {}, {0xff}, 0x2f, 0x0, 0x4}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0xffffffff, 0xffffff00, 0xe3e679ad180a2bf1], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0xa00000, 0x1, 0x49, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x9e69, '\x00', @ptr=0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r4 = shmget(0x3, 0x2000, 0x1000, &(0x7f0000366000/0x2000)=nil) shmat(r4, &(0x7f00004fb000/0x1000)=nil, 0x4000) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc01cf509, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x4840) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x32, 0x0, 0x0, 0x0, 0x104, 0x3}) 10.623830068s ago: executing program 0 (id=2246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)=ANY=[], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)={0x1d}) socket$inet_sctp(0x2, 0x5, 0x84) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x0) lseek(r8, 0x2, 0x0) 10.386782749s ago: executing program 6 (id=2248): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.571848186s ago: executing program 7 (id=2249): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$peek(0x3, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88b81, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"10628c1965c61e00", r6, 0xffffffffffffffff}) ppoll(&(0x7f0000000180)=[{r6, 0x8221}, {r7, 0x87}], 0x2, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 8.221559162s ago: executing program 6 (id=2251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 8.047180198s ago: executing program 7 (id=2253): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x7fff, @empty, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) 6.33948038s ago: executing program 3 (id=2258): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 6.240046624s ago: executing program 4 (id=2259): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') 6.133165214s ago: executing program 1 (id=2260): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/70, 0x46}], 0x2}, 0x0) 5.943447471s ago: executing program 4 (id=2261): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x11}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 5.470820399s ago: executing program 1 (id=2262): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 5.17422857s ago: executing program 4 (id=2263): open(0x0, 0x80ff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x40a400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x20002) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080)=0xbb1e, 0x4) 5.172314076s ago: executing program 7 (id=2264): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x1b0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x1, 0x0}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.809976293s ago: executing program 0 (id=2265): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000001c0)=0x5, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114dc05002f0600ac141430e0000003808a8972bd0b72e4108296a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 4.682892789s ago: executing program 0 (id=2266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.563561224s ago: executing program 3 (id=2267): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000240)=""/26, 0x1a) getdents64(r1, &(0x7f0000002400)=""/4096, 0x1000) 4.540834273s ago: executing program 6 (id=2268): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.435872352s ago: executing program 1 (id=2269): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0xf8, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_matchall={{0xd}, {0x8c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x50, 0x2, [@m_ctinfo={0x4c, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x15, 0x6, "c29bbea977e4535250f2c8f19efcf1cae3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.359956423s ago: executing program 3 (id=2270): openat$sndseq(0xffffff9c, 0x0, 0x40) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000280), &(0x7f0000000300)}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) 4.336652411s ago: executing program 6 (id=2271): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/220, 0xdc}, {0x0}], 0x2}, 0xfffffff8}], 0x1, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x8, &(0x7f00000001c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getdents(r5, &(0x7f0000000fc0)=""/72, 0x48) 4.278197708s ago: executing program 1 (id=2272): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x9) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.222619355s ago: executing program 7 (id=2273): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/187, 0xbb}], 0x1) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) 4.151272438s ago: executing program 0 (id=2274): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x181}], 0x1}, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5452, &(0x7f00000001c0)) 3.335942727s ago: executing program 4 (id=2275): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x50d, &(0x7f0000000440)={0x0, 0xfeca, 0x8, 0x1, 0x3d4}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000"], 0x44}}, 0x48041) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r4, 0xfb59b128081ca7fb}, 0x14}}, 0x0) 3.232536513s ago: executing program 3 (id=2276): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x93}]}}}], 0x18}, 0x8000) 3.089459206s ago: executing program 7 (id=2277): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)=ANY=[], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)={0x1d}) socket$inet_sctp(0x2, 0x5, 0x84) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x0) lseek(r8, 0x2, 0x0) 3.043807249s ago: executing program 1 (id=2278): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.068538919s ago: executing program 3 (id=2279): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$UHID_CREATE2(r0, &(0x7f0000000880)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x4a, 0x77b4, 0x264, 0x24000, 0x3, 0x37c, "108784e83171cd437e242bcbb3008cc13a03b44f53e38b1d32ef524c532304a14261c8dced30528ed16e3ad61ad7b34c69885e1a4bd233aac510f7676c87e25a0017b732165693230deb"}}, 0x162) 802.804994ms ago: executing program 4 (id=2280): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)={0x40, 0xe, 0x15, "097b1c6e8b70e686d434dbf598e91c1b3f0d49a9ae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 427.768754ms ago: executing program 3 (id=2281): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x5}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x52, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x60}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYBLOB="21003300d08000", @ANYBLOB], 0x40}}, 0x0) 389.748634ms ago: executing program 1 (id=2282): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 372.559215ms ago: executing program 6 (id=2283): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x4, @sliced={0x0, [0xfe, 0x1, 0xfffa, 0x4, 0x858, 0x300, 0xe1, 0x6, 0x1, 0xcf, 0x7, 0x68f, 0x3589, 0x7, 0x8, 0xde6, 0x1, 0xffb1, 0x800, 0x6, 0x7ff, 0xb3d6, 0x7, 0x3, 0x101, 0x0, 0x7, 0x5, 0xc, 0x9, 0xc, 0x1, 0x3, 0xfa, 0x9, 0x5, 0x8001, 0xfffc, 0x4daf, 0xffff, 0x4df1, 0xb0, 0xffff, 0x55, 0x5, 0xfffc, 0x81, 0x3], 0x99fe}}) 27.495331ms ago: executing program 6 (id=2284): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x410) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x194024, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x5, 0xfffffffffffffffe, 0x0, 0x5}, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2285): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x5e7}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000130, 0x0) kernel console output (not intermixed with test programs): audit(1745499805.372:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 277.344266][ T30] audit: type=1326 audit(1745499805.372:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b45185927 code=0x7ffc0000 [ 278.163123][ T7957] netlink: 'syz.0.591': attribute type 2 has an invalid length. [ 278.171008][ T7957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.591'. [ 278.250018][ T7961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.589'. [ 278.298127][ T7961] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 279.482495][ T7982] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.291753][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 280.301550][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: kworker/u9:4 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 280.301580][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.301596][ T5850] Workqueue: hci2 hci_rx_work [ 280.301632][ T5850] Call Trace: [ 280.301642][ T5850] [ 280.301651][ T5850] dump_stack_lvl+0x241/0x360 [ 280.301693][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.301729][ T5850] ? __pfx__printk+0x10/0x10 [ 280.301762][ T5850] ? kernfs_path_from_node+0x2b/0x250 [ 280.301792][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.301819][ T5850] ? kernfs_path_from_node+0x217/0x250 [ 280.301847][ T5850] sysfs_create_dir_ns+0x2fd/0x3f0 [ 280.301888][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 280.301924][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.301964][ T5850] kobject_add_internal+0x435/0x8d0 [ 280.302020][ T5850] kobject_add+0x15b/0x230 [ 280.302047][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.302075][ T5850] ? do_raw_spin_unlock+0x13c/0x8b0 [ 280.302104][ T5850] ? device_add+0x3e7/0xbf0 [ 280.302131][ T5850] ? __pfx_kobject_add+0x10/0x10 [ 280.302156][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.302186][ T5850] ? _raw_spin_unlock+0x28/0x50 [ 280.302220][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.302252][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.302279][ T5850] ? get_device_parent+0x165/0x410 [ 280.302310][ T5850] device_add+0x4e5/0xbf0 [ 280.302344][ T5850] hci_conn_add_sysfs+0xe8/0x200 [ 280.302380][ T5850] le_conn_complete_evt+0xc6e/0x12a0 [ 280.302421][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 280.302443][ T5850] ? __mutex_unlock_slowpath+0x229/0x800 [ 280.302475][ T5850] ? __skb_clone+0x5c/0x6d0 [ 280.302501][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.302528][ T5850] ? skb_pull_data+0x112/0x230 [ 280.302562][ T5850] hci_le_conn_complete_evt+0x18c/0x420 [ 280.302610][ T5850] hci_event_packet+0xa5e/0x1550 [ 280.302650][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 280.302695][ T5850] ? __pfx_hci_event_packet+0x10/0x10 [ 280.302734][ T5850] ? __entry_text_end+0x1020c5/0x1020c9 [ 280.302760][ T5850] ? lockdep_hardirqs_on+0x9d/0x150 [ 280.302790][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.302817][ T5850] ? hci_send_to_monitor+0xdc/0x530 [ 280.302847][ T5850] hci_rx_work+0x3f3/0xdb0 [ 280.302893][ T5850] ? process_scheduled_works+0x9cb/0x18e0 [ 280.302932][ T5850] process_scheduled_works+0xac5/0x18e0 [ 280.303010][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.303060][ T5850] ? assign_work+0x367/0x3d0 [ 280.303104][ T5850] worker_thread+0x870/0xd50 [ 280.303145][ T5850] ? __kthread_parkme+0x1a8/0x200 [ 280.303174][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 280.303198][ T5850] kthread+0x7b9/0x940 [ 280.303229][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 280.303253][ T5850] ? __pfx_kthread+0x10/0x10 [ 280.303278][ T5850] ? __pfx_kthread+0x10/0x10 [ 280.303306][ T5850] ? __pfx_kthread+0x10/0x10 [ 280.303333][ T5850] ? __pfx_kthread+0x10/0x10 [ 280.303361][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.303387][ T5850] ? lockdep_hardirqs_on+0x9d/0x150 [ 280.303411][ T5850] ? __pfx_kthread+0x10/0x10 [ 280.303440][ T5850] ret_from_fork+0x4d/0x80 [ 280.303463][ T5850] ? __pfx_kthread+0x10/0x10 [ 280.303491][ T5850] ret_from_fork_asm+0x1a/0x30 [ 280.303534][ T5850] [ 280.303567][ T5850] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 280.649709][ T5850] Bluetooth: hci2: failed to register connection device [ 280.717048][ T7988] overlayfs: missing 'lowerdir' [ 283.001167][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 283.001191][ T30] audit: type=1326 audit(1745499812.982:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.2.612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f952bb8e969 code=0x0 [ 283.191021][ T8031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 283.982944][ T8035] overlayfs: missing 'lowerdir' [ 285.878616][ T8030] loop2: detected capacity change from 0 to 32768 [ 285.939538][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 287.057753][ T8070] netlink: 68 bytes leftover after parsing attributes in process `syz.0.623'. [ 287.109757][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 287.274895][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.478507][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.519922][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.533071][ T5917] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.547725][ T8079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.569301][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.624300][ T5917] usb 3-1: config 0 descriptor?? [ 288.227123][ T5917] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 289.059923][ T5917] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 289.497559][ T8103] input: syz1 as /devices/virtual/input/input6 [ 290.125120][ T10] libceph: connect (1)[c::]:6789 error -101 [ 290.131533][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 290.138724][ T8101] ceph: No mds server is up or the cluster is laggy [ 290.183544][ T8066] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 290.372843][ T5917] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 290.420663][ T10] libceph: connect (1)[c::]:6789 error -101 [ 290.539053][ T5917] usb 3-1: device descriptor read/64, error -32 [ 291.143550][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 291.874473][ T30] audit: type=1326 audit(1745499821.812:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f952bb8e969 code=0x0 [ 292.167180][ T8127] input: syz0 as /devices/virtual/input/input7 [ 292.394520][ T5906] usb 3-1: USB disconnect, device number 5 [ 294.122189][ T8124] loop2: detected capacity change from 0 to 32768 [ 294.199218][ T8124] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.636 (8124) [ 294.252843][ T8124] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.266665][ T8124] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 294.520894][ T8124] BTRFS info (device loop2): rebuilding free space tree [ 294.567566][ T8124] BTRFS info (device loop2): disabling free space tree [ 294.581600][ T8124] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 294.615510][ T8124] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 295.539375][ T5837] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.605619][ T8217] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 298.613544][ T8217] netlink: 208 bytes leftover after parsing attributes in process `syz.1.661'. [ 299.712227][ T8220] qrtr: Invalid version 0 [ 302.652818][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 302.662713][ T8234] bridge_slave_1: left allmulticast mode [ 302.668411][ T8234] bridge_slave_1: left promiscuous mode [ 302.675000][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.707919][ T8234] bridge_slave_0: left allmulticast mode [ 302.713675][ T8234] bridge_slave_0: left promiscuous mode [ 302.719983][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.783460][ T8235] hub 6-0:1.0: USB hub found [ 302.790246][ T8235] hub 6-0:1.0: 1 port detected [ 303.958470][ T8264] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 303.966853][ T8264] netlink: 208 bytes leftover after parsing attributes in process `syz.1.676'. [ 305.301272][ T8282] befs: (loop1): No write support. Marking filesystem read-only [ 305.310417][ T8282] syz.0.681: attempt to access beyond end of device [ 305.310417][ T8282] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 305.328219][ T8282] befs: (loop1): unable to read superblock [ 305.735587][ T8296] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 306.389901][ T8296] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 307.524268][ T8305] overlayfs: statfs failed on './file0' [ 307.977519][ T8318] netlink: 'syz.5.692': attribute type 1 has an invalid length. [ 307.985308][ T8318] netlink: 208 bytes leftover after parsing attributes in process `syz.5.692'. [ 310.181431][ T8331] overlayfs: failed to resolve './file0': -2 [ 311.027588][ T8347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.156678][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 311.946051][ T8367] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 311.954615][ T8367] netlink: 208 bytes leftover after parsing attributes in process `syz.0.710'. [ 314.490879][ T8387] snd_dummy snd_dummy.0: control 0:3:4:syz1:1 is already present [ 314.992706][ T8389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.719'. [ 315.179940][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 315.549380][ T8400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.664001][ T8392] overlayfs: statfs failed on './file0' [ 315.732696][ T8409] team0: No ports can be present during mode change [ 315.770259][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 318.089460][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 318.615409][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 318.862568][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a4adc00: rx timeout, send abort [ 319.362699][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ec7d400: rx timeout, send abort [ 319.371235][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a4adc00: abort rx timeout. Force session deactivation [ 319.475837][ T8409] team0 (unregistering): Port device team_slave_0 removed [ 319.568799][ T8409] team0 (unregistering): Port device team_slave_1 removed [ 319.748254][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.740'. [ 319.871183][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ec7d400: abort rx timeout. Force session deactivation [ 321.635173][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.780257][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 324.947847][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a7e3000: rx timeout, send abort [ 327.488562][ T8534] netlink: 96 bytes leftover after parsing attributes in process `syz.1.770'. [ 330.378551][ T5850] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 330.687633][ T8577] netlink: 96 bytes leftover after parsing attributes in process `syz.0.784'. [ 333.741365][ T8598] overlayfs: statfs failed on './file0' [ 335.335387][ T8624] netlink: 96 bytes leftover after parsing attributes in process `syz.0.801'. [ 341.104836][ T8675] netlink: 96 bytes leftover after parsing attributes in process `syz.4.818'. [ 341.240973][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033115c00: rx timeout, send abort [ 341.741101][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033116000: rx timeout, send abort [ 341.749983][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033115c00: abort rx timeout. Force session deactivation [ 341.987360][ T8688] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 342.249423][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033116000: abort rx timeout. Force session deactivation [ 344.070001][ T5904] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 345.072933][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 345.419792][ T5904] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.509682][ T5904] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.569727][ T5904] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.581020][ T8711] befs: (loop11): No write support. Marking filesystem read-only [ 345.640003][ T5904] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.649898][ T8711] syz.5.830: attempt to access beyond end of device [ 345.649898][ T8711] loop11: rw=0, sector=0, nr_sectors = 2 limit=0 [ 345.715994][ T5904] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.738556][ T8711] befs: (loop11): unable to read superblock [ 345.753062][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.888889][ T8720] netlink: 96 bytes leftover after parsing attributes in process `syz.0.833'. [ 346.024936][ T5904] usb 5-1: GET_CAPABILITIES returned 0 [ 346.056409][ T5904] usbtmc 5-1:16.0: can't read capabilities [ 346.090103][ T5906] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 346.215363][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054888000: rx timeout, send abort [ 346.302127][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.361336][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.367146][ T5904] usb 5-1: USB disconnect, device number 3 [ 346.500096][ T5906] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 346.586414][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.715464][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054888800: rx timeout, send abort [ 346.723864][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054888000: abort rx timeout. Force session deactivation [ 346.740744][ T5906] usb 3-1: config 0 descriptor?? [ 346.815371][ T8731] input: syz1 as /devices/virtual/input/input13 [ 346.983490][ T8722] warning: `syz.2.834' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 347.223807][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054888800: abort rx timeout. Force session deactivation [ 347.276646][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 347.338850][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 347.506581][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 347.519948][ T5906] usb 3-1: USB disconnect, device number 6 [ 349.150692][ T8765] befs: (loop5): No write support. Marking filesystem read-only [ 349.159393][ T8765] syz.2.847: attempt to access beyond end of device [ 349.159393][ T8765] loop5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 349.252279][ T8765] befs: (loop5): unable to read superblock [ 351.283522][ T8789] overlayfs: statfs failed on './file0' [ 351.466319][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 351.740109][ T8800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.859'. [ 352.071407][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 352.704252][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.757183][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.823260][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 352.864350][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.884211][ T9] usb 6-1: config 0 descriptor?? [ 353.123350][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 353.129476][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 353.218669][ T9] usb 6-1: USB disconnect, device number 3 [ 353.281374][ T8824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.868'. [ 353.332990][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.868'. [ 353.342769][ T8824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.868'. [ 353.352482][ T8824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.868'. [ 354.136093][ T8833] Invalid ELF header magic: != ELF [ 354.143612][ T8833] Invalid ELF header magic: != ELF [ 354.232630][ T8834] netlink: 56 bytes leftover after parsing attributes in process `syz.4.869'. [ 355.121245][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 355.394877][ T8857] input: syz1 as /devices/virtual/input/input14 [ 355.539718][ T5904] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 355.639447][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 355.679818][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 355.721071][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.750876][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 355.775605][ T5904] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 355.805983][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 355.810166][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.886369][ T5904] usb 2-1: config 0 descriptor?? [ 356.110537][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 356.121991][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 356.871456][ T5904] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 357.023066][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 357.029245][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 357.055947][ T8864] ceph: No mds server is up or the cluster is laggy [ 357.149879][ T5904] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 357.375441][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.421716][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.462029][ T5904] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 357.509728][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.557132][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 357.567976][ T8889] bridge_slave_1: left allmulticast mode [ 357.574206][ T8889] bridge_slave_1: left promiscuous mode [ 357.586825][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.602207][ T30] audit: type=1800 audit(1745499887.562:37): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.888" name="/" dev="9p" ino=2 res=0 errno=0 [ 357.603345][ T5904] usb 1-1: config 0 descriptor?? [ 357.764262][ T8889] bridge_slave_0: left allmulticast mode [ 357.770665][ T8889] bridge_slave_0: left promiscuous mode [ 357.811440][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.165610][ T5904] usbhid 1-1:0.0: can't add hid device: -71 [ 358.171870][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 358.192100][ T5904] usb 1-1: USB disconnect, device number 7 [ 358.844866][ T5902] usb 2-1: USB disconnect, device number 4 [ 359.082654][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 359.696246][ T8908] input: syz1 as /devices/virtual/input/input15 [ 359.890159][ T8912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.839253][ T5850] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 360.847632][ T5902] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 361.018709][ T5902] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.099674][ T5902] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 361.157064][ T5902] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.202833][ T5902] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 361.284737][ T5902] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 361.402057][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 361.408526][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 361.432024][ T5902] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.462804][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.499932][ T5904] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 361.509787][ T5902] usb 1-1: Product: syz [ 361.524420][ T5902] usb 1-1: Manufacturer: syz [ 361.567573][ T5902] cdc_wdm 1-1:1.0: skipping garbage [ 361.591222][ T5902] cdc_wdm 1-1:1.0: skipping garbage [ 361.663245][ T5902] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 361.691327][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.729764][ T5902] cdc_wdm 1-1:1.0: Unknown control protocol [ 361.769973][ T5904] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 361.780355][ T5902] usb 1-1: USB disconnect, device number 8 [ 361.783765][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 361.793929][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.823115][ T5903] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 361.845963][ T5904] usb 3-1: config 0 descriptor?? [ 361.852640][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 361.894274][ T5904] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 362.475870][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 362.483583][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 362.494013][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.522391][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.536887][ T8928] ceph: No mds server is up or the cluster is laggy [ 362.583105][ T5903] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 362.688208][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.719450][ T5903] usb 2-1: config 0 descriptor?? [ 362.880078][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 362.994773][ T5903] usbhid 2-1:0.0: can't add hid device: -71 [ 363.009801][ T5903] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 363.027760][ T5903] usb 2-1: USB disconnect, device number 5 [ 363.052317][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 363.581691][ T8959] input: syz1 as /devices/virtual/input/input16 [ 363.624075][ T5850] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 364.640486][ T5902] usb 3-1: USB disconnect, device number 7 [ 364.700930][ T8954] bridge_slave_1: left allmulticast mode [ 364.748150][ T8954] bridge_slave_1: left promiscuous mode [ 364.802857][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.894620][ T8954] bridge_slave_0: left allmulticast mode [ 364.917911][ T8954] bridge_slave_0: left promiscuous mode [ 364.936576][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.992132][ T8978] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.256188][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.921'. [ 365.656225][ T8968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.089467][ T2148] libceph: connect (1)[c::]:6789 error -101 [ 366.103770][ T2148] libceph: mon0 (1)[c::]:6789 connect error [ 366.113695][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 366.412606][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 366.579376][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 366.749212][ T8992] ceph: No mds server is up or the cluster is laggy [ 367.347459][ T2148] libceph: connect (1)[c::]:6789 error -101 [ 367.354864][ T2148] libceph: mon0 (1)[c::]:6789 connect error [ 367.590661][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 368.027866][ T5850] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 369.225322][ T9036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.920343][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 370.930451][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 370.985120][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 371.040622][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 371.137026][ T9050] ceph: No mds server is up or the cluster is laggy [ 371.322982][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 371.654437][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 371.707673][ T5850] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 372.070181][ T9082] Bluetooth: MGMT ver 1.23 [ 373.200233][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 373.512834][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.615561][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.648229][ T5903] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 373.659805][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.513640][ T5903] usb 5-1: config 0 descriptor?? [ 374.526571][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.959'. [ 374.535803][ T9117] bridge_slave_1: left allmulticast mode [ 374.541876][ T9117] bridge_slave_1: left promiscuous mode [ 374.547614][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.566144][ T5903] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 374.580541][ T9117] bridge_slave_0: left allmulticast mode [ 374.580570][ T9118] hub 6-0:1.0: USB hub found [ 374.586233][ T9117] bridge_slave_0: left promiscuous mode [ 374.596822][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.599828][ T9118] hub 6-0:1.0: 1 port detected [ 374.849775][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 374.855957][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 375.120320][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 375.130512][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 375.293882][ T5850] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 375.392709][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 375.499659][ T2148] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 375.557079][ T9124] ceph: No mds server is up or the cluster is laggy [ 375.679750][ T2148] usb 6-1: Using ep0 maxpacket: 8 [ 375.717363][ T2148] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 375.731484][ T2148] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 375.753152][ T2148] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 375.764554][ T2148] usb 6-1: config 250 has no interface number 0 [ 375.778578][ T2148] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 375.804223][ T2148] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 375.829891][ T2148] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.849503][ T2148] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 375.866140][ T2148] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 376.139642][ T2148] usb 6-1: config 250 interface 228 has no altsetting 0 [ 376.150899][ T2148] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 376.164137][ T2148] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 376.172662][ T2148] usb 6-1: Product: syz [ 376.176884][ T2148] usb 6-1: SerialNumber: syz [ 376.709655][ T2148] hub 6-1:250.228: bad descriptor, ignoring hub [ 376.819067][ T2148] hub 6-1:250.228: probe with driver hub failed with error -5 [ 376.850113][ T9153] team0: No ports can be present during mode change [ 376.887942][ T2148] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 376.919836][ T5903] usb 5-1: USB disconnect, device number 4 [ 377.320136][ T5902] usb 6-1: USB disconnect, device number 4 [ 377.339502][ T5902] usblp0: removed [ 377.530045][ T9164] overlayfs: missing 'workdir' [ 378.360858][ T5850] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 378.409665][ T5902] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 378.579685][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 378.599460][ T30] audit: type=1326 audit(1745499908.572:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f98e969 code=0x7ffc0000 [ 378.678700][ T30] audit: type=1326 audit(1745499908.572:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f98e969 code=0x7ffc0000 [ 378.710680][ T5902] usb 6-1: device descriptor read/all, error -71 [ 378.725228][ T30] audit: type=1326 audit(1745499908.582:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f881f98e969 code=0x7ffc0000 [ 378.840131][ T30] audit: type=1326 audit(1745499908.582:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f98e969 code=0x7ffc0000 [ 378.869728][ T30] audit: type=1326 audit(1745499908.632:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f881f98e969 code=0x7ffc0000 [ 378.903023][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 378.909226][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 379.017008][ T30] audit: type=1326 audit(1745499908.632:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f98e969 code=0x7ffc0000 [ 379.239308][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 379.287667][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 379.357572][ T9195] 9pnet_virtio: no channels available for device syz [ 380.019774][ T30] audit: type=1326 audit(1745499908.632:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f881f98e969 code=0x7ffc0000 [ 380.044203][ T30] audit: type=1326 audit(1745499908.632:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.1.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881f98e969 code=0x7ffc0000 [ 380.102334][ T9183] ceph: No mds server is up or the cluster is laggy [ 380.641668][ T9210] input: syz1 as /devices/virtual/input/input17 [ 380.779668][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 380.983374][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.034715][ T5902] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 381.078717][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.872183][ T5902] usb 2-1: config 0 descriptor?? [ 381.900160][ T5902] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 381.952215][ T5850] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 382.225390][ T9227] exFAT-fs (nullb0): invalid boot record signature [ 382.249787][ T9227] exFAT-fs (nullb0): failed to read boot sector [ 382.256073][ T9227] exFAT-fs (nullb0): failed to recognize exfat type [ 383.907785][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.001957][ T5903] usb 2-1: USB disconnect, device number 7 [ 387.766672][ T5850] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 389.101726][ T9323] lo speed is unknown, defaulting to 1000 [ 389.511106][ T9323] lo speed is unknown, defaulting to 1000 [ 389.571746][ T9323] lo speed is unknown, defaulting to 1000 [ 391.972853][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 394.394878][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 395.283688][ T9323] infiniband sz1: set active [ 395.288581][ T9323] infiniband sz1: added lo [ 395.304564][ T5906] lo speed is unknown, defaulting to 1000 [ 395.430701][ T9323] sz1: rxe_create_cq: returned err = -12 [ 395.505812][ T9323] infiniband sz1: Couldn't create ib_mad CQ [ 395.581815][ T9323] infiniband sz1: Couldn't open port 1 [ 395.685123][ T9409] lo speed is unknown, defaulting to 1000 [ 395.910870][ T9323] RDS/IB: sz1: added [ 395.930412][ T9323] smc: adding ib device sz1 with port count 1 [ 395.955643][ T9323] smc: ib device sz1 port 1 has pnetid [ 396.000204][ T5906] lo speed is unknown, defaulting to 1000 [ 397.017628][ T9323] lo speed is unknown, defaulting to 1000 [ 398.205844][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 398.533157][ T9455] hub 6-0:1.0: USB hub found [ 398.538015][ T9455] hub 6-0:1.0: 1 port detected [ 399.297865][ T9323] lo speed is unknown, defaulting to 1000 [ 401.275114][ T9478] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 401.281789][ T9478] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 401.319717][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 401.391599][ T9478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.430076][ T9478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.469942][ T9478] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 401.552458][ T9478] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 401.577052][ T9478] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.591932][ T9478] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 401.745551][ T9478] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.769280][ T9478] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 401.778825][ T9478] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 401.895159][ T9507] fuse: Bad value for 'fd' [ 402.143786][ T9323] lo speed is unknown, defaulting to 1000 [ 403.171236][ T9323] lo speed is unknown, defaulting to 1000 [ 403.403734][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 403.478635][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 403.488077][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 403.630897][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 403.789863][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 403.853795][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 403.897754][ T9531] 9pnet_virtio: no channels available for device syz [ 403.925145][ T9531] syz_tun: entered allmulticast mode [ 403.952764][ T9531] loop8: detected capacity change from 0 to 7 [ 403.998662][ T9531] Dev loop8: unable to read RDB block 7 [ 404.075339][ T9531] loop8: unable to read partition table [ 404.097814][ T9531] loop8: partition table beyond EOD, truncated [ 404.111440][ T9531] loop_reread_partitions: partition scan of loop8 (被x^>& 2t) failed (rc=-5) [ 404.134248][ T9530] syz_tun: left allmulticast mode [ 405.596730][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 405.709699][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 405.762278][ T9540] bond1 (unregistering): Released all slaves [ 405.867293][ T9323] lo speed is unknown, defaulting to 1000 [ 405.873949][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 406.589447][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.598228][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.858325][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.884750][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.892792][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 407.198940][ T9323] lo speed is unknown, defaulting to 1000 [ 407.629877][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 408.637002][ T9323] lo speed is unknown, defaulting to 1000 [ 408.989871][ T5850] Bluetooth: hci6: command tx timeout [ 409.284770][ T5917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 409.451812][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.484203][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.509337][ T5917] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 409.534823][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.689424][ T5917] usb 1-1: config 0 descriptor?? [ 410.095964][ T9609] lo speed is unknown, defaulting to 1000 [ 410.119892][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 410.127549][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 410.135222][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 410.142475][ T5917] usbhid 1-1:0.0: can't add hid device: -32 [ 410.150262][ T5917] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 410.198164][ T9609] lo speed is unknown, defaulting to 1000 [ 410.208398][ T9609] lo speed is unknown, defaulting to 1000 [ 410.209059][ T5917] usb 1-1: USB disconnect, device number 9 [ 410.298188][ T9609] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 410.373530][ T9323] syz_tun (unregistering): left allmulticast mode [ 410.386458][ T9609] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 411.112428][ T5850] Bluetooth: hci6: command tx timeout [ 411.375753][ T9609] lo speed is unknown, defaulting to 1000 [ 411.376891][ T5845] syz-executor (5845) used greatest stack depth: 17872 bytes left [ 411.749999][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.759393][ T9609] lo speed is unknown, defaulting to 1000 [ 411.768887][ T9609] lo speed is unknown, defaulting to 1000 [ 411.792043][ T9609] lo speed is unknown, defaulting to 1000 [ 411.834704][ T9609] lo speed is unknown, defaulting to 1000 [ 411.874909][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.883976][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.901395][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.909102][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.994423][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.084528][ T9609] lo speed is unknown, defaulting to 1000 [ 412.097397][ T9562] chnl_net:caif_netlink_parms(): no params data found [ 412.137499][ T9609] lo speed is unknown, defaulting to 1000 [ 412.266801][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.082996][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.151022][ T5850] Bluetooth: hci6: command tx timeout [ 413.521907][ T9631] lo speed is unknown, defaulting to 1000 [ 413.581679][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.831002][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.862815][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.893194][ T9562] bridge_slave_0: entered allmulticast mode [ 413.923286][ T9562] bridge_slave_0: entered promiscuous mode [ 413.960745][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.012488][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.041352][ T5850] Bluetooth: hci5: command tx timeout [ 414.049844][ T9562] bridge_slave_1: entered allmulticast mode [ 414.101429][ T9562] bridge_slave_1: entered promiscuous mode [ 414.504932][ T9562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.520081][ T9631] lo speed is unknown, defaulting to 1000 [ 414.554133][ T9562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.230917][ T5850] Bluetooth: hci6: command tx timeout [ 415.916816][ T9409] syz_tun (unregistering): left allmulticast mode [ 415.937888][ T9696] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1103'. [ 415.950554][ T9562] team0: Port device team_slave_0 added [ 415.955381][ T9696] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 416.097495][ T9562] team0: Port device team_slave_1 added [ 416.109902][ T5850] Bluetooth: hci5: command tx timeout [ 416.215925][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.232943][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.290024][ T9562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.311979][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.319469][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.369640][ T9562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.574963][ T9726] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1114'. [ 417.599069][ T9726] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 418.095455][ T9562] hsr_slave_0: entered promiscuous mode [ 418.122870][ T9562] hsr_slave_1: entered promiscuous mode [ 418.144261][ T9562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.162649][ T9562] Cannot create hsr debugfs directory [ 418.209847][ T5850] Bluetooth: hci5: command tx timeout [ 418.402698][ T53] hsr_slave_0: left promiscuous mode [ 418.419220][ T53] hsr_slave_1: left promiscuous mode [ 418.425818][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.440414][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.448725][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.458891][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.492702][ T53] veth1_macvtap: left promiscuous mode [ 418.510420][ T53] veth0_macvtap: left promiscuous mode [ 418.516941][ T53] veth1_vlan: left promiscuous mode [ 418.527590][ T53] veth0_vlan: left promiscuous mode [ 419.278798][ T53] team0 (unregistering): Port device team_slave_1 removed [ 419.318682][ T53] team0 (unregistering): Port device team_slave_0 removed [ 419.655314][ T3541] smc: removing ib device sz1 [ 419.750273][ T5901] lo speed is unknown, defaulting to 1000 [ 419.756115][ T5901] sz1: Port: 1 Link DOWN [ 419.812964][ T9631] chnl_net:caif_netlink_parms(): no params data found [ 420.277166][ T5850] Bluetooth: hci5: command tx timeout [ 420.797292][ T9767] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1126'. [ 420.830453][ T9767] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 420.910572][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae08c00: rx timeout, send abort [ 421.410678][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae08800: rx timeout, send abort [ 421.418915][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae08c00: abort rx timeout. Force session deactivation [ 421.724565][ T9755] lo speed is unknown, defaulting to 1000 [ 421.918905][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae08800: abort rx timeout. Force session deactivation [ 423.359156][ T9631] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.379164][ T9631] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.413950][ T9631] bridge_slave_0: entered allmulticast mode [ 423.502350][ T9631] bridge_slave_0: entered promiscuous mode [ 423.518126][ T9631] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.539678][ T9631] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.557136][ T9631] bridge_slave_1: entered allmulticast mode [ 424.116359][ T9631] bridge_slave_1: entered promiscuous mode [ 425.558610][ T9809] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1137'. [ 425.604854][ T9631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.624417][ T9809] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 425.696231][ T9631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.968406][ T9631] team0: Port device team_slave_0 added [ 426.110945][ T9631] team0: Port device team_slave_1 added [ 426.170342][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ee8c400: rx timeout, send abort [ 426.334341][ T9562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 426.368875][ T9631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.389811][ T9631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.435570][ T9631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.457161][ T9631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.467130][ T9631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.495651][ T9631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.510054][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 426.517292][ T9562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 426.567786][ T9562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 426.588846][ T9562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.670581][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ee8e400: rx timeout, send abort [ 426.678989][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ee8c400: abort rx timeout. Force session deactivation [ 426.741555][ T9631] hsr_slave_0: entered promiscuous mode [ 426.749028][ T9631] hsr_slave_1: entered promiscuous mode [ 427.178814][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ee8e400: abort rx timeout. Force session deactivation [ 427.943254][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.091397][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 428.133889][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.959723][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 428.970116][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.986570][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.017316][ T5906] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 429.029687][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.534529][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.558989][ T5906] usb 4-1: config 0 descriptor?? [ 429.686844][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.689947][ T9842] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1148'. [ 429.712965][ T9842] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 429.893934][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.949024][ T9562] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.012114][ T5906] kye 0003:0458:5016.0002: control desc unexpectedly large [ 430.076364][ T5906] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0002/input/input18 [ 430.098231][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.105721][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.205098][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3a3400: rx timeout, send abort [ 430.326285][ T5906] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0002/input/input19 [ 430.351525][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.358719][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.528118][ T5906] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 430.567889][ T5906] usb 4-1: USB disconnect, device number 3 [ 430.705195][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3a0400: rx timeout, send abort [ 430.713606][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3a3400: abort rx timeout. Force session deactivation [ 430.770108][ T9631] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 430.851098][ T9631] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.953440][ T9631] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.057620][ T9631] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 431.110967][ T53] bridge_slave_1: left allmulticast mode [ 431.116660][ T53] bridge_slave_1: left promiscuous mode [ 431.154930][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.213503][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3a0400: abort rx timeout. Force session deactivation [ 431.368312][ T53] bridge_slave_0: left allmulticast mode [ 431.374162][ T53] bridge_slave_0: left promiscuous mode [ 431.389891][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.549680][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 434.986385][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.004204][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.017695][ T53] bond0 (unregistering): Released all slaves [ 435.138902][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803285dc00: rx timeout, send abort [ 435.569821][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 435.638997][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803285fc00: rx timeout, send abort [ 435.647345][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803285dc00: abort rx timeout. Force session deactivation [ 436.147287][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803285fc00: abort rx timeout. Force session deactivation [ 436.996139][ T53] hsr_slave_0: left promiscuous mode [ 437.039691][ T53] hsr_slave_1: left promiscuous mode [ 437.057737][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.089799][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.221336][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.297727][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.716694][ T53] veth1_macvtap: left promiscuous mode [ 437.739828][ T53] veth0_macvtap: left promiscuous mode [ 437.745829][ T53] veth1_vlan: left promiscuous mode [ 437.756261][ T53] veth0_vlan: left promiscuous mode [ 437.896779][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1182'. [ 438.644964][ T9959] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 440.934709][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 441.564597][ T9974] tipc: Started in network mode [ 441.570055][ T9974] tipc: Node identity ac14140f, cluster identity 4711 [ 441.578255][ T9974] tipc: New replicast peer: 255.255.255.255 [ 441.584723][ T9974] tipc: Enabled bearer , priority 10 [ 441.654957][ T9631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.689205][ T9986] vlan0: entered promiscuous mode [ 441.808818][ T9986] team0: Port device vlan0 added [ 442.387029][ T9987] team0 (unregistering): Port device team_slave_0 removed [ 442.647486][ T9987] team0 (unregistering): Port device team_slave_1 removed [ 442.714617][ T5904] tipc: Node number set to 2886997007 [ 442.741678][ T9987] team0 (unregistering): Port device vlan0 removed [ 443.018329][ T9631] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.068182][ T9562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.136644][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.143859][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.218991][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.226224][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.399411][ T9631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.676101][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.098913][ T9562] veth0_vlan: entered promiscuous mode [ 445.205534][ T9631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.234768][ T9562] veth1_vlan: entered promiscuous mode [ 445.661441][T10059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1214'. [ 445.824659][T10055] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1214'. [ 446.205464][ T9562] veth0_macvtap: entered promiscuous mode [ 446.256706][ T9562] veth1_macvtap: entered promiscuous mode [ 446.313373][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.329918][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.374196][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.609164][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.747132][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.136533][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.147107][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.158992][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.177825][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.604290][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.604905][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.605398][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.605677][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.605843][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.606227][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.606433][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.606859][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.713048][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.742340][ T9562] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.742402][ T9562] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.742439][ T9562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.742475][ T9562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.150785][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.150813][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.793412][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.038380][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.197735][ T9631] veth0_vlan: entered promiscuous mode [ 449.264249][ T9631] veth1_vlan: entered promiscuous mode [ 449.712399][ T9631] veth0_macvtap: entered promiscuous mode [ 449.734831][ T9631] veth1_macvtap: entered promiscuous mode [ 449.783385][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.854266][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.865058][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.893523][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.072661][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.083174][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.099639][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.111693][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.862515][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.879727][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.899294][ T9631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.925057][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.949841][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.973960][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.985019][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.012660][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.144917][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.165908][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.239787][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.268464][ T9631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.284392][ T9631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.312142][ T9631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.551832][ T9631] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.570885][ T9631] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.584052][ T9631] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.593996][ T9631] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.635628][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.664946][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.857014][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.875307][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.994529][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 463.229948][T10223] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1264'. [ 463.279647][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 463.510194][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.529723][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.795334][ T5902] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 464.000328][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.860663][ T5902] usb 4-1: config 0 descriptor?? [ 465.776276][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 465.809043][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 465.843557][ T5902] usb 4-1: USB disconnect, device number 4 [ 466.254447][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1277'. [ 467.210587][T10274] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1278'. [ 467.858497][T10280] hub 6-0:1.0: USB hub found [ 467.889113][T10280] hub 6-0:1.0: 1 port detected [ 468.276874][T10287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1282'. [ 469.123111][T10304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1293'. [ 469.790149][ T9896] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 470.152290][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 470.644704][ T9896] usb 1-1: config 0 has no interfaces? [ 470.659356][ T9896] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 470.669263][ T9896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.678768][ T9896] usb 1-1: Product: syz [ 470.683664][ T9896] usb 1-1: Manufacturer: syz [ 470.688334][ T9896] usb 1-1: SerialNumber: syz [ 470.725933][ T9896] usb 1-1: config 0 descriptor?? [ 471.131723][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1290'. [ 473.019011][ T10] usb 1-1: USB disconnect, device number 10 [ 475.175006][T10365] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1310'. [ 476.278279][T10369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1312'. [ 476.948329][T10386] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 478.120274][ T30] audit: type=1326 audit(1745500008.092:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fa18e969 code=0x7ffc0000 [ 478.562432][ T30] audit: type=1326 audit(1745500008.132:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fa18e969 code=0x7ffc0000 [ 478.624562][ T30] audit: type=1326 audit(1745500008.362:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50fa18e969 code=0x7ffc0000 [ 478.686071][ T30] audit: type=1326 audit(1745500008.392:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fa18e969 code=0x7ffc0000 [ 478.708402][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.797931][ T30] audit: type=1326 audit(1745500008.402:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fa18e969 code=0x7ffc0000 [ 478.820707][ T30] audit: type=1326 audit(1745500008.402:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f50fa18e969 code=0x7ffc0000 [ 478.843666][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.883686][ T30] audit: type=1326 audit(1745500008.442:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fa18e969 code=0x7ffc0000 [ 479.050209][ T30] audit: type=1326 audit(1745500008.442:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.6.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fa18e969 code=0x7ffc0000 [ 481.736942][T10445] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 483.429326][T10468] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1344'. [ 483.473942][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1342'. [ 484.728465][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 485.007828][T10507] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1358'. [ 487.467204][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 488.454815][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1371'. [ 488.788888][ T5904] IPVS: starting estimator thread 0... [ 488.795051][T10549] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 488.800622][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1371'. [ 488.824762][T10555] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1371'. [ 488.839887][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1371'. [ 488.957303][T10558] IPVS: using max 23 ests per chain, 55200 per kthread [ 490.027425][T10565] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1375'. [ 490.449710][ T5904] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 491.299603][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 491.400911][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.463220][ T5904] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 491.496960][T10573] block device autoloading is deprecated and will be removed. [ 491.524658][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.568362][ T5904] usb 5-1: config 0 descriptor?? [ 492.002899][ T5904] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 492.035087][ T5904] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 492.063190][ T5904] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 492.113479][ T5904] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 492.162277][ T5904] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 493.831306][ T5904] usb 5-1: USB disconnect, device number 5 [ 493.972584][T10615] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1390'. [ 494.169841][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 495.089624][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 495.113470][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 495.129586][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 495.158179][ T10] usb 1-1: Product: syz [ 495.168364][ T10] usb 1-1: Manufacturer: syz [ 495.195712][ T10] usb 1-1: SerialNumber: syz [ 495.255243][ T10] usb 1-1: config 0 descriptor?? [ 495.603788][ T10] usb 1-1: USB disconnect, device number 11 [ 497.587470][T10657] tipc: Started in network mode [ 497.592581][T10657] tipc: Node identity ac14140f, cluster identity 4711 [ 497.601473][T10657] tipc: New replicast peer: 255.255.255.255 [ 497.610621][T10657] tipc: Enabled bearer , priority 10 [ 498.375034][T10661] lo speed is unknown, defaulting to 1000 [ 498.562847][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1405'. [ 498.619719][ T47] tipc: Node number set to 2886997007 [ 499.442429][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1416'. [ 499.558560][T10686] fuse: Bad value for 'fd' [ 499.619899][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 500.009568][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 500.051744][ T5906] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 500.079965][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 500.099272][ T5906] usb 2-1: Product: syz [ 500.103851][ T5906] usb 2-1: Manufacturer: syz [ 500.117272][ T5906] usb 2-1: SerialNumber: syz [ 500.154689][T10694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1420'. [ 500.158605][ T5906] usb 2-1: config 0 descriptor?? [ 500.187064][T10698] capability: warning: `syz.7.1422' uses deprecated v2 capabilities in a way that may be insecure [ 501.166476][ T5904] usb 2-1: USB disconnect, device number 8 [ 501.775010][ T5858] Bluetooth: hci5: link tx timeout [ 501.780949][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.792910][ T5850] Bluetooth: hci5: link tx timeout [ 501.798408][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.822400][ T5850] Bluetooth: hci5: link tx timeout [ 501.827577][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.835685][ T5850] Bluetooth: hci5: link tx timeout [ 501.841640][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.849642][ T5850] Bluetooth: hci5: link tx timeout [ 501.854762][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.864042][ T5850] Bluetooth: hci5: link tx timeout [ 501.869213][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.877260][ T5850] Bluetooth: hci5: link tx timeout [ 501.882463][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.890364][ T5850] Bluetooth: hci5: link tx timeout [ 501.897243][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.905723][ T5850] Bluetooth: hci5: link tx timeout [ 501.911146][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.919044][ T5850] Bluetooth: hci5: link tx timeout [ 501.924248][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.932292][ T5850] Bluetooth: hci5: link tx timeout [ 501.937478][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.945416][ T5850] Bluetooth: hci5: link tx timeout [ 501.950826][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.958799][ T5850] Bluetooth: hci5: link tx timeout [ 501.964006][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.972050][ T5850] Bluetooth: hci5: link tx timeout [ 501.994127][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.002350][ T5850] Bluetooth: hci5: link tx timeout [ 502.008262][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.045159][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1431'. [ 502.984573][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 503.102711][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1434'. [ 503.113847][T10739] bridge_slave_1: left allmulticast mode [ 503.123328][T10739] bridge_slave_1: left promiscuous mode [ 503.141265][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.298330][T10743] hub 6-0:1.0: USB hub found [ 503.310478][T10743] hub 6-0:1.0: 1 port detected [ 503.530898][T10739] bridge_slave_0: left allmulticast mode [ 503.569654][T10739] bridge_slave_0: left promiscuous mode [ 503.594309][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.870871][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 505.240279][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 505.402912][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 505.437462][ T10] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 505.459354][ T10] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 505.475593][ T10] usb 8-1: Product: syz [ 505.493330][ T10] usb 8-1: Manufacturer: syz [ 505.696954][ T10] usb 8-1: SerialNumber: syz [ 505.727765][ T10] usb 8-1: config 0 descriptor?? [ 505.816727][T10783] fuse: Unknown parameter '00000000000000000000' [ 505.930362][T10787] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1455'. [ 505.956125][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.032544][ T5901] usb 8-1: USB disconnect, device number 2 [ 506.205634][T10790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 507.066986][T10798] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 507.102199][T10798] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1458'. [ 507.329644][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 507.364996][T10806] hub 6-0:1.0: USB hub found [ 507.370984][T10806] hub 6-0:1.0: 1 port detected [ 510.303005][ T10] libceph: connect (1)[c::]:6789 error -101 [ 510.338305][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 510.348295][T10852] team0: No ports can be present during mode change [ 510.376185][T10852] vlan0: entered promiscuous mode [ 510.436145][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 510.619974][ T10] libceph: connect (1)[c::]:6789 error -101 [ 510.624526][T10860] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1474'. [ 510.633149][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 510.686016][T10852] team0: Port device vlan0 added [ 511.106583][T10846] ceph: No mds server is up or the cluster is laggy [ 511.128427][T10862] netlink: 'syz.6.1476': attribute type 1 has an invalid length. [ 511.145453][T10862] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1476'. [ 511.190107][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 511.196233][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 512.517258][T10858] team0 (unregistering): Port device team_slave_0 removed [ 512.576814][T10858] team0 (unregistering): Port device team_slave_1 removed [ 512.598885][T10858] team0 (unregistering): Port device vlan0 removed [ 514.735153][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 514.765405][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 514.975491][T10932] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 515.071668][T10932] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1490'. [ 515.254447][T10925] ceph: No mds server is up or the cluster is laggy [ 515.284372][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 515.299939][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 515.728139][T10945] netlink: 23 bytes leftover after parsing attributes in process `syz.6.1499'. [ 515.733133][T10947] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1500'. [ 515.787624][T10943] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1500'. [ 515.807544][T10952] dccp_close: ABORT with 1 bytes unread [ 515.971050][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 516.066949][T10965] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1503'. [ 516.852023][T10985] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 516.860445][T10985] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1512'. [ 517.004208][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 517.010401][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 517.318090][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 517.329826][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 517.910029][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 517.916091][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 518.087328][T11003] fuse: Bad value for 'fd' [ 518.094271][T11006] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1516'. [ 518.109754][T10990] ceph: No mds server is up or the cluster is laggy [ 518.134652][T11001] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1516'. [ 518.178378][T11005] team0: No ports can be present during mode change [ 518.277650][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 519.061335][T11005] team0 (unregistering): Port device team_slave_0 removed [ 519.126342][T11005] team0 (unregistering): Port device team_slave_1 removed [ 519.658182][T11031] netlink: 'syz.7.1526': attribute type 1 has an invalid length. [ 519.666146][T11031] netlink: 208 bytes leftover after parsing attributes in process `syz.7.1526'. [ 519.840473][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1528'. [ 520.115279][T11047] fuse: Bad value for 'fd' [ 522.769964][T11063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1536'. [ 522.859984][T11063] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 522.877701][ T9896] IPVS: starting estimator thread 0... [ 522.928513][T11069] team0: No ports can be present during mode change [ 522.942083][T11075] input: syz1 as /devices/virtual/input/input20 [ 522.969760][T11070] IPVS: using max 24 ests per chain, 57600 per kthread [ 522.997678][T11074] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 523.005764][T11074] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1540'. [ 523.064571][T11069] vlan0: entered promiscuous mode [ 523.104673][T11069] team0: Port device vlan0 added [ 523.162391][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1537'. [ 524.398293][T11076] team0 (unregistering): Port device team_slave_0 removed [ 524.454736][T11076] team0 (unregistering): Port device team_slave_1 removed [ 524.460046][ T9896] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 524.535340][T11076] team0 (unregistering): Port device vlan0 removed [ 524.769596][ T9896] usb 1-1: Using ep0 maxpacket: 8 [ 524.790004][ T9896] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 524.798362][ T9896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.544759][ T9896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.555419][ T9896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 525.566544][ T9896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.582025][ T9896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 525.599179][ T9896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.695929][T11116] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 525.703893][T11116] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1555'. [ 525.823398][ T9896] usb 1-1: usb_control_msg returned -32 [ 525.859845][ T9896] usbtmc 1-1:16.0: can't read capabilities [ 525.883047][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1556'. [ 526.113530][ T10] IPVS: starting estimator thread 0... [ 526.127817][T11120] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 526.175676][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.193391][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.242856][T11130] IPVS: using max 23 ests per chain, 55200 per kthread [ 526.551404][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.570036][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.393762][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.450437][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.491326][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.552041][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.743951][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.794054][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.940378][ T9896] usb 1-1: USB disconnect, device number 12 [ 531.447152][ T30] audit: type=1326 audit(1745500061.432:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11212 comm="syz.6.1583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50fa18e969 code=0x0 [ 532.314279][T11223] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1588'. [ 532.412269][T11231] befs: (loop1): No write support. Marking filesystem read-only [ 532.422107][T11231] syz.0.1592: attempt to access beyond end of device [ 532.422107][T11231] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 532.435344][T11231] befs: (loop1): unable to read superblock [ 533.630688][T11217] Bluetooth: hci6: command 0x0406 tx timeout [ 534.034454][T10791] IPVS: starting estimator thread 0... [ 534.151997][T11251] IPVS: using max 23 ests per chain, 55200 per kthread [ 537.382777][T11293] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 538.172595][T10791] libceph: connect (1)[c::]:6789 error -101 [ 538.219360][T10791] libceph: mon0 (1)[c::]:6789 connect error [ 538.236733][T11287] ceph: No mds server is up or the cluster is laggy [ 538.540646][T10791] libceph: connect (1)[c::]:6789 error -101 [ 538.547005][T10791] libceph: mon0 (1)[c::]:6789 connect error [ 539.226352][T10791] libceph: connect (1)[c::]:6789 error -101 [ 539.270552][T10791] libceph: mon0 (1)[c::]:6789 connect error [ 539.574677][T11315] 9pnet_virtio: no channels available for device 127.0.0.1 [ 539.594825][T11315] tipc: Enabling of bearer rejected, already enabled [ 540.151205][T11319] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1618'. [ 543.027475][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 543.202969][T11347] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 544.721673][T11365] 9pnet_virtio: no channels available for device 127.0.0.1 [ 544.742136][T11365] tipc: Enabling of bearer rejected, already enabled [ 545.604047][T11367] netlink: 'syz.4.1633': attribute type 1 has an invalid length. [ 545.612001][T11367] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1633'. [ 546.507523][T11384] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1637'. [ 547.449986][T11398] fuse: Bad value for 'fd' [ 549.357794][T11419] tipc: Enabling of bearer rejected, already enabled [ 550.339277][T11424] netlink: 'syz.7.1650': attribute type 1 has an invalid length. [ 550.347151][T11424] netlink: 208 bytes leftover after parsing attributes in process `syz.7.1650'. [ 552.035242][T11437] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 552.566704][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 552.617187][T11455] hub 6-0:1.0: USB hub found [ 552.625151][T11455] hub 6-0:1.0: 1 port detected [ 556.083961][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1673'. [ 556.215000][T11505] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1674'. [ 556.896314][ T5858] Bluetooth: hci5: link tx timeout [ 556.901959][ T5858] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 556.928380][T11217] Bluetooth: hci5: link tx timeout [ 556.933686][T11217] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 556.945636][T11217] Bluetooth: hci5: link tx timeout [ 556.950818][T11217] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 556.959982][T11217] Bluetooth: hci5: link tx timeout [ 556.965181][T11217] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 558.933311][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 559.002322][T11217] Bluetooth: hci5: command 0x0406 tx timeout [ 559.027587][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 559.167899][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1691'. [ 559.191774][T11547] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1691'. [ 559.205439][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.227390][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.298247][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 559.312863][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.356766][ T10] usb 7-1: config 0 descriptor?? [ 561.177587][ T10] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 561.224226][ T10] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 561.663282][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0004/input/input21 [ 561.742301][ T10] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 561.783818][ T10] usb 7-1: USB disconnect, device number 2 [ 561.998509][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1698'. [ 563.753257][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 565.500388][T11609] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1711'. [ 565.871360][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1713'. [ 566.039968][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 566.286051][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.504063][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.513977][ T24] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 566.526688][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.578779][ T24] usb 7-1: config 0 descriptor?? [ 567.400459][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.946924][ T24] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 568.968388][ T24] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 569.001772][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0005/input/input22 [ 570.105504][ T24] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 570.154574][ T24] usb 7-1: USB disconnect, device number 3 [ 570.617718][T11653] bond0: (slave bond_slave_0): Releasing backup interface [ 570.921217][T11653] bond0: (slave bond_slave_1): Releasing backup interface [ 571.148142][T11653] team0: Port device team_slave_0 removed [ 571.185329][T11653] team0: Port device team_slave_1 removed [ 571.220278][T11653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.235229][T11653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.248331][T11653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.263803][T11653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.313840][T10791] lo speed is unknown, defaulting to 1000 [ 571.398120][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'. [ 572.777369][T11689] hsr0: entered promiscuous mode [ 572.860499][T11689] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 574.424395][T11708] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1743'. [ 576.746751][ T9896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 576.952219][ T9896] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 576.999585][ T9896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.058756][ T9896] usb 5-1: Product: syz [ 577.069223][ T9896] usb 5-1: Manufacturer: syz [ 577.087109][ T9896] usb 5-1: SerialNumber: syz [ 577.134868][ T9896] usb 5-1: config 0 descriptor?? [ 577.387957][ T9896] hso 5-1:0.0: Failed to find BULK IN ep [ 577.418352][ T9896] usb-storage 5-1:0.0: USB Mass Storage device detected [ 577.613237][ T9896] usb 5-1: USB disconnect, device number 6 [ 578.295470][T11742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1754'. [ 578.315427][T11741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1754'. [ 579.301812][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1757'. [ 584.182647][T11823] fuse: Bad value for 'fd' [ 585.043461][T11832] input: syz1 as /devices/virtual/input/input23 [ 585.374474][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1780'. [ 585.604746][T11845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1785'. [ 585.734180][T11842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1785'. [ 587.693399][T11866] fuse: Bad value for 'fd' [ 587.947006][T11875] fuse: Bad value for 'group_id' [ 587.952951][T11875] fuse: Bad value for 'group_id' [ 588.129713][T11886] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1799'. [ 589.497010][T11905] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1802'. [ 589.545686][T11903] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1802'. [ 592.484874][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1812'. [ 593.044464][T11940] fuse: Bad value for 'group_id' [ 593.049430][T11940] fuse: Bad value for 'group_id' [ 594.959888][T11958] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'. [ 594.970313][T11956] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'. [ 595.959648][T11973] fuse: Bad value for 'group_id' [ 595.999548][T11973] fuse: Bad value for 'group_id' [ 596.558820][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 597.405733][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1834'. [ 597.666979][T11995] hub 6-0:1.0: USB hub found [ 597.679598][T11995] hub 6-0:1.0: 1 port detected [ 600.257564][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'. [ 600.569820][T12044] fuse: Bad value for 'group_id' [ 600.635909][T12044] fuse: Bad value for 'group_id' [ 601.249920][T12058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1847'. [ 603.119803][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1851'. [ 603.296985][T12071] hub 6-0:1.0: USB hub found [ 603.302272][T12071] hub 6-0:1.0: 1 port detected [ 603.399102][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1853'. [ 605.968534][T12103] fuse: Bad value for 'group_id' [ 606.000636][T12103] fuse: Bad value for 'group_id' [ 607.596336][T12118] fuse: Bad value for 'group_id' [ 607.611107][T12118] fuse: Bad value for 'group_id' [ 608.279691][ T9896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 608.547772][ T9896] usb 4-1: Using ep0 maxpacket: 16 [ 608.559097][ T9896] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 608.620344][ T9896] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 608.658610][ T9896] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 608.832397][ T9896] usb 4-1: Product: syz [ 608.837184][ T9896] usb 4-1: Manufacturer: syz [ 608.841848][ T9896] usb 4-1: SerialNumber: syz [ 608.854732][ T9896] usb 4-1: config 0 descriptor?? [ 609.705525][ T9896] usb 4-1: USB disconnect, device number 5 [ 610.382161][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1870'. [ 610.441197][T12135] hub 6-0:1.0: USB hub found [ 610.467926][T12135] hub 6-0:1.0: 1 port detected [ 610.479167][T12140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1871'. [ 610.688912][T12144] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 610.696913][T12144] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1872'. [ 611.794729][T12161] fuse: Bad value for 'group_id' [ 611.807560][T12161] fuse: Bad value for 'group_id' [ 612.876313][T12165] fuse: Bad value for 'group_id' [ 612.925557][T12165] fuse: Bad value for 'group_id' [ 614.349716][T10791] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 614.406589][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 614.427998][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1888'. [ 614.438886][T12192] netlink: 'syz.3.1888': attribute type 6 has an invalid length. [ 615.168956][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1889'. [ 615.263564][T12200] hub 6-0:1.0: USB hub found [ 615.294508][T12200] hub 6-0:1.0: 1 port detected [ 615.409770][T10791] usb 5-1: Using ep0 maxpacket: 16 [ 615.416625][T10791] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 615.435788][T10791] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 615.449511][T10791] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 615.457612][T10791] usb 5-1: Product: syz [ 615.498835][T10791] usb 5-1: Manufacturer: syz [ 615.511573][T10791] usb 5-1: SerialNumber: syz [ 615.528299][T10791] usb 5-1: config 0 descriptor?? [ 615.900064][ T24] usb 5-1: USB disconnect, device number 7 [ 617.997560][T12230] fuse: Bad value for 'group_id' [ 618.008626][T12230] fuse: Bad value for 'group_id' [ 618.430452][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 618.437295][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 618.742840][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 619.129732][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 619.172913][T12238] ceph: No mds server is up or the cluster is laggy [ 619.606531][T12259] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1906'. [ 620.772947][T12267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1907'. [ 623.152088][ T9896] libceph: connect (1)[c::]:6789 error -101 [ 623.158874][ T9896] libceph: mon0 (1)[c::]:6789 connect error [ 623.411858][T12298] ceph: No mds server is up or the cluster is laggy [ 623.420681][ T9896] libceph: connect (1)[c::]:6789 error -101 [ 623.452149][ T9896] libceph: mon0 (1)[c::]:6789 connect error [ 623.838390][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1921'. [ 624.378438][T12316] vlan0: entered promiscuous mode [ 624.473831][T12318] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1924'. [ 624.836162][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1923'. [ 625.288497][T12316] team0: Port device vlan0 added [ 627.510257][ T5902] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 627.707697][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 627.754040][ T5902] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 627.829156][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 627.860522][ T5902] usb 7-1: Product: syz [ 627.864717][ T5902] usb 7-1: Manufacturer: syz [ 627.913998][ T5902] usb 7-1: SerialNumber: syz [ 628.127220][ T5902] usb 7-1: config 0 descriptor?? [ 628.844722][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.047827][ T5902] usb 7-1: USB disconnect, device number 4 [ 629.181674][T12357] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1937'. [ 630.387335][T12361] libceph: resolve '00.' (ret=-3): failed [ 631.339662][T12388] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1942'. [ 631.513729][T12391] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1947'. [ 632.231640][T12405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 632.518920][T12403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 632.840114][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 632.860521][ T5902] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 632.965542][T12413] bond0: (slave bond_slave_0): Releasing backup interface [ 633.019686][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 633.029506][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 633.040951][ T5902] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 633.044190][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 633.060935][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.073289][T12413] bond0: (slave bond_slave_1): Releasing backup interface [ 633.099789][ T24] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 633.113273][ T24] usb 2-1: Product: syz [ 633.117463][ T24] usb 2-1: Manufacturer: syz [ 633.122204][ T5902] usb 4-1: config 0 descriptor?? [ 633.164479][ T24] usb 2-1: SerialNumber: syz [ 633.204090][ T24] usb 2-1: config 0 descriptor?? [ 633.209375][T12413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.220355][T12413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.261283][T12413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.268943][T12413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.362300][ T5902] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 633.387154][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 633.398002][T12419] befs: (loop13): No write support. Marking filesystem read-only [ 633.420810][ T5902] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 633.451745][T12419] syz.6.1958: attempt to access beyond end of device [ 633.451745][T12419] loop13: rw=0, sector=0, nr_sectors = 2 limit=0 [ 633.463919][ T5902] usb 4-1: media controller created [ 633.489852][T12419] befs: (loop13): unable to read superblock [ 633.513516][ T5906] usb 2-1: USB disconnect, device number 9 [ 633.582360][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.706907][T12422] fuse: Bad value for 'fd' [ 634.218079][ T5902] az6027: usb out operation failed. (-71) [ 634.284324][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1962'. [ 634.478293][ T5902] stb0899_attach: Driver disabled by Kconfig [ 634.512164][ T5902] az6027: no front-end attached [ 634.512164][ T5902] [ 634.553790][ T5902] az6027: usb out operation failed. (-71) [ 634.556290][ T5902] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 634.849125][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 634.867512][ T5902] dvb-usb: schedule remote query interval to 400 msecs. [ 634.867541][ T5902] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 634.879643][ T5902] usb 4-1: USB disconnect, device number 6 [ 634.995744][T12429] hub 6-0:1.0: USB hub found [ 634.996001][T12429] hub 6-0:1.0: 1 port detected [ 635.115837][ T5902] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 635.121480][T12450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1966'. [ 635.121769][T12445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1966'. [ 635.963469][T12482] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1976'. [ 635.997440][T12484] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1982'. [ 636.006623][T12484] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1982'. [ 636.037248][T12484] dummy0: entered promiscuous mode [ 636.065401][T12484] dummy0: left promiscuous mode [ 636.089588][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 636.119839][ T5902] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 636.260867][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 636.285175][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 636.294278][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 636.314349][ T5902] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 636.334906][ T24] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 636.349689][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.367589][ T24] usb 5-1: Product: syz [ 636.387349][ T24] usb 5-1: Manufacturer: syz [ 636.406429][ T5902] usb 2-1: config 0 descriptor?? [ 636.416226][ T24] usb 5-1: SerialNumber: syz [ 636.454807][ T24] usb 5-1: config 0 descriptor?? [ 636.636142][ T5902] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 636.662735][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 636.688312][ T5902] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 636.708760][ T5906] usb 5-1: USB disconnect, device number 8 [ 636.710627][ T5902] usb 2-1: media controller created [ 636.807837][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.159096][T12517] __nla_validate_parse: 1 callbacks suppressed [ 637.159119][T12517] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1993'. [ 637.310255][ T5902] az6027: usb out operation failed. (-71) [ 637.317366][ T5902] stb0899_attach: Driver disabled by Kconfig [ 637.326247][ T5902] az6027: no front-end attached [ 637.326247][ T5902] [ 637.357359][ T5902] az6027: usb out operation failed. (-71) [ 637.373076][ T5902] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 637.393894][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 637.431413][ T5902] dvb-usb: schedule remote query interval to 400 msecs. [ 637.448739][ T5902] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 637.472088][ T5902] usb 2-1: USB disconnect, device number 10 [ 637.556613][T12533] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1998'. [ 637.571920][ T5902] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 637.663970][ T5858] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 638.059755][ T5902] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 638.118765][T12544] fuse: Unknown parameter 'group_id00000000000000000000' [ 638.686088][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2012'. [ 638.710227][ T5902] usb 8-1: Using ep0 maxpacket: 16 [ 638.721720][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 638.736324][ T5902] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 638.781932][ T5902] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 638.798868][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.819749][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 638.844084][ T5902] usb 8-1: Product: syz [ 638.848314][ T5902] usb 8-1: Manufacturer: syz [ 638.869600][ T5902] usb 8-1: SerialNumber: syz [ 638.877104][ T5902] usb 8-1: config 0 descriptor?? [ 638.896361][T12533] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 638.920498][ T5902] hub 8-1:0.0: bad descriptor, ignoring hub [ 638.926434][ T5902] hub 8-1:0.0: probe with driver hub failed with error -5 [ 638.947491][ T5902] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input26 [ 639.000615][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 639.032308][ T5906] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 639.050455][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 639.058583][ T5906] usb 2-1: Product: syz [ 639.081359][T10791] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 639.093156][ T5906] usb 2-1: Manufacturer: syz [ 639.103229][ T5906] usb 2-1: SerialNumber: syz [ 639.121565][ T5906] usb 2-1: config 0 descriptor?? [ 639.199571][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 639.239876][T10791] usb 7-1: Using ep0 maxpacket: 32 [ 639.260269][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 639.278082][T10791] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 639.305113][T10791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.311584][T12584] hub 6-0:1.0: USB hub found [ 639.324397][T12584] hub 6-0:1.0: 1 port detected [ 639.345635][T10791] usb 7-1: config 0 descriptor?? [ 639.370673][ T5906] usb 2-1: USB disconnect, device number 11 [ 639.379590][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 639.388301][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 639.404393][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.469305][ T24] usb 5-1: config 0 descriptor?? [ 639.572295][T10791] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 639.585595][T10791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 639.606448][T10791] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 639.616534][T10791] usb 7-1: media controller created [ 639.657405][T10791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 639.838521][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 639.862355][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 639.890353][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 639.897785][ T24] usb 5-1: media controller created [ 640.506571][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.660384][T10791] az6027: usb out operation failed. (-71) [ 640.666432][T10791] stb0899_attach: Driver disabled by Kconfig [ 640.686528][T10791] az6027: no front-end attached [ 640.686528][T10791] [ 640.699674][T10791] az6027: usb out operation failed. (-71) [ 640.705949][T10791] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 640.731768][T10791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 640.781819][ T24] az6027: usb out operation failed. (-71) [ 640.788919][T10791] dvb-usb: schedule remote query interval to 400 msecs. [ 640.823877][T10791] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 640.895988][T10791] usb 7-1: USB disconnect, device number 5 [ 640.924152][ T24] az6027: usb out operation failed. (-71) [ 641.139373][ T10] usb 8-1: USB disconnect, device number 3 [ 641.227916][ T24] stb0899_attach: Driver disabled by Kconfig [ 641.270970][ T24] az6027: no front-end attached [ 641.270970][ T24] [ 641.352786][ T24] az6027: usb out operation failed. (-71) [ 641.359771][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 641.434850][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 641.542576][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2027'. [ 641.597374][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 641.635016][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 641.670490][ T24] usb 5-1: USB disconnect, device number 9 [ 641.728330][T12608] team0: Mode changed to "loadbalance" [ 641.959337][T10791] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 641.997060][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 642.012078][T12624] hub 6-0:1.0: USB hub found [ 642.017094][T12624] hub 6-0:1.0: 1 port detected [ 642.170004][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 643.048053][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2039'. [ 645.086122][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 645.124260][T12683] hub 6-0:1.0: USB hub found [ 645.129099][T12683] hub 6-0:1.0: 1 port detected [ 645.600227][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 645.925754][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2053'. [ 646.520092][T12710] libceph: resolve '00.' (ret=-3): failed [ 647.985103][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2064'. [ 648.069557][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 648.097860][T12733] hub 6-0:1.0: USB hub found [ 648.148662][T12733] hub 6-0:1.0: 1 port detected [ 648.272252][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 648.302067][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 648.370873][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.409795][ T10] usb 4-1: Product: ц [ 648.413990][ T10] usb 4-1: Manufacturer: 䔪懝罄䱔冷崺랄桮ᳫꍌ䍶矛擎䵪锔䆂嘧ウ혜伲嚡⁰쿟妽꿝鲟鮔቙锝ﹸ鏢榰뵽뛵芺쳃ⴅ놬ᅐ谋ꎢ귽赏쬥ꗄబ懣㫀嶽訦Ꮏ꫐్뼇굆汽䂕⿨ [ 648.518912][ T10] usb 4-1: SerialNumber: 廞㶵ᰧ誗ཾ䢥좚㷬䄩俰ꖳꅟ졖桟闏秭ᡕ㢲坥霡峢粂跚峙媰 [ 648.923923][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.876448][ T10] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 649.913727][ T10] usb 4-1: USB disconnect, device number 7 [ 651.897093][T12786] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2080'. [ 652.683007][T12788] fuse: Bad value for 'group_id' [ 652.709588][T12788] fuse: Bad value for 'group_id' [ 656.298533][T12840] fuse: Bad value for 'group_id' [ 656.319887][T12840] fuse: Bad value for 'group_id' [ 658.699694][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 658.880099][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 658.903474][ T10] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 658.933198][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.958238][ T10] usb 8-1: config 0 descriptor?? [ 659.182296][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 659.202731][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.216524][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 659.272421][ T10] usb 8-1: media controller created [ 659.325710][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.383749][ T10] az6027: usb out operation failed. (-71) [ 659.394406][ T10] az6027: usb out operation failed. (-71) [ 659.409621][ T10] stb0899_attach: Driver disabled by Kconfig [ 659.415804][ T10] az6027: no front-end attached [ 659.415804][ T10] [ 659.428085][ T10] az6027: usb out operation failed. (-71) [ 659.439287][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 659.459303][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input29 [ 659.484453][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 659.491764][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 659.502985][ T10] usb 8-1: USB disconnect, device number 4 [ 659.636890][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 659.950804][T12899] fuse: Bad value for 'group_id' [ 659.974797][T12899] fuse: Bad value for 'group_id' [ 661.468882][T12925] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2123'. [ 661.879557][ T5906] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 662.997916][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 664.789392][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 664.795520][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 664.819559][ T5901] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 664.869693][T10791] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 664.991855][ T5901] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 665.018732][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.029531][T10791] usb 7-1: Using ep0 maxpacket: 32 [ 665.054144][T10791] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 665.086254][ T5901] usb 1-1: Product: syz [ 665.109493][T10791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.117705][ T5901] usb 1-1: Manufacturer: syz [ 665.155023][ T5901] usb 1-1: SerialNumber: syz [ 665.199341][T10791] usb 7-1: config 0 descriptor?? [ 665.205065][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 665.219113][ T5901] usb 1-1: config 0 descriptor?? [ 665.239241][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 665.551867][T10791] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 665.571743][ T5901] hso 1-1:0.0: Failed to find BULK IN ep [ 665.585374][T12954] ceph: No mds server is up or the cluster is laggy [ 665.654898][T10791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 665.686068][ T5901] usb-storage 1-1:0.0: USB Mass Storage device detected [ 665.717656][T10791] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 665.772619][T10791] usb 7-1: media controller created [ 665.859543][ T5901] usb 1-1: USB disconnect, device number 13 [ 665.901795][T10791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.060932][T10791] az6027: usb out operation failed. (-71) [ 666.093846][T10791] az6027: usb out operation failed. (-71) [ 666.208920][T10791] stb0899_attach: Driver disabled by Kconfig [ 666.215037][T10791] az6027: no front-end attached [ 666.215037][T10791] [ 666.222908][T10791] az6027: usb out operation failed. (-71) [ 666.228663][T10791] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 666.246047][T10791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30 [ 666.369862][T10791] dvb-usb: schedule remote query interval to 400 msecs. [ 666.402843][T10791] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 666.436414][T10791] usb 7-1: USB disconnect, device number 6 [ 666.553660][T12975] fuse: Unknown parameter 'group_id00000000000000000000' [ 666.745749][T10791] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 666.893756][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 666.927327][ T5906] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 667.157281][ T5906] usb 2-1: can't read configurations, error -71 [ 670.229597][ T5906] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 670.949525][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 671.089403][ T5906] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 671.098836][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.120743][ T5906] usb 5-1: config 0 descriptor?? [ 671.345676][ T5906] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 671.455464][ T5906] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 671.485241][T13028] fuse: Unknown parameter 'group_id00000000000000000000' [ 671.529644][ T5906] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 672.208184][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2156'. [ 672.421353][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'. [ 673.520449][T13055] fuse: Bad value for 'group_id' [ 673.525452][T13055] fuse: Bad value for 'group_id' [ 675.519780][ T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 675.689601][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 675.707597][ T47] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 675.732827][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.762445][ T47] usb 2-1: config 0 descriptor?? [ 676.038795][ T47] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 677.030330][T13107] fuse: Bad value for 'group_id' [ 677.035423][T13107] fuse: Bad value for 'group_id' [ 679.849756][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 680.016405][ T24] usb 1-1: config 195 has too many interfaces: 69, using maximum allowed: 32 [ 680.051910][ T24] usb 1-1: config 195 has an invalid descriptor of length 80, skipping remainder of the config [ 680.159026][T13153] fuse: Unknown parameter 'group_id00000000000000000000' [ 680.345423][ T24] usb 1-1: config 195 has 0 interfaces, different from the descriptor's value: 69 [ 680.444866][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 680.490896][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.599879][ T5901] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 680.771583][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 680.792908][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 680.812110][T13148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.833982][ T5901] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 680.918172][T13167] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2198'. [ 680.989277][T13148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.086752][T13148] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2191'. [ 681.689504][ T5901] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.703572][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0 [ 681.713051][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 681.722198][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.733139][ T5901] usb 4-1: Product: syz [ 681.737321][ T5901] usb 4-1: Manufacturer: syz [ 681.742018][ T5901] usb 4-1: SerialNumber: syz [ 681.792954][T13160] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 682.086983][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input31 [ 682.507153][ C1] bcm5974 4-1:1.0: trackpad urb failed: -1 [ 682.692560][ T5901] usb 4-1: USB disconnect, device number 8 [ 682.698561][ T5193] bcm5974 4-1:1.0: could not read from device [ 682.711984][ T5193] bcm5974 4-1:1.0: could not read from device [ 682.850131][T13181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2204'. [ 683.945648][ T30] audit: type=1326 audit(1745500213.702:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 684.312071][ T30] audit: type=1326 audit(1745500213.702:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 684.421671][ T24] usb 1-1: string descriptor 0 read error: -71 [ 684.432484][ T30] audit: type=1326 audit(1745500213.702:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 684.441417][ T24] usb 1-1: USB disconnect, device number 14 [ 684.621159][T13200] fuse: Unknown parameter 'group_id00000000000000000000' [ 684.638205][ T30] audit: type=1326 audit(1745500213.702:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 684.717557][ T30] audit: type=1326 audit(1745500213.702:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 684.891457][ T30] audit: type=1326 audit(1745500213.702:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 685.063573][ T30] audit: type=1326 audit(1745500213.702:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 685.239953][ T30] audit: type=1326 audit(1745500213.702:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 685.450655][ T30] audit: type=1326 audit(1745500213.702:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 685.585556][ T30] audit: type=1326 audit(1745500213.702:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13187 comm="syz.3.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4518e969 code=0x7ffc0000 [ 685.724549][T13210] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2211'. [ 686.840560][T13215] befs: (loop1): No write support. Marking filesystem read-only [ 686.876168][T13215] syz.0.2213: attempt to access beyond end of device [ 686.876168][T13215] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 686.892055][T13215] befs: (loop1): unable to read superblock [ 687.808446][T13227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2218'. [ 687.892223][T13235] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2219'. [ 687.939963][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2219'. [ 687.975721][T13237] fuse: Unknown parameter 'group_id00000000000000000000' [ 687.992501][T13235] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2219'. [ 688.004290][T13235] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2219'. [ 688.422190][T13246] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2224'. [ 689.600160][T13262] befs: (loop15): No write support. Marking filesystem read-only [ 689.615094][T13265] netlink: 'syz.6.2232': attribute type 1 has an invalid length. [ 689.655771][T13265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.670839][T13262] syz.7.2230: attempt to access beyond end of device [ 689.670839][T13262] loop15: rw=0, sector=0, nr_sectors = 2 limit=0 [ 689.704452][T13262] befs: (loop15): unable to read superblock [ 690.290832][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.388207][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2237'. [ 690.709173][T13290] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2240'. [ 692.807304][T13311] netlink: 'syz.6.2248': attribute type 1 has an invalid length. [ 692.920653][T13311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.473205][T13330] fuse: Unknown parameter 'use00000000000000000000' [ 694.925278][T13339] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2255'. [ 696.270131][T13347] fuse: Invalid rootmode [ 696.449599][ T5901] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 696.702361][T13354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 696.919878][ T5901] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 696.943995][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.979484][ T5901] usb 4-1: Product: syz [ 696.983685][ T5901] usb 4-1: Manufacturer: syz [ 697.002861][ T5901] usb 4-1: SerialNumber: syz [ 697.021057][ T5901] usb 4-1: config 0 descriptor?? [ 697.023594][T13356] trusted_key: syz.4.2261 sent an empty control message without MSG_MORE. [ 697.273943][ T5901] usb-storage 4-1:0.0: USB Mass Storage device detected [ 697.394643][ T5901] usb 4-1: USB disconnect, device number 9 [ 698.026708][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2268'. [ 698.049666][T13374] netlink: 'syz.6.2268': attribute type 10 has an invalid length. [ 698.074252][T13374] bond0: (slave wlan1): Opening slave failed [ 699.482883][T13398] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2275'. [ 700.366284][T13401] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 700.399806][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 701.045286][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.773660][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 56772, setting to 1024 [ 701.801810][T13401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 701.860623][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 701.913091][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 701.956498][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.000730][T13393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 702.011907][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 702.307242][ T5902] usb 1-1: USB disconnect, device number 15 [ 702.332524][T13423] netlink: 'syz.3.2281': attribute type 5 has an invalid length. [ 702.366931][T13423] ip6erspan0: entered promiscuous mode [ 702.493001][T13420] BUG: sleeping function called from invalid context at mm/util.c:743 [ 702.501925][T13420] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13420, name: syz.1.2282 [ 702.511048][T13420] preempt_count: 1, expected: 0 [ 702.515904][T13420] RCU nest depth: 0, expected: 0 [ 702.520862][T13420] 1 lock held by syz.1.2282/13420: [ 702.525956][T13420] #0: ffff888148c12c48 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x241/0x5d0 [ 702.537066][T13420] Preemption disabled at: [ 702.537079][T13420] [<0000000000000000>] 0x0 [ 702.546092][T13420] CPU: 0 UID: 0 PID: 13420 Comm: syz.1.2282 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 702.546117][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 702.546128][T13420] Call Trace: [ 702.546136][T13420] [ 702.546143][T13420] dump_stack_lvl+0x241/0x360 [ 702.546177][T13420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.546204][T13420] ? __pfx__printk+0x10/0x10 [ 702.546232][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546261][T13420] __might_resched+0x558/0x6c0 [ 702.546285][T13420] ? __pfx___might_resched+0x10/0x10 [ 702.546305][T13420] ? __lock_acquire+0xad5/0xd80 [ 702.546341][T13420] folio_mc_copy+0x140/0x1d0 [ 702.546364][T13420] filemap_migrate_folio+0xb4/0x4c0 [ 702.546393][T13420] __buffer_migrate_folio+0x3ec/0x5d0 [ 702.546415][T13420] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 702.546444][T13420] move_to_new_folio+0x2b0/0xc30 [ 702.546465][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546494][T13420] ? __pfx_move_to_new_folio+0x10/0x10 [ 702.546519][T13420] ? __pfx___might_resched+0x10/0x10 [ 702.546535][T13420] ? __rmap_walk_file+0x1e8/0x5f0 [ 702.546568][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546588][T13420] ? __up_read+0x2c4/0x6b0 [ 702.546614][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546640][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546663][T13420] ? alloc_migration_target_by_mpol+0x35f/0x5e0 [ 702.546690][T13420] ? __pfx___might_resched+0x10/0x10 [ 702.546707][T13420] ? __pfx_try_to_migrate_one+0x10/0x10 [ 702.546733][T13420] ? __pfx_folio_not_mapped+0x10/0x10 [ 702.546757][T13420] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 702.546780][T13420] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 702.546802][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546828][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546848][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546873][T13420] migrate_pages_batch+0x1e86/0x30b0 [ 702.546922][T13420] ? __pfx_migrate_pages_batch+0x10/0x10 [ 702.546949][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.546973][T13420] ? walk_pgd_range+0x1704/0x17e0 [ 702.546994][T13420] ? mt_find+0x699/0x8f0 [ 702.547020][T13420] migrate_pages+0x2028/0x36c0 [ 702.547061][T13420] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 702.547089][T13420] ? __pfx_migrate_pages+0x10/0x10 [ 702.547109][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.547139][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.547162][T13420] ? __se_sys_mbind+0x1434/0x1950 [ 702.547202][T13420] ? __pfx_up_write+0x10/0x10 [ 702.547223][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.547249][T13420] __se_sys_mbind+0x148d/0x1950 [ 702.547294][T13420] ? __pfx___se_sys_mbind+0x10/0x10 [ 702.547321][T13420] ? do_futex+0x37c/0x5a0 [ 702.547346][T13420] ? __pfx_do_futex+0x10/0x10 [ 702.547379][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.547413][T13420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.547438][T13420] ? __x64_sys_mbind+0x21/0xf0 [ 702.547469][T13420] do_syscall_64+0xf3/0x210 [ 702.547493][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.547511][T13420] RIP: 0033:0x7f881f98e969 [ 702.547528][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.547543][T13420] RSP: 002b:00007f88208b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 702.547562][T13420] RAX: ffffffffffffffda RBX: 00007f881fbb5fa0 RCX: 00007f881f98e969 [ 702.547575][T13420] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 702.547587][T13420] RBP: 00007f881fa10ab1 R08: 0000000000000000 R09: 0000000000000002 [ 702.547599][T13420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.547610][T13420] R13: 0000000000000000 R14: 00007f881fbb5fa0 R15: 00007ffdb1d19a18 [ 702.547637][T13420]