last executing test programs: 14m52.459031784s ago: executing program 0 (id=1038): pipe2(0x0, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) shutdown(r1, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000009}) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x800000000000) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "c34701817af46dc6c847d595042448c2efdf49066d624c84adb1479c6a8da4b84a16e81440dec6bec56f488292cc9f7857c379e9ce866819c726a1d3d66d89bd9941dad338368abe4e81b80b560f44dd077012bf6f0beee754267ebc6e3f27aa91f380805295655adae210e699f03dbabc43e63849e89dacff7c751f36e55f4dccf597661951199ee87b655cf9411c5699df2d23abdb018351d2985ca5874438fea2c947bdc8ec9f1a795e38f46acc244d741fa5c389bacb2153b90943f37db20836cf3781f4575473db9006f7906bdb2ee5747d2e645ea2b0440d287d728839ceb0bc754a017a6cf9c1d226a9789edbac0416a744073848764c15ea995d64c3ff71c311c14e7cd53c608d96de426075b45dad4f90b29d5bdacb9a575b84fcc1d80497defe60d8df081c06a719fbc4397ebbc30322e14718e1f57e7b19ce8ac84bc89bd69abb9409fca911ab6562a806219d97674774d6bfe06309c2545f0b7a3615182a6d04ad8a86901c303357aea50ee291d1869091816ae35f5cd29959c3e1b6d90e50c3afdb16ab107a21920318fc399f286d047819a09d28a2b967d760d7910b5ac7cbe7c59a66df4e7ca3176144a8da9b0a198c00dce530ea6d1d46d0c8e75f7a9c7804a4f49f41cad20311b76ebd3fa4635704f09f583d4924e9d70ce949d6523ff0cc40d876cd223a8c93f84de148ea2d8d9ed55fc341fc503bc3fa8216db667d79dc6d0c4102321ab2e6743569aa8cc586c7ef811d426d92da9ebbc68af5c89e740a9f2818a5a3026b2bd464579dfb1be8472a04df0939f92be8cb10581370495919876b3d5760066ee129319cbeed883c2d3ff441b09a22b7cb6b4d221e115cb43a9e07b5f80ee79d22fa5a7f1b868cb9895b3cce2d87bed710f8bbf6f7d2b04d4e56f0b366f2287112b1865b9fa895b9dc7601b77ee7e8aa509c59d60dd85ff8c3c79b58a87fb1fe44ded1e9517b66b6b33ceb18234d8da34da954c4282d306f7466e2eccccadbabd70314ae1fa862392404216abe77b03250dead062459f67cf5ec6b04b4378a403f70ec176d822e41731d1370d373a97fc5929a172905b31a2db84ebefb36671c60116ea1bc9ff03744fdc1c64b45269765efab05a02c811cdb3aca122439fefeb5cca03a08242dfd17bbe4354123158ba5f98520cce7fc955441ecd706b2b2980695cf2600577781a290d48028f0be6b31e19af4ad803c04116a9f81d88edd822c80c8fb72afc4fa0f156aa10d5493e45efafef15e1ae7659991784276468283118eb47ef91ab4f766304b6f2e80c1b33a5e7a22323a6329c2d8201363e44990b0713af03e554c35b7a42aa51bfddfbc797bf3ea13be7f144039cd084956a53c485b8be696afbdc2f1de4a42489f63356eb9b9edbd706b12143ab031e5e00ab34a4c184c2e915d6f96958a94a76e9e61a11702f771344d15060e84f3bf4f16c0e0093a74b2331f401a0a9e7fa86853aeed29f8ce1c5917f5dc399c03901e49384ed3adeaa90383850d7a93075b4822d50a9f15778d4714f93eef32b2587cb0a983f3dbce0bfa759a6bb3042ed456ee769388acab8d7dd054efafd2d6b342a3a5e0664a4581720603f49387e1ef6a697b3ef20abec31024ce9a382d104510c0beb9c2529bec7a022f8f9d70817c6f726b4e21e7c7ee4274cd7ed16ea2d035eea2dc6bfa3810ba779168b71ad0ad859b15fcfe9359029a0986d4bf5a23b4039a01b7d3fb0f70a078086f7c08fa8f082db534035283b847fd0c18e291b034701075e6f5145996522a488816f22f18cd8a5a50a32326248d8a213632ee3313586ce34072005372d7eb0052f227a8414df3646a35ce63a2e3a394a6fdf66a4984142ab101d718767f923bfafda35b7a40509a16fbdad1449f807871787f473ee6896246f7b682f9bb8888165260052501fb753b1d0a04d4bf14a253b97100643b724e87022a684a7db51551b0751e1cdad909948b6beb71028fe13ebea5ab1bed681e47de2d12e3f00e3b8a7e6e6e335a9b65b83ee31f82e91056707c7577332f0878001d48e71e66c4165d535296938ea11f847660a7b84cbf88fb0838f25f8b08c795c5f90508c694199b3f60677847e7f9fcb5c55a295805119ae7bf7e41118b3f44e9814b9e6c3e633d6451bf31f5234bd361174694fa7ced21a9295513625e3bcb8a94617b70c341c561d70930f314e65f335c1412f2eb2c3a1ffa70fee6893bc0f61b651360a59472f13f3e09acb982e46bef9488e291a776aa2f883b85f49ae72f470863a20e160efc0c26b5dd482a7948ee28b747d18e979b451f553cc2db7f7692bd38f4ff2facf1381a69b7ea60777fd046c16273924eeeb3053c661227dd417614eef5879c5bd1c601f43ec373bd5d56ba5af8ea4c2bbc30c6eae3041e59930def19f8847b0a75aa4acd22a59b01acc8d564efbab4c5302905d837348186cebbe11abf4fb31c82ea275cc80646ba9f84bd162d952e51c84fa5783805a0bc4f51b2d42c8795af0b693ceeb37cd9602bb0708e123abd35ab0722f51f98ffb7cd9927010b8be4a43b79d7daaf785a3a5fe396fc84f797001f848c0ccbf5cbba5a42cdb48afb5ba9421a89782c9cbe3e1279d4ac106cbe7704a173af1a219f77f8c585e7b22a19be68d94856c6df443e0a556c96edc34449fc2f207e22c0889c7a9b61ffa2482481be43876c48a02c114ed934a0dc88a62ca35b819f7de29c614f9746c5549e6d90f24a2e468d002923b712bab46f6df914db1805e87da1096a74e04f76e281009e8bc256c8e559403b6398e1ae2e9ad7347c760e8640702c9d2b1513531a040c653a4e45dfb140c80cf2b92de3a9a08e71c22e0515c5e64e24e7b267ae24681fadc0378300139ebedf9f6ed49be483f81125829d6cf62b7df7a912cfd65328971187419bb1963f1c7618755274c09487eddc2dd862e3760d203364ec5d919e92d76187fdd3f4c5f2817fb56c25b99c954268c05b9a046be0a7c05e1740eb74aa23c9c4d369d366f4008f3f598063a04cc2e7beedabb401abced26cd0dd592f88a62106601493081fbcf98ead54ebce82437b2e416ef68461222cb3ed944670fa976ce2642d5800c60750e4202856fc1417bf7a86b43a28e7586bbf765cc2867bf52101cee231a71b51599c98974771189ce4ab18928ac1d9b6cd20d0d5ae5d47c96c97dfc670a0e8ab6d72d675c6ac53fb19408aabf2d91d098306a8226b45fc5f38c42344d839a4ab7ba10c5f987193dcde8621670532f751ec8f88cc205f8d6ebc6f4fbf11922d29c07e77be9107eec73a8d1ad2e517c5eb32fa8f11c373b00ad7048aa0692931ada4f17a19f3c0f05b2607ff35d8948141d2318999ad4f4ba1aba5ae0f17ddcc0b5731ec2a7ba9a9562aebb9f201d31dc29ab740640b4844873cbe999c230f3b0ab2696955d4f130a82aad132c0a5fc27affc74338504777c55e04a76e0ab4c3739c0160fd0104e8fe39df917f4ff878bfccd6cbd35370ba7df108d04c947f66f2add756631f07cf78244280f1a2ba4495ecbb9c3adf6bf2d6df6c186033b7d2279002c1ac5d548aea24ee365da90c013843b4382b13343c4545478718ac1cfdd41c3dbb1790645ad7783daca0e5e1a3188ccb18efe099101f9e344e07c0456e5beace3db667f8940ae4caf6902f3e30583ed3d291c39d6d2816806dcb13ad24b7a45fde38b252e57238dd195087b74e18600c9f9e82126db092a90813d4967421afa7cd6e1ca56071234911a53b94d5751d2708405212ba3098c59c4f311e493637ed2b01f8933520b514217c12302f6f6f9fc7faf366c9912f288007f1fce0422f6cecfdd4e58ae085ba9fabdaea5c83d1b4424c71ab28b1c20c4965e543f907ff26562f739f33a13bdeb3854d3f4e395f7eb4b092a8adf07e855613f9c1763e249a10880962af6e0521da0ee594daffdb7d96071d58ebf6cc891c8f5d7014521c63dd8e27274cfcc0cbfcc24094746894929a7d9e0c5a7cd8471fde480032fdb524625f60f835f4cab6c7d9c899fb3c7cbba3ec14aec101a2c491663018ea9eca1548993e17988669a12c5fa530b7a8be4d81497eaeb11d365b21f1892c62c9ba6c6b381016ee4b37b4100d46cce860b03873edceaa141ce07308233768be95f495e6994840daf5bdb2988267f7097c30c6ffef74a89d0c2440b58aa544ded460e9b9babae4c2ef992f5d599c733db373b8059a4c2087368634c9b789a6f5b4b5bedebdf51b01529c7cfe4b38030594bf3f8a6277b7277060d47ad794894a00a3c9d389a2c251d89e91b16072bc3b750567d260cf81270d72ac8fe4c3a80776003b7a970c055725d65e086b87d530e128e83631ffe2a53d0591179041a7872240ebf6ba856d847ebe5838c1988d961fb9515e42cb53cf1561e217fa919ac18b3e3d6801409f99e6efd8213b7331512d5203405ccd7a5ddecef1b9d87ba205d4e5796512aed9852a5ae3fc06d22d45ee94d25c4cd220358d7f86bbd153b427d32eeeeedae562b4f8e7d603386168c0fd68c626a937b569f1762a7eab2f8cafaedb0fffb141591bd5e93e903d41f35c3ee000883ccd28955499a14332f01094ed5a4127213fac91aa7f98d9044c5e1b13dbbdff30d0b04b9a1839cc306982393d81ea4082f5acd8dc8482518d07c4f8b9a06ac3c7ef6b5480001e98a35d53fe6be2f264a7465962adc812586ace1f2bd92a4388ec4334b71a3120c4eeae81dc2f077f18a9d03384e01cb81665cf8fe1e6a0f49b8863325e0204156c32830ecbbab9c9da68a47ac1d4363bf1fc8f6b9a9c08d445865a2c95666f0b687eac87846d90309268841a771da9cab3fa6df00a9a6780f7031e08555e717ac14507052afa13f732bd45081500434760846b4ef0a38ed2da0389a76356bd793d33504b068b12b16064c1cf3cd392a28a23dce7346dfb5d587e60f37752310b2f1969a4bd17ab4c399852bc73cc09a9af8afed9704525ce2ef5cb53c9721d87bb116c0bf30fa8c1564771aba6094cb0bb332873fe6a0381dab52b92b9fd1d3a0cf6d1e69858a35a257eabb25aeeb05e7734169b067224e78cb1c7cd8fe8e191cae210c4d3e09808007e0744875397306bfdf1b4159c6f92e28f61f7a3e5b5968fabee1a9085af737d3d4bb40bfc93b576dfefbf84d0228c29a9e9cb883481c61fb4a496e19bd8836b528cb2516cc57876ef53dc69ad56c761914a29577caec15af4a2f4124a855d3a7c71a28713b6aa3c59d29d24e44c7139fd10141d76e35a41f11f2cda2fe1f6d31ba2238d532fdeb4b065a179588e530e2edf1eae0ac44b7b06c6e1bc1ae7616f0757e51ed2352e120247ae9351e907980bb88849f353c57b033e25ac9f3314a91457804cb04821bf1d792c085cd6cf6b8dfddb9c1c34ca5cebc0d721da7903331c0f4768a33bad774eea2e2479592b96f2a74007f490f4906844ab8961b34b08cc5e59770e80bb9516402cd8ae9e9739d02e53de9f8c6360d47f2af19787b015d73c39d4286706249770e6d331ef733b6da8a0350b1a2c59d332ed2a66c2873370024b785047da30eed4d0700cde6070ae8643cc828c89662571300b702c6e7131c5cf0a7335c5262a8484dab33f20e69eaecfa48b2923dcbf689d58dead26dadd77d1e954b1d457d05cb9c9e303267c2e47388afc5e985d6038e90f0a8920bc9248563c57d47846e8f6d07c239ade648d0fac448f4cf773190872a8a6491bc4de13ce888d3ab349e6512fc93a710e1732bbbbd70a2a"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd4, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc0, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x5452, &(0x7f0000000140)) pread64(r0, &(0x7f0000001180)=""/4107, 0x100b, 0x200280) 14m51.576257417s ago: executing program 0 (id=1040): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = userfaultfd(0x1) r2 = socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000001d322b00"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200180100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000ec000380e8000080d00001"], 0x1ac}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r3 = socket$packet(0x11, 0x4000000000002, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={0x0, 0x99, 0x8cabba4c647f586a}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'hmac(sha1-ce)\x00'}}, &(0x7f0000000440)="cabd229dd84d56ff27fe5b2d7050ea8e1cf1d63b01009e5f821dcf705ac5ceb4a0eb1dee232e76dbd5de6677fd5948a678ce906bc505e87d62ca8b3bf7be54fe7357eb2c094bbe7a88d59ca10dbb334a8ef0926fd873d6fab44638c9fe09e486b234e420f3e9d738046bffd2d1d897431a870b5a2c90fdd0266db2d17fc66d73dd1471b1706703bdd0c3cbdf79be48f1fbb769000000000000", &(0x7f0000000500)=""/179) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc}) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={@mcast1, 0x80, r7}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000679000/0x3000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x3000, 0x2, 0x2}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x48000}, 0x0) 14m51.329085188s ago: executing program 0 (id=1041): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0xfcd8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x10243, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000007140)={&(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0xffffffffffffffff, {0x7, 0x29, 0x8, 0x2c020c24, 0x1000, 0x0, 0xa4, 0x6, 0x0, 0x0, 0x4, 0x7}}, &(0x7f0000000300)={0x18, 0x0, 0x2, {0x7fffffff}}, &(0x7f0000000340)={0x18, 0x0, 0x400, {0xb}}, &(0x7f0000002680)={0x18, 0x0, 0x0, {0x3}}, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xee4}}, &(0x7f0000002440)={0x28, 0x0, 0xfffffffffffffffe, {{0x2, 0x40, 0x1}}}, &(0x7f0000002480)={0x60, 0x0, 0x8000000000000000, {{0xf72, 0x2, 0xf, 0x4, 0x8f5b, 0x297e1689, 0x5}}}, &(0x7f0000002500)={0x18, 0x0, 0x3, {0x2}}, &(0x7f00000025c0)=ANY=[@ANYBLOB="11a87813ee48a3193e74acceb29a12aed17213ab34742176df89b73e0e3d13fb78cacc90fadefcbcdb393a4963397f46c96a8e661d906afd08b830b09d2e2cb81053bf2146014c18463fdfdc6827d56e3da084c1a5fb37f321f0bb4c7b6ed6586817d794cc847dd9442b544fae1cb6270062c7e4aef5312c4f47693f97d4d4123d6c3997d9529b701c5cbd7e772d2e31c67bdf05ddccef99ba14666f924e2b284a0b2e1fe9255b3acf4ee4f62bf47d8010189b"], &(0x7f0000002580)={0x20, 0x0, 0x8, {0x0, 0x3}}, &(0x7f0000004600)={0x78, 0xfffffffffffffff5, 0x6e, {0x535, 0x7fff, 0x0, {0x3, 0x9, 0xf2c, 0x7, 0x7, 0x1000, 0x7, 0x200, 0xd, 0x2000, 0xb, 0x0, 0x0, 0x1, 0x9}}}, &(0x7f0000004680)={0x90, 0x0, 0xdc, {0x3, 0x0, 0x5, 0x3, 0x9, 0xb, {0x5, 0x8, 0x9, 0x1, 0x80, 0x8, 0x6, 0x7, 0x2d8f, 0x8000, 0x9, 0x0, 0x0, 0xfff, 0x7}}}, &(0x7f0000004740)=ANY=[@ANYBLOB="c8000000f5fffffffaffffffffffffff020000000000000006000000000000000a0000000e0000002a5b2f5e3a2e21243a2d000000000000050000000000000001000000000000000b0000000100000076657468305f766c616e0000000000000500000000000000000000000000000001000000050000000000000000000000030000000000000009000000000000000b0000000200000076657468305f766c616e00000000000001000000000000010000000000000000010000007f0000002d00000000000000"], &(0x7f00000026c0)=ANY=[@ANYBLOB="38030000000000000100010000000000020000000000000003000000000000001400000000000000010000000000000004000000030000000200000000000000b437000000000000ffffffffffffff7f07000000000000000600000000000000060000000000000000000000716e00000000000000c0000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f8ffffff0300000000000000feffffffffffffff04000000000000000200000002000000405b0000000000000000000000000000030000000000000000100000000000000100008000000000439b00000900000000000000000000000000008000000000511e000000000000e5aab612000000002700000000000000f9ffffffffffffff010000009207000004000000004000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000020f000000000000000100000000000000070000000000000002000000040000002d2d0000000000000200000000000000010000000000000002000000000000000500000000000000040000008960be0c0100000000000000070000000000000009000000000000000200000000000000060000000000000000000100000000000200000000000080b80e000000c0000001000000c1af97ab53", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="090000000900000000000000020000000000000006000000000000000b000000e100000076657468305f766c616e0000000000000100000000000000030000000000000000000000000400000700000000000000010000000700000006000000000000000500000000000000030000000000000006000000000000000000000000000000f9ffffffffffffff0000000004000000010000000010000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000200000000000003000000000000008d00000000000000040000000300000047504c000000000002000000000000000300000000000000010000000000008006000000000000000001000001feffff0600000000000000080000000000000000000000000000000900000000000000ec7e000000000000f70c000000000000f8ffffff000000000000000000c0000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000c000000000000000200000000000000020000000000000001000000010100"/44], &(0x7f0000006e40)={0xa0, 0x0, 0x9, {{0x5, 0x2, 0xffffffffffffff7f, 0xffffffffffffff9b, 0x0, 0x7, {0x5, 0x8370, 0xfffffffffffffffb, 0xffffffff, 0x80000000, 0x1, 0x4, 0x5, 0x6165, 0xa000, 0x2, 0x0, 0xee00, 0x7fff}}, {0x0, 0x2}}}, &(0x7f0000002540)={0x20, 0x0, 0x5, {0x9, 0x6ac4571839b653dd, 0xe23, 0x8}}, &(0x7f0000007000)={0x130, 0x0, 0x6, {0x712, 0x6, 0x0, '\x00', {0x8000, 0x8001, 0xe, 0x8, 0x0, 0x0, 0x6000, '\x00', 0x8000000000000001, 0x76, 0x7, 0x70b9, {0x73f, 0xfffffffd}, {0x0, 0x6}, {0xfffffffffffff1ae, 0x3}, {0x40, 0x6}, 0x3, 0x4a1, 0x2, 0x2}}}}) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400090400000000fddbdf25020800cb", @ANYRES32=r7, @ANYBLOB="080004007f000001080008001000000008000900b5fdffff08000200ac1e01010800090031000000"], 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000040), 0x4) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 14m50.065793499s ago: executing program 0 (id=1045): io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x1332, 0x10000, 0x0, 0x1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xf) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x6, @raw_data="515583aae2bc6b521c17306d3f75e463ffd027e0d3dddc9c1e06fd25717f9080921d2fe1e29e4c2fae009fafe0355d17fbeacf74e2fde9bc610f6b62889d809e50e1a4e284a1bebe18b12178fd4128bce2fce4a8fca28f5150f6e6f845d82e8eadb2ece03d9e79e6fe3147bd762dd846f1f0ac856ecb164e5ff9e3231fe4c783924b104dd5b457a6a6235b68c5e6e586b1faf1017d034d5d01214e23764c8c10e4f1e9570ce87dd87f0bfb37a8dff8a04ec9d30ae2883cab711acfa6517181d807d6acb61a51dce3"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000440)="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", 0x201}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000091) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000060a0904000000000000000002000000200004801c0001800a00010072656469720000000c00028008000140000000000900010073797a30000000000900020073797a32"], 0x74}}, 0x80) 14m46.383795884s ago: executing program 0 (id=1051): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = userfaultfd(0x1) r2 = socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000001d322b00"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200180100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000ec000380e8000080d00001"], 0x1ac}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r3 = socket$packet(0x11, 0x4000000000002, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={0x0, 0x99, 0x8cabba4c647f586a}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'hmac(sha1-ce)\x00'}}, &(0x7f0000000440)="cabd229dd84d56ff27fe5b2d7050ea8e1cf1d63b01009e5f821dcf705ac5ceb4a0eb1dee232e76dbd5de6677fd5948a678ce906bc505e87d62ca8b3bf7be54fe7357eb2c094bbe7a88d59ca10dbb334a8ef0926fd873d6fab44638c9fe09e486b234e420f3e9d738046bffd2d1d897431a870b5a2c90fdd0266db2d17fc66d73dd1471b1706703bdd0c3cbdf79be48f1fbb769000000000000", &(0x7f0000000500)=""/179) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc}) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={@mcast1, 0x80, r7}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000679000/0x3000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x3000, 0x2, 0x2}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x48000}, 0x0) 14m44.834201255s ago: executing program 0 (id=1054): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1b00000018008103e00212ba0d81050423031000030f0600067c55", 0x1b}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x54a9, @mcast1, 0x1}, 0x1c, 0x0}}], 0x1, 0x24004810) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_netlabel(r1, &(0x7f0000000200)=@l1={{0x8, 0x2e, 0x842c, 0x2e, 0x1, 0x2e, 0x5}, 0x20, 'affs\x00'}, 0x5b) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score\x00') socket$isdn(0x22, 0x2, 0x26) syz_usb_connect(0x5, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110035cd79420"], 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0xd, 0xfffffffc) memfd_secret(0x0) 14m29.453490462s ago: executing program 32 (id=1054): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1b00000018008103e00212ba0d81050423031000030f0600067c55", 0x1b}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x54a9, @mcast1, 0x1}, 0x1c, 0x0}}], 0x1, 0x24004810) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_netlabel(r1, &(0x7f0000000200)=@l1={{0x8, 0x2e, 0x842c, 0x2e, 0x1, 0x2e, 0x5}, 0x20, 'affs\x00'}, 0x5b) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score\x00') socket$isdn(0x22, 0x2, 0x26) syz_usb_connect(0x5, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110035cd79420"], 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0xd, 0xfffffffc) memfd_secret(0x0) 1m1.751250611s ago: executing program 1 (id=3246): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 56.811167347s ago: executing program 1 (id=3258): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040) sendto$packet(r0, &(0x7f0000000040)="a836c8409da7dc9a077dc69f64dd", 0xe, 0x8000, &(0x7f0000000140)={0x11, 0xf6, r2, 0x1, 0x6}, 0x14) socket$igmp6(0xa, 0x3, 0x2) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mlockall(0x2) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000) 55.669596356s ago: executing program 1 (id=3261): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x1000000}, 0x1}, [{}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x800}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xbb4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 54.559674448s ago: executing program 1 (id=3264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 54.259581574s ago: executing program 1 (id=3266): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd25, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x400d0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x3, {0x1, 0x8, 0x6, 0x4}}, 0x7) 53.35549684s ago: executing program 1 (id=3274): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd25, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x400d0) read$nci(r0, 0x0, 0x0) 35.615056575s ago: executing program 33 (id=3274): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd25, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x400d0) read$nci(r0, 0x0, 0x0) 33.073389909s ago: executing program 5 (id=3334): socket$inet_smc(0x2b, 0x1, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 30.982336902s ago: executing program 5 (id=3339): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5462, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) read$FUSE(r3, 0x0, 0x6c) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 28.941290639s ago: executing program 5 (id=3341): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r1, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2047) io_submit(0x0, 0x1, &(0x7f0000000000)=[0x0]) syz_open_dev$tty20(0xc, 0x4, 0x1) ioprio_get$uid(0x3, r2) 28.047953188s ago: executing program 5 (id=3345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.24647679s ago: executing program 5 (id=3349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 25.736014248s ago: executing program 2 (id=3352): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa00) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 25.4742971s ago: executing program 3 (id=3353): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 24.50457777s ago: executing program 3 (id=3355): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x1000000}, 0x1}, [{}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x800}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xbb4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 24.005819259s ago: executing program 5 (id=3356): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB], 0x50) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x20000008}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r4, 0x101, 0xc, 0x0, &(0x7f0000000300)) 23.506914418s ago: executing program 3 (id=3357): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 23.362064906s ago: executing program 3 (id=3358): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040) sendto$packet(r0, &(0x7f0000000040)="a836c8409da7dc9a077dc69f64dd", 0xe, 0x8000, &(0x7f0000000140)={0x11, 0xf6, r2, 0x1, 0x6}, 0x14) socket$igmp6(0xa, 0x3, 0x2) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mlockall(0x2) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000) 23.222424586s ago: executing program 2 (id=3359): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xffffffff, @mcast2, 0x3}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) preadv(r7, 0x0, 0x0, 0x12001, 0x7) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 23.208203966s ago: executing program 3 (id=3360): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xa00) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 22.287434538s ago: executing program 2 (id=3361): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 21.736870681s ago: executing program 4 (id=3362): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, r4, r2}) 21.664778189s ago: executing program 2 (id=3363): socket$inet6(0xa, 0x3, 0x38) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') 20.649480333s ago: executing program 2 (id=3364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) 20.46494024s ago: executing program 3 (id=3365): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_setup(0x202, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYBLOB="d77fe4d29a6bcc87b4f7eaf9d0a36e9d220643456d2bb7b6ca6e0497fecb24380b06e6160861c1e5bc1a67d6c9ce69eaa65eb313704c91ab09b329c8a380b2e0c75fdeada737fafc77a82502b8ca6f12baa1bb87d68f3a3017dc6ea2865a963d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='task_newtask\x00', r3}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) socket$inet(0x2b, 0x801, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) 19.533633188s ago: executing program 2 (id=3366): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000088000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e7502"], 0xfdef) 19.476385019s ago: executing program 4 (id=3367): syz_open_dev$cec(0x0, 0x0, 0x80) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="8500000002000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="890704", 0x3) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 18.572239934s ago: executing program 4 (id=3368): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x1000000}, 0x1}, [{}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x800}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xbb4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 17.629562246s ago: executing program 4 (id=3369): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa00) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 16.553246172s ago: executing program 4 (id=3370): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000640)="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", 0x1a0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x0, 0x0, 0xa, 0x1ff, 0x1}) 15.472462749s ago: executing program 4 (id=3371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x169000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x2000c004) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.511233378s ago: executing program 34 (id=3356): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB], 0x50) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x20000008}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r4, 0x101, 0xc, 0x0, &(0x7f0000000300)) 5.012302014s ago: executing program 35 (id=3365): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_setup(0x202, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYBLOB="d77fe4d29a6bcc87b4f7eaf9d0a36e9d220643456d2bb7b6ca6e0497fecb24380b06e6160861c1e5bc1a67d6c9ce69eaa65eb313704c91ab09b329c8a380b2e0c75fdeada737fafc77a82502b8ca6f12baa1bb87d68f3a3017dc6ea2865a963d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='task_newtask\x00', r3}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) socket$inet(0x2b, 0x801, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) 4.511978002s ago: executing program 36 (id=3366): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000088000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e7502"], 0xfdef) 0s ago: executing program 37 (id=3371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x169000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x2000c004) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): added lo [ 1144.861250][ T975] lo speed is unknown, defaulting to 1000 [ 1144.956952][T25986] RDS/IB: sz1: added [ 1144.964059][T25986] smc: adding ib device sz1 with port count 1 [ 1144.970662][T25986] smc: ib device sz1 port 1 has pnetid [ 1144.980229][T25986] lo speed is unknown, defaulting to 1000 [ 1145.218034][ T975] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1145.479320][ T975] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1145.538405][T25986] lo speed is unknown, defaulting to 1000 [ 1145.564196][ T24] lo speed is unknown, defaulting to 1000 [ 1145.631832][ T975] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1145.872939][T25986] lo speed is unknown, defaulting to 1000 [ 1146.026250][ T975] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1146.036141][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.049399][T25987] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1146.063551][ T975] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1146.189791][T25986] lo speed is unknown, defaulting to 1000 [ 1146.347434][T25986] lo speed is unknown, defaulting to 1000 [ 1146.554416][ T975] usb 6-1: USB disconnect, device number 10 [ 1147.219105][T26010] ptrace attach of "./syz-executor exec"[5819] was attempted by ""[26010] [ 1148.311312][T26027] netlink: 'syz.1.2091': attribute type 4 has an invalid length. [ 1149.278316][T26048] netlink: 'syz.3.2095': attribute type 11 has an invalid length. [ 1149.286322][T26048] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2095'. [ 1151.216929][T26175] lo speed is unknown, defaulting to 1000 [ 1151.223587][T26175] lo speed is unknown, defaulting to 1000 [ 1151.235579][T26175] lo speed is unknown, defaulting to 1000 [ 1151.270248][T26175] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1151.392461][T26175] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1151.516761][T26176] IPVS: stopping master sync thread 13462 ... [ 1151.795457][T26175] lo speed is unknown, defaulting to 1000 [ 1151.802969][T26175] lo speed is unknown, defaulting to 1000 [ 1151.810400][T26175] lo speed is unknown, defaulting to 1000 [ 1151.817360][T26175] lo speed is unknown, defaulting to 1000 [ 1151.825638][T26175] lo speed is unknown, defaulting to 1000 [ 1152.218066][T26182] netlink: 'syz.2.2104': attribute type 4 has an invalid length. [ 1154.895107][T26211] 9pnet_fd: Insufficient options for proto=fd [ 1156.009870][T26232] binder: BINDER_SET_CONTEXT_MGR already set [ 1156.022374][T26232] binder: 26231:26232 ioctl 4018620d 200000000040 returned -16 [ 1157.120697][T26347] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 1157.733373][T26356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'. [ 1158.018003][ T975] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1158.348501][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 1158.378747][ T975] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 1158.386975][ T975] usb 6-1: config 0 has no interface number 0 [ 1158.406074][ T975] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1158.460087][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.487914][ T975] usb 6-1: Product: syz [ 1158.522926][ T975] usb 6-1: Manufacturer: syz [ 1158.541947][ T975] usb 6-1: SerialNumber: syz [ 1158.566183][ T975] usb 6-1: config 0 descriptor?? [ 1158.579495][ T975] hub 6-1:0.145: bad descriptor, ignoring hub [ 1158.585630][ T975] hub 6-1:0.145: probe with driver hub failed with error -5 [ 1158.789549][ T975] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input14 [ 1159.512830][T26380] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 1159.968734][ T978] usb 6-1: USB disconnect, device number 11 [ 1162.252424][T26454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.261050][T26454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.994573][T26498] netlink: 'syz.4.2151': attribute type 10 has an invalid length. [ 1163.019108][T26498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2151'. [ 1163.032546][T26498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1163.226089][T26606] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 1165.714168][T26789] ptrace attach of "./syz-executor exec"[5820] was attempted by ""[26789] [ 1166.485052][T26939] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 1168.570137][T26967] ptrace attach of "./syz-executor exec"[5822] was attempted by ""[26967] [ 1168.657843][ T975] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1168.817855][ T975] usb 6-1: Using ep0 maxpacket: 8 [ 1168.831163][ T975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.065020][ T975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1169.089347][ T975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1169.194622][ T975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1169.206126][ T975] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1169.215536][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.400441][ T975] hub 6-1:1.0: bad descriptor, ignoring hub [ 1169.459635][ T975] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1169.467441][ T975] cdc_wdm 6-1:1.0: skipping garbage [ 1169.495834][ T975] cdc_wdm 6-1:1.0: skipping garbage [ 1169.518745][ T975] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1169.535872][ T975] cdc_wdm 6-1:1.0: Unknown control protocol [ 1170.322951][T27087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 1170.857539][T26962] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 1172.048363][ T9] usb 6-1: USB disconnect, device number 12 [ 1173.595078][T27311] ptrace attach of "./syz-executor exec"[5819] was attempted by ""[27311] [ 1174.831905][T27318] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1175.908311][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1176.092331][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1176.234139][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.767814][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1176.776871][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1176.822439][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1176.836644][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1176.847164][ T9] usb 5-1: Product: syz [ 1176.853474][T27552] 9pnet_fd: Insufficient options for proto=fd [ 1176.866026][ T9] usb 5-1: Manufacturer: syz [ 1176.907355][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 1176.950331][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 1176.990377][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1177.256506][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.262983][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.367548][T27662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.538452][T27662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.494073][ T10] usb 5-1: USB disconnect, device number 46 [ 1180.832864][T27794] 9pnet_fd: Insufficient options for proto=fd [ 1182.824275][T27936] 9pnet_fd: Insufficient options for proto=fd [ 1182.875983][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1182.875999][ T30] audit: type=1326 audit(1746426873.604:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.117865][ T30] audit: type=1326 audit(1746426873.604:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.139757][ T30] audit: type=1326 audit(1746426873.604:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.161751][ T30] audit: type=1326 audit(1746426873.604:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.183626][ T30] audit: type=1326 audit(1746426873.604:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.206708][ T30] audit: type=1326 audit(1746426873.604:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.228590][ T30] audit: type=1326 audit(1746426873.604:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.250742][ T30] audit: type=1326 audit(1746426873.604:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.277863][ T30] audit: type=1326 audit(1746426873.604:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.347160][ T30] audit: type=1326 audit(1746426873.604:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27932 comm="syz.3.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0698e969 code=0x7ffc0000 [ 1183.770350][T27963] 9pnet_fd: Insufficient options for proto=fd [ 1187.322267][T28031] trusted_key: encrypted_key: insufficient parameters specified [ 1187.618804][T28038] overlayfs: failed to clone lowerpath [ 1188.074050][T28045] lo speed is unknown, defaulting to 1000 [ 1188.752888][T28045] lo speed is unknown, defaulting to 1000 [ 1193.969461][T28713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2299'. [ 1195.494272][T28821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1197.244949][T28850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.253510][T28850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.606250][T28850] wg2: left promiscuous mode [ 1197.623659][T28850] wg2: left allmulticast mode [ 1198.228206][T28850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.463717][T28850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.695712][T28850] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.733333][T28850] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.784554][T28850] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.799298][T28850] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.133801][T28850] vlan2: left allmulticast mode [ 1199.140727][T28850] veth1: left allmulticast mode [ 1200.857125][T28901] IPVS: stopping master sync thread 28900 ... [ 1206.054158][T29061] Malformed UNC in devname [ 1206.054158][T29061] [ 1206.082601][T29061] CIFS: VFS: Malformed UNC in devname [ 1209.870511][T29300] overlayfs: failed to clone upperpath [ 1212.673594][T29439] siw: device registration error -23 [ 1212.690792][T29439] IPVS: Error connecting to the multicast addr [ 1213.351396][T29440] overlayfs: failed to clone lowerpath [ 1214.017153][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 1214.017171][ T30] audit: type=1326 audit(1746426904.734:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1214.243064][ T30] audit: type=1326 audit(1746426904.744:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1214.372746][ T30] audit: type=1326 audit(1746426904.744:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1214.445617][ T30] audit: type=1326 audit(1746426904.744:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1214.743572][ T30] audit: type=1326 audit(1746426904.744:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1214.822560][ T30] audit: type=1326 audit(1746426904.744:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1214.897370][ T30] audit: type=1326 audit(1746426904.744:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1214.963198][ T30] audit: type=1326 audit(1746426904.744:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1215.027758][ T30] audit: type=1326 audit(1746426904.744:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1215.147925][ T30] audit: type=1326 audit(1746426904.744:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29450 comm="syz.1.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1217.157735][ T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1217.310263][ T10] usb 4-1: device descriptor read/64, error -71 [ 1217.605537][ T5933] kworker/u8:10 (5933) used greatest stack depth: 19752 bytes left [ 1217.627918][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1217.769457][ T10] usb 4-1: device descriptor read/64, error -71 [ 1217.878636][ T10] usb usb4-port1: attempt power cycle [ 1218.145004][T29719] 9pnet_fd: Insufficient options for proto=fd [ 1218.237755][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1218.258470][ T10] usb 4-1: device descriptor read/8, error -71 [ 1218.507771][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1218.592085][ T10] usb 4-1: device descriptor read/8, error -71 [ 1219.262784][ T10] usb usb4-port1: unable to enumerate USB device [ 1220.011041][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1220.011061][ T30] audit: type=1326 audit(1746426910.744:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1220.344603][ T30] audit: type=1326 audit(1746426910.744:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1220.566063][ T30] audit: type=1326 audit(1746426910.744:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1220.662857][ T30] audit: type=1326 audit(1746426910.744:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1220.757753][ T30] audit: type=1326 audit(1746426910.744:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1220.815888][ T30] audit: type=1326 audit(1746426910.744:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1220.853417][ T30] audit: type=1326 audit(1746426910.744:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1220.931331][ T30] audit: type=1326 audit(1746426910.774:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1221.025321][ T30] audit: type=1326 audit(1746426910.774:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1221.088464][ T30] audit: type=1326 audit(1746426910.774:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.1.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1221.248898][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1221.930086][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1221.939637][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.992263][ T10] usb 4-1: config 0 descriptor?? [ 1223.030548][ T10] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1223.701110][ T10] usb 4-1: USB disconnect, device number 34 [ 1224.404401][T30020] 9pnet_fd: Insufficient options for proto=fd [ 1225.525669][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1225.525687][ T30] audit: type=1326 audit(1746426916.224:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1225.575843][T30036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2452'. [ 1225.622321][ T30] audit: type=1326 audit(1746426916.224:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1225.800300][ T30] audit: type=1326 audit(1746426916.224:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1226.213201][ T30] audit: type=1326 audit(1746426916.224:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1226.530887][ T30] audit: type=1326 audit(1746426916.224:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1226.704886][T30046] Malformed UNC in devname [ 1226.704886][T30046] [ 1226.711729][T30046] CIFS: VFS: Malformed UNC in devname [ 1226.855050][ T30] audit: type=1326 audit(1746426916.224:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1226.880155][T30047] 9pnet_fd: Insufficient options for proto=fd [ 1226.887718][ T30] audit: type=1326 audit(1746426916.224:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1227.105460][ T30] audit: type=1326 audit(1746426916.224:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1227.128815][ T30] audit: type=1326 audit(1746426916.224:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1227.213123][T30052] netlink: 'syz.3.2457': attribute type 4 has an invalid length. [ 1227.221055][T30052] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2457'. [ 1227.752445][ T30] audit: type=1326 audit(1746426916.224:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30029 comm="syz.1.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f785118e969 code=0x7ffc0000 [ 1228.066862][T30056] netlink: 'syz.4.2459': attribute type 1 has an invalid length. [ 1228.102765][T30056] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1228.404518][ T24] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1229.273604][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1229.287862][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1229.316683][T30074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2465'. [ 1229.326061][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1229.347479][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.004503][ T24] usb 6-1: usb_control_msg returned -32 [ 1230.010688][ T24] usbtmc 6-1:16.0: can't read capabilities [ 1230.058162][ T24] usb 6-1: USB disconnect, device number 13 [ 1230.903854][T30091] 9pnet_fd: Insufficient options for proto=fd [ 1231.067799][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1231.224898][T30103] netlink: 'syz.4.2476': attribute type 1 has an invalid length. [ 1231.253779][T30103] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2476'. [ 1231.320792][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1231.340926][ T10] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 1231.377778][ T10] usb 2-1: config 0 has no interface number 0 [ 1231.411711][T30114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2479'. [ 1231.425102][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1231.474231][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.495990][ T10] usb 2-1: Product: syz [ 1231.524120][ T10] usb 2-1: Manufacturer: syz [ 1231.560100][ T10] usb 2-1: SerialNumber: syz [ 1231.595932][ T10] usb 2-1: config 0 descriptor?? [ 1231.623886][ T10] hub 2-1:0.145: bad descriptor, ignoring hub [ 1231.641269][ T10] hub 2-1:0.145: probe with driver hub failed with error -5 [ 1231.671761][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input16 [ 1232.107484][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1232.107502][ T30] audit: type=1326 audit(1746426922.834:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.156681][ T30] audit: type=1326 audit(1746426922.884:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.185107][ T30] audit: type=1326 audit(1746426922.884:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.282629][ T30] audit: type=1326 audit(1746426922.884:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.310191][ T30] audit: type=1326 audit(1746426922.884:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.346983][ T30] audit: type=1326 audit(1746426922.884:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.375011][ T30] audit: type=1326 audit(1746426922.884:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.408091][ T24] usb 2-1: USB disconnect, device number 52 [ 1232.414304][ T30] audit: type=1326 audit(1746426922.884:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.446635][ T30] audit: type=1326 audit(1746426922.884:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1232.544155][ T30] audit: type=1326 audit(1746426922.884:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30125 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c5d8e969 code=0x7ffc0000 [ 1233.537789][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1233.939827][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1233.960238][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1233.993919][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1234.037767][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.080090][T30146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2491'. [ 1234.269569][ T9] usb 4-1: usb_control_msg returned -32 [ 1234.283668][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1234.393394][ T9] usb 4-1: USB disconnect, device number 35 [ 1237.529430][T30184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 1238.017779][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1238.200986][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1238.239764][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.256823][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1238.256836][ T30] audit: type=1326 audit(1746426928.984:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1238.314637][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1238.337995][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.318225][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.324754][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.531328][ T30] audit: type=1326 audit(1746426928.984:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1239.560678][ T30] audit: type=1326 audit(1746426929.044:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1240.284684][ T9] usb 5-1: usb_control_msg returned -32 [ 1240.293536][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1240.327769][ T30] audit: type=1326 audit(1746426929.044:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1240.385118][ T9] usb 5-1: USB disconnect, device number 47 [ 1240.428047][ T30] audit: type=1326 audit(1746426929.044:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1240.541295][ T30] audit: type=1326 audit(1746426929.044:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1240.567991][ T30] audit: type=1326 audit(1746426929.044:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1240.590281][ T30] audit: type=1326 audit(1746426929.044:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1240.656024][T30411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2515'. [ 1240.720873][ T30] audit: type=1326 audit(1746426929.044:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1240.850973][ T30] audit: type=1326 audit(1746426929.044:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30202 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb0a2f8e969 code=0x7ffc0000 [ 1245.193963][T30443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1245.857739][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1246.062998][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1246.100998][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.134502][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1246.158295][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.432940][ T9] usb 5-1: usb_control_msg returned -32 [ 1247.096972][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1247.186664][ T9] usb 5-1: USB disconnect, device number 48 [ 1247.440166][T30574] overlayfs: failed to resolve './file0': -2 [ 1247.541744][T30677] warning: `syz.3.2537' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1248.792612][T30682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 1249.587894][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1249.899649][ T9] usb 4-1: config 0 has an invalid interface number: 63 but max is 0 [ 1249.908187][ T9] usb 4-1: config 0 has no interface number 0 [ 1250.432687][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 1250.447850][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.455888][ T9] usb 4-1: Product: syz [ 1250.460191][ T9] usb 4-1: Manufacturer: syz [ 1250.464821][ T9] usb 4-1: SerialNumber: syz [ 1250.477064][ T9] usb 4-1: config 0 descriptor?? [ 1250.490412][ T9] ftdi_sio 4-1:0.63: FTDI USB Serial Device converter detected [ 1250.504134][ T9] usb 4-1: Detected FT4232HP [ 1250.685563][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2552'. [ 1250.716134][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1251.323538][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1251.340287][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1251.373662][ T9] usb 4-1: USB disconnect, device number 36 [ 1251.492586][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1251.536061][ T9] ftdi_sio 4-1:0.63: device disconnected [ 1252.325135][T31026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2558'. [ 1252.617624][T31026] hsr_slave_1 (unregistering): left promiscuous mode [ 1253.521335][T31241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 1254.139069][T31347] Malformed UNC in devname [ 1254.139069][T31347] [ 1254.167705][T31347] CIFS: VFS: Malformed UNC in devname [ 1257.432157][T31579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2577'. [ 1259.917888][ T978] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1260.097744][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 1260.115256][ T978] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1260.133605][ T978] usb 4-1: config 0 has no interface number 0 [ 1260.157917][ T978] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.197821][ T978] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.260381][ T978] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1260.317734][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.354869][ T978] usb 4-1: config 0 descriptor?? [ 1260.367904][ T975] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1260.614350][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 1260.624942][ T975] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 1260.657858][ T975] usb 6-1: config 0 has no interface number 0 [ 1260.674897][ T975] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1260.779972][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.825169][ T975] usb 6-1: Product: syz [ 1260.880485][ T975] usb 6-1: Manufacturer: syz [ 1260.885162][ T975] usb 6-1: SerialNumber: syz [ 1260.915596][ T975] usb 6-1: config 0 descriptor?? [ 1260.987496][ T975] hub 6-1:0.145: bad descriptor, ignoring hub [ 1261.016260][ T975] hub 6-1:0.145: probe with driver hub failed with error -5 [ 1261.036520][ T978] uclogic 0003:28BD:0094.0004: pen parameters not found [ 1261.052260][ T978] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 1261.071331][ T975] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input19 [ 1261.245247][ T978] usb 4-1: USB disconnect, device number 37 [ 1261.757670][T31822] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1261.764608][T31822] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1261.822735][ T5873] usb 6-1: USB disconnect, device number 14 [ 1261.845281][T31822] hsr_slave_0: left promiscuous mode [ 1261.894983][T31822] hsr_slave_1: left promiscuous mode [ 1262.521685][T31841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1265.128433][T31980] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 1265.146560][T31980] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2609'. [ 1266.411426][ T975] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1266.657780][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 1266.671932][ T975] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 1266.683599][ T975] usb 4-1: config 0 has no interface number 0 [ 1266.920836][ T975] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1267.319836][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.347752][ T975] usb 4-1: Product: syz [ 1267.358026][ T975] usb 4-1: Manufacturer: syz [ 1267.362684][ T975] usb 4-1: SerialNumber: syz [ 1267.378482][ T975] usb 4-1: config 0 descriptor?? [ 1267.399758][ T975] hub 4-1:0.145: bad descriptor, ignoring hub [ 1267.415342][ T975] hub 4-1:0.145: probe with driver hub failed with error -5 [ 1267.450917][ T975] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input20 [ 1269.469751][T32314] afs: Unknown parameter 'dy' [ 1269.771637][ T5172] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 1269.947848][ T5172] usb 4-1: device reset changed ep0 maxpacket size! [ 1270.172930][T18109] usb 4-1: USB disconnect, device number 38 [ 1270.558219][T18109] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1270.727823][T18109] usb 4-1: Using ep0 maxpacket: 8 [ 1270.735443][T18109] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1270.746936][T18109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.769723][T18109] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1270.777151][T18109] pvrusb2: ********** [ 1270.781672][T18109] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1270.793171][T18109] pvrusb2: Important functionality might not be entirely working. [ 1270.820057][T18109] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1270.883907][T18109] pvrusb2: ********** [ 1270.972822][ T2341] pvrusb2: Invalid write control endpoint [ 1271.248753][T32326] pvrusb2: Invalid write control endpoint [ 1271.258030][ T978] usb 4-1: USB disconnect, device number 39 [ 1272.522997][ T2341] pvrusb2: Invalid write control endpoint [ 1272.563868][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1272.594722][T32566] blkio.reset_stats is deprecated [ 1272.601047][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1272.624770][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1272.652101][ T2341] pvrusb2: Device being rendered inoperable [ 1272.689399][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1272.728933][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1272.764906][ T2341] pvrusb2: Attached sub-driver cx25840 [ 1272.792767][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1273.637835][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1274.177992][ T24] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1274.339558][ T24] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.351057][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1274.384987][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1274.407822][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1274.431814][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.454390][ T24] usbtmc 5-1:16.0: bulk endpoints not found [ 1277.159736][T32716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'. [ 1277.179119][ T975] usb 5-1: USB disconnect, device number 49 [ 1278.338052][T18109] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1278.509252][T18109] usb 2-1: Using ep0 maxpacket: 16 [ 1279.887847][T18109] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 1279.941187][T18109] usb 2-1: config 0 has no interface number 0 [ 1280.307436][T18109] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1280.322769][T18109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.347805][T18109] usb 2-1: Product: syz [ 1280.353298][T18109] usb 2-1: Manufacturer: syz [ 1280.389387][T18109] usb 2-1: SerialNumber: syz [ 1280.599704][T18109] usb 2-1: config 0 descriptor?? [ 1280.607001][T18109] hub 2-1:0.145: bad descriptor, ignoring hub [ 1280.642293][T18109] hub 2-1:0.145: probe with driver hub failed with error -5 [ 1280.672748][T18109] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input21 [ 1281.094426][ T390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 1281.117738][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1281.281812][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.310157][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1281.367866][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1281.425315][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1281.467747][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.495859][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 1282.919419][ T628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 1283.986854][ T635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2683'. [ 1284.036900][ T978] usb 6-1: USB disconnect, device number 15 [ 1285.586523][ T761] trusted_key: encrypted_key: key user:syz not found [ 1286.509706][ T24] usb 2-1: USB disconnect, device number 53 [ 1286.818026][T18109] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1287.036323][T18109] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.144477][T18109] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1287.366637][T18109] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1287.515284][T18109] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1287.545422][T18109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.597433][T18109] usbtmc 4-1:16.0: bulk endpoints not found [ 1287.917790][T18109] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1288.561619][T18109] usb 5-1: device descriptor read/64, error -71 [ 1288.897886][T18109] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1289.038010][T18109] usb 5-1: device descriptor read/64, error -71 [ 1289.053482][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 1289.188365][T18109] usb usb5-port1: attempt power cycle [ 1289.558038][T18109] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1289.746750][ T1024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2708'. [ 1289.758025][T18109] usb 5-1: device descriptor read/8, error -71 [ 1289.837856][ T5873] usb 4-1: USB disconnect, device number 40 [ 1290.018468][T18109] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1290.048787][T18109] usb 5-1: device descriptor read/8, error -71 [ 1290.169127][T18109] usb usb5-port1: unable to enumerate USB device [ 1290.837845][T18109] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1291.120933][T18109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.132492][T18109] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1291.144696][T18109] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1291.156043][T18109] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 1291.167926][T18109] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1291.421246][T18109] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1291.495012][T18109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.516163][T18109] usb 2-1: Product: syz [ 1291.530167][T18109] usb 2-1: Manufacturer: syz [ 1291.542183][T18109] usb 2-1: SerialNumber: syz [ 1291.973510][ T1184] overlayfs: failed to resolve './file1': -2 [ 1292.331509][ T9] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1292.479594][ T9] usb 5-1: device descriptor read/64, error -71 [ 1292.584416][T18109] cdc_ncm 2-1:1.0: bind() failure [ 1292.593570][T18109] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1292.603175][T18109] cdc_ncm 2-1:1.1: bind() failure [ 1292.737770][ T9] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1292.806948][ T978] usb 2-1: USB disconnect, device number 54 [ 1292.878838][ T9] usb 5-1: device descriptor read/64, error -71 [ 1293.365607][ T9] usb usb5-port1: attempt power cycle [ 1293.727907][ T9] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1293.788718][ T9] usb 5-1: device descriptor read/8, error -71 [ 1294.034138][ T1329] overlayfs: failed to resolve './file1': -2 [ 1294.077939][ T9] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1294.129909][ T9] usb 5-1: device descriptor read/8, error -71 [ 1294.251297][ T9] usb usb5-port1: unable to enumerate USB device [ 1294.291231][ T978] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1294.333795][ T1339] afs: Unknown parameter 'dy' [ 1294.340538][ T1339] overlayfs: overlapping lowerdir path [ 1294.481728][ T978] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1294.510636][ T978] usb 6-1: config 0 has no interface number 0 [ 1294.530370][ T978] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1294.565837][ T978] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 3840, setting to 64 [ 1294.594005][ T978] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1294.622546][ T978] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1294.636473][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.652845][ T978] usb 6-1: Product: syz [ 1294.657079][ T978] usb 6-1: Manufacturer: syz [ 1294.662011][ T978] usb 6-1: SerialNumber: syz [ 1294.997722][ T5873] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1295.119899][ T978] usb 6-1: config 0 descriptor?? [ 1295.128729][ T1330] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1295.144554][ C0] usb 6-1: NFC: Urb failure (status -71) [ 1295.150900][ C0] usb 6-1: NFC: Urb failure (status -71) [ 1295.167263][ T978] usb 6-1: NFC: Unable to get FW version [ 1295.192051][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.216793][ T978] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -71 [ 1295.219015][ T5873] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1295.242068][ T5873] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1295.407914][ T978] usb 6-1: USB disconnect, device number 16 [ 1295.426534][ T5873] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 1295.438265][ T5873] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1295.452048][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1295.462125][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.475000][ T5873] usb 4-1: Product: syz [ 1295.488453][ T1458] overlayfs: failed to resolve './file1': -2 [ 1295.512656][ T5873] usb 4-1: Manufacturer: syz [ 1295.517359][ T5873] usb 4-1: SerialNumber: syz [ 1296.045658][ T1565] Malformed UNC in devname [ 1296.045658][ T1565] [ 1296.052575][ T1565] CIFS: VFS: Malformed UNC in devname [ 1296.524881][ T1568] afs: Unknown parameter 'dy' [ 1296.571106][ T1568] overlayfs: overlapping lowerdir path [ 1297.131977][ T5873] cdc_ncm 4-1:1.0: bind() failure [ 1297.152090][ T5873] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1297.167436][ T5873] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1297.221941][ T1582] siw: device registration error -23 [ 1297.235332][ T1582] IPVS: Error connecting to the multicast addr [ 1297.637737][ T5873] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1297.797169][ T5873] usb 4-1: USB disconnect, device number 41 [ 1297.872140][ T978] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1298.017691][ T978] usb 2-1: device descriptor read/64, error -71 [ 1298.277763][ T978] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1298.704280][ T978] usb 2-1: device descriptor read/64, error -71 [ 1298.845731][ T1696] overlayfs: failed to resolve './file1': -2 [ 1298.928602][ T978] usb usb2-port1: attempt power cycle [ 1299.418597][ T978] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1299.466834][ T1705] afs: Unknown parameter 'dy' [ 1299.480666][ T978] usb 2-1: device descriptor read/8, error -71 [ 1299.506806][ T1705] overlayfs: failed to clone lowerpath [ 1299.747762][ T978] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1299.808345][ T978] usb 2-1: device descriptor read/8, error -71 [ 1299.940811][ T978] usb usb2-port1: unable to enumerate USB device [ 1300.229840][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.238065][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.370896][ T1719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.513845][ T1720] siw: device registration error -23 [ 1300.527456][ T1720] IPVS: Error connecting to the multicast addr [ 1300.938773][ T5873] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1301.357236][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1301.384061][ T1726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1301.396238][ T5873] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 1301.396327][ T1726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1301.417179][ T1726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1301.426421][ T1726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1301.436398][ T1726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1301.467600][T10737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1301.477715][T10737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1301.490012][T10737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1301.501471][T10737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1301.512678][T10737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1301.523906][ T5873] usb 4-1: config 0 has no interface number 0 [ 1301.543994][ T5873] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1301.553420][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.562028][ T5873] usb 4-1: Product: syz [ 1301.566321][ T5873] usb 4-1: Manufacturer: syz [ 1301.571619][ T5873] usb 4-1: SerialNumber: syz [ 1301.579631][ T5873] usb 4-1: config 0 descriptor?? [ 1301.590197][ T5873] hub 4-1:0.145: bad descriptor, ignoring hub [ 1301.602062][ T5873] hub 4-1:0.145: probe with driver hub failed with error -5 [ 1301.614815][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input22 [ 1302.000004][ T1735] overlayfs: failed to resolve './file0': -2 [ 1303.086780][ T1748] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 1303.094801][ T1748] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2780'. [ 1303.486864][T10372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.589430][T10737] Bluetooth: hci4: command tx timeout [ 1303.849423][ T1756] input: syz0 as /devices/virtual/input/input23 [ 1304.275183][T10372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.298154][ T5873] usb 4-1: USB disconnect, device number 42 [ 1304.497408][ T1724] lo speed is unknown, defaulting to 1000 [ 1304.660726][T10372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.922211][T10372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.085418][ T1724] lo speed is unknown, defaulting to 1000 [ 1305.648107][T10737] Bluetooth: hci4: command tx timeout [ 1305.980379][T10372] bridge_slave_1: left allmulticast mode [ 1306.032821][T10372] bridge_slave_1: left promiscuous mode [ 1306.065550][T10372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.143784][T10372] bridge_slave_0: left allmulticast mode [ 1306.177667][T10372] bridge_slave_0: left promiscuous mode [ 1306.214651][T10372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.408568][T10372] tipc: Resetting bearer [ 1307.394526][T10372] tipc: Disabling bearer [ 1307.728139][T10737] Bluetooth: hci4: command tx timeout [ 1307.806995][T10372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.822877][T10372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.838361][T10372] bond0 (unregistering): Released all slaves [ 1307.960506][ T1892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1308.026459][T10372] tipc: Left network mode [ 1308.321046][ T1724] chnl_net:caif_netlink_parms(): no params data found [ 1308.797461][ T1912] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2795'. [ 1309.246888][ T1924] Malformed UNC in devname [ 1309.246888][ T1924] [ 1309.255891][ T1924] CIFS: VFS: Malformed UNC in devname [ 1309.416174][T10372] hsr_slave_0: left promiscuous mode [ 1309.438062][T10372] hsr_slave_1: left promiscuous mode [ 1309.447556][T10372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.455617][T10372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.469050][T10372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.488098][T10372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.535400][T10372] veth1_macvtap: left promiscuous mode [ 1309.557282][T10372] veth0_macvtap: left promiscuous mode [ 1309.583574][T10372] veth1_vlan: left promiscuous mode [ 1309.591494][T10372] veth0_vlan: left promiscuous mode [ 1309.810795][T10737] Bluetooth: hci4: command tx timeout [ 1310.477672][ T2037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2802'. [ 1311.020108][ T2039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2802'. [ 1313.010489][T10372] team0 (unregistering): Port device team_slave_1 removed [ 1313.274173][T10372] team0 (unregistering): Port device team_slave_0 removed [ 1315.021856][ T1724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.031066][ T1724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.040034][ T1724] bridge_slave_0: entered allmulticast mode [ 1315.048405][ T1724] bridge_slave_0: entered promiscuous mode [ 1315.942846][ T2511] xt_connbytes: Forcing CT accounting to be enabled [ 1316.109212][ T1724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.116395][ T1724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.276758][ T1724] bridge_slave_1: entered allmulticast mode [ 1316.287211][ T1724] bridge_slave_1: entered promiscuous mode [ 1317.148830][ T1724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.276626][ T1724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.405096][ T2658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 1317.628817][ T978] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1318.177909][ T1724] team0: Port device team_slave_0 added [ 1318.210900][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.243426][ T1724] team0: Port device team_slave_1 added [ 1318.271715][ T978] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1318.335181][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1318.361691][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1319.098988][ T1724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.107930][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1319.185960][ T1724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.211957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.232979][ T978] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1319.248246][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1319.266820][ T978] usb 2-1: Product: syz [ 1319.278725][ T978] usb 2-1: Manufacturer: syz [ 1319.297219][ T978] usb 2-1: SerialNumber: syz [ 1319.297222][ T1724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.310347][ T978] usb 2-1: config 0 descriptor?? [ 1319.524786][ T1724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.534790][ T1724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.560810][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.577162][ T2686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2826'. [ 1319.588525][ T1724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.259903][ T978] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1320.277850][ T978] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1320.336446][ T978] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1320.355046][ T978] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1320.403540][ T978] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1320.521073][ T2686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2826'. [ 1320.566587][ T978] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1320.761754][ T1724] hsr_slave_0: entered promiscuous mode [ 1320.775334][ T1724] hsr_slave_1: entered promiscuous mode [ 1321.651855][ T978] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1321.688033][ T978] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1321.894528][ T978] usb 2-1: USB disconnect, device number 59 [ 1322.704824][ T2709] lo speed is unknown, defaulting to 1000 [ 1322.890845][ T2709] lo speed is unknown, defaulting to 1000 [ 1323.301579][ T2726] Malformed UNC in devname [ 1323.301579][ T2726] [ 1323.311311][ T2726] CIFS: VFS: Malformed UNC in devname [ 1324.554058][ T2877] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2834'. [ 1325.156041][ T2889] 9pnet_fd: Insufficient options for proto=fd [ 1325.610960][ T1724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1325.800465][ T1724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1326.162243][ T1724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1326.259141][ T1724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1327.652056][ T1724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.672891][ T1724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.724445][ T1724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1327.742124][ T1724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1327.770267][T10002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.777418][T10002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.867656][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.874867][T10002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.366664][ T3013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2840'. [ 1328.618486][ T3016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2840'. [ 1329.351338][ T1724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.642888][ T1724] veth0_vlan: entered promiscuous mode [ 1329.692466][ T1724] veth1_vlan: entered promiscuous mode [ 1329.798429][ T1724] veth0_macvtap: entered promiscuous mode [ 1329.813651][ T1724] veth1_macvtap: entered promiscuous mode [ 1329.877245][ T1724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.923913][ T1724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.962005][ T1724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.034161][ T1724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.101487][ T3056] Malformed UNC in devname [ 1330.101487][ T3056] [ 1330.148896][ T1724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.174029][ T3056] CIFS: VFS: Malformed UNC in devname [ 1330.367842][ T1724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.435889][ T1724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.680100][ T1724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.929119][ T1724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.978964][ T1724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.106571][ T1724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.161885][ T1724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.172958][ T1724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.199382][ T1724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.245221][ T1724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.307670][ T1724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.347665][ T1724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.422502][ T1724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.814964][ T6549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.848141][ T6549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.941517][T10002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.989164][T10002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.587857][ T975] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1332.600786][ T978] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1332.770375][ T975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.810946][ T975] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1332.817667][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 1332.839203][ T975] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1332.841158][ T978] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1332.877129][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.896119][ T975] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 1332.918744][ T978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1332.933995][ T978] pvrusb2: ********** [ 1332.952125][ T978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1332.958273][ T975] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1332.970010][ T978] pvrusb2: Important functionality might not be entirely working. [ 1333.001776][ T975] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1333.011071][ T978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1333.011089][ T978] pvrusb2: ********** [ 1333.075629][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.106736][ T975] usb 6-1: Product: syz [ 1333.120264][ T975] usb 6-1: Manufacturer: syz [ 1333.125015][ T2341] pvrusb2: Invalid write control endpoint [ 1333.145379][ T975] usb 6-1: SerialNumber: syz [ 1333.265217][ T3109] netlink: 'syz.4.2856': attribute type 1 has an invalid length. [ 1333.307744][ T3109] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2856'. [ 1333.313399][ T2341] pvrusb2: Invalid write control endpoint [ 1333.359150][ T10] usb 3-1: USB disconnect, device number 21 [ 1333.383555][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1333.426610][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1333.461459][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1333.480742][ T2341] pvrusb2: Device being rendered inoperable [ 1333.492086][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1333.502152][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1333.519240][ T2341] pvrusb2: Attached sub-driver cx25840 [ 1333.524967][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1333.547711][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1333.907212][ T975] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1333.913829][ T975] cdc_ncm 6-1:1.0: bind() failure [ 1333.924670][ T975] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1333.931805][ T975] cdc_ncm 6-1:1.1: bind() failure [ 1333.947551][ T975] usb 6-1: USB disconnect, device number 17 [ 1334.690781][ T3119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2858'. [ 1334.837932][ T3131] Malformed UNC in devname [ 1334.837932][ T3131] [ 1334.864097][ T3131] CIFS: VFS: Malformed UNC in devname [ 1335.081241][ T3119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2858'. [ 1335.571442][ T3141] lo speed is unknown, defaulting to 1000 [ 1336.105455][ T3141] lo speed is unknown, defaulting to 1000 [ 1337.474401][ T1726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1337.483052][ T1726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1337.490790][ T1726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1337.499027][ T1726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1337.506527][ T1726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1337.830341][ T3147] lo speed is unknown, defaulting to 1000 [ 1338.506914][ T3162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1339.607772][T10737] Bluetooth: hci5: command tx timeout [ 1340.948150][ T3176] xt_connbytes: Forcing CT accounting to be enabled [ 1341.490098][ T3163] wireguard0: entered promiscuous mode [ 1341.495628][ T3163] wireguard0: entered allmulticast mode [ 1341.660400][T10737] Bluetooth: hci5: command tx timeout [ 1341.854916][ T3147] lo speed is unknown, defaulting to 1000 [ 1342.297063][ T3185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 1342.556557][ T3188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2875'. [ 1342.706669][ T3147] chnl_net:caif_netlink_parms(): no params data found [ 1343.052310][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.372616][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.403307][ T3198] binder: BINDER_SET_CONTEXT_MGR already set [ 1343.416576][ T3198] binder: 3197:3198 ioctl 4018620d 200000000040 returned -16 [ 1343.729757][T10737] Bluetooth: hci5: command tx timeout [ 1343.844687][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.967198][ T3204] netlink: 'syz.3.2879': attribute type 1 has an invalid length. [ 1344.022887][ T3204] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2879'. [ 1344.056640][ T3209] overlay: Unknown parameter '//file0' [ 1344.136793][ T62] bridge0: port 3(netdevsim0) entered disabled state [ 1344.270646][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1344.319004][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1344.329391][ T62] bridge0: port 3(netdevsim0) entered disabled state [ 1344.423897][ T3217] netlink: 'syz.4.2881': attribute type 1 has an invalid length. [ 1344.450271][ T3217] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2881'. [ 1344.547038][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.683827][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.706782][ T3147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.724269][ T3147] bridge_slave_0: entered allmulticast mode [ 1345.366108][ T3147] bridge_slave_0: entered promiscuous mode [ 1345.400099][ T3147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.473388][ T3147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.523843][ T3147] bridge_slave_1: entered allmulticast mode [ 1345.566365][ T3147] bridge_slave_1: entered promiscuous mode [ 1345.771812][ T3228] siw: device registration error -23 [ 1345.807861][T10737] Bluetooth: hci5: command tx timeout [ 1346.029230][ T3228] IPVS: Error connecting to the multicast addr [ 1346.158980][ T3147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.204730][ T3147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.320355][ T3232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 1346.560405][ T3147] team0: Port device team_slave_0 added [ 1346.581447][ T3234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2888'. [ 1346.684568][ T3147] team0: Port device team_slave_1 added [ 1347.177785][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1347.215946][ T3147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.248062][ T3147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.446465][ T3147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.479491][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.492385][ T24] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1347.504006][ T3147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.504031][ T3147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.504059][ T3147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.621364][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1347.762282][ T62] bridge_slave_1: left allmulticast mode [ 1347.771638][ T62] bridge_slave_1: left promiscuous mode [ 1347.774783][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 1347.804051][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.042676][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1348.048834][ T62] bridge_slave_0: left allmulticast mode [ 1348.069179][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1348.078360][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.101071][ T24] usb 6-1: Product: syz [ 1348.113252][ T24] usb 6-1: Manufacturer: syz [ 1348.125720][ T24] usb 6-1: SerialNumber: syz [ 1348.129708][ T62] bridge_slave_0: left promiscuous mode [ 1348.136257][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.369462][ T3264] netlink: 'syz.4.2891': attribute type 1 has an invalid length. [ 1348.391745][ T3264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2891'. [ 1348.793370][ T24] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1348.806610][ T24] cdc_ncm 6-1:1.0: bind() failure [ 1348.836989][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1348.846551][ T24] cdc_ncm 6-1:1.1: bind() failure [ 1348.868129][ T24] usb 6-1: USB disconnect, device number 18 [ 1349.083128][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.103941][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.118560][ T62] bond0 (unregistering): Released all slaves [ 1349.159765][ T3147] hsr_slave_0: entered promiscuous mode [ 1349.168736][ T3147] hsr_slave_1: entered promiscuous mode [ 1349.174939][ T3147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1349.201500][ T3147] Cannot create hsr debugfs directory [ 1350.151651][ T3281] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2898'. [ 1350.783211][ T3288] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1350.784074][ T3284] IPVS: stopping master sync thread 3288 ... [ 1351.754429][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.781350][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.821583][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.837777][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1351.870005][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.941613][ T62] veth1_macvtap: left promiscuous mode [ 1351.957456][ T62] veth0_macvtap: left promiscuous mode [ 1351.997972][ T62] veth1_vlan: left promiscuous mode [ 1352.027855][ T62] veth0_vlan: left promiscuous mode [ 1352.038069][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1352.059969][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.109604][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.140378][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1352.178219][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1352.188278][ T3312] netlink: 'syz.4.2903': attribute type 1 has an invalid length. [ 1352.196231][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.227707][ T3312] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2903'. [ 1352.247994][ T24] usb 4-1: config 0 descriptor?? [ 1352.349914][ T975] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1352.540890][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 1352.552677][ T975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.579140][ T975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1352.598315][ T975] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1352.628975][ T975] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1352.658311][ T975] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1352.676435][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 1352.689122][ T975] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1352.706140][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input24 [ 1352.718129][ T975] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1352.727211][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.792956][ T975] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1352.803204][ T24] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1352.817975][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1352.949324][ T10] usb 4-1: USB disconnect, device number 43 [ 1352.970981][ T3311] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2902'. [ 1352.990384][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.006142][ T9] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1353.033011][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1353.058359][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 1353.074980][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1353.091539][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1353.101231][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.109633][ T9] usb 3-1: Product: syz [ 1353.113947][ T9] usb 3-1: Manufacturer: syz [ 1353.119466][ T9] usb 3-1: SerialNumber: syz [ 1353.265531][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1353.311022][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1353.740519][ T9] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1353.951204][ T9] cdc_ncm 3-1:1.0: bind() failure [ 1353.961196][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1353.968158][ T9] cdc_ncm 3-1:1.1: bind() failure [ 1353.992840][ T9] usb 3-1: USB disconnect, device number 22 [ 1355.800034][ T3339] Malformed UNC in devname [ 1355.800034][ T3339] [ 1355.806813][ T3339] CIFS: VFS: Malformed UNC in devname [ 1356.061840][ T975] usb 6-1: USB disconnect, device number 19 [ 1358.153584][ T3389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2921'. [ 1358.393814][ T3147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1358.433906][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.543561][ T3389] bridge_slave_1 (unregistering): left allmulticast mode [ 1358.601417][ T3389] bridge_slave_1 (unregistering): left promiscuous mode [ 1358.627816][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.083373][ T3147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1359.134036][ T3147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1359.218899][ T3147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1360.334337][ T3416] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2927'. [ 1361.043380][ T3147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.170233][ T3147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.211254][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.218488][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.267297][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.274549][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.439245][ T975] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1361.571148][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.589355][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.621028][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 1361.643512][ T975] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1361.672134][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.152135][ T975] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1362.159454][ T975] pvrusb2: ********** [ 1362.163468][ T975] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1362.209322][ T975] pvrusb2: Important functionality might not be entirely working. [ 1362.226669][ T975] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1362.302018][ T975] pvrusb2: ********** [ 1362.319593][ T3147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.369498][ T975] usb 5-1: USB disconnect, device number 58 [ 1362.373025][ T2341] pvrusb2: Invalid write control endpoint [ 1362.921145][ T2341] pvrusb2: Invalid write control endpoint [ 1362.935347][ T3147] veth0_vlan: entered promiscuous mode [ 1362.944542][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1362.980353][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1362.994906][ T3147] veth1_vlan: entered promiscuous mode [ 1363.008263][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1363.052822][ T2341] pvrusb2: Device being rendered inoperable [ 1363.097666][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1363.110587][ T3147] veth0_macvtap: entered promiscuous mode [ 1363.121988][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1363.158404][ T2341] pvrusb2: Attached sub-driver cx25840 [ 1363.162516][ T3147] veth1_macvtap: entered promiscuous mode [ 1363.207981][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1363.249864][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.277877][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1363.317887][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.337270][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.378589][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.432144][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.467770][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.504953][ T3147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.573024][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.602416][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.626785][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.653065][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.667088][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.681998][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.695538][ T3147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.746916][ T3147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.787366][ T3147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.808322][ T3147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.817092][ T3147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.164332][ T3485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1364.230213][ T6549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.256062][T10372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.298145][ T6549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.305598][T10372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.591400][ T3497] netlink: 'syz.1.2859': attribute type 10 has an invalid length. [ 1364.636240][ T3497] team0: Device ipvlan1 failed to register rx_handler [ 1366.987049][ T1726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1367.050625][ T1726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1367.061591][ T1726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1367.078615][ T1726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1367.086326][ T1726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1367.401635][ T3536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1367.614206][ T3530] lo speed is unknown, defaulting to 1000 [ 1367.627738][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1368.010739][ T3545] Cannot find add_set index 0 as target [ 1368.459144][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1368.488952][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.499938][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.509869][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1368.548211][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1368.616812][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.776356][ T10] usb 2-1: config 0 descriptor?? [ 1369.167924][ T1726] Bluetooth: hci1: command tx timeout [ 1369.443580][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 1369.538688][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input25 [ 1369.629502][ T3554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.657005][ T10] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1369.700324][ T3530] lo speed is unknown, defaulting to 1000 [ 1369.755969][ T10] usb 2-1: USB disconnect, device number 60 [ 1370.174549][T10002] bridge_slave_1: left allmulticast mode [ 1370.205218][T10002] bridge_slave_1: left promiscuous mode [ 1370.235335][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.293265][T10002] bridge_slave_0: left allmulticast mode [ 1370.326796][T10002] bridge_slave_0: left promiscuous mode [ 1370.358776][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.346758][ T1726] Bluetooth: hci1: command tx timeout [ 1371.546860][ T3596] xt_connbytes: Forcing CT accounting to be enabled [ 1372.913402][ T3611] netlink: 'syz.3.2971': attribute type 1 has an invalid length. [ 1372.926733][ T3611] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2971'. [ 1373.404281][ T978] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1373.407787][ T1726] Bluetooth: hci1: command tx timeout [ 1373.597870][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 1373.622829][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.685811][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.723750][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1373.786828][ T978] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1373.833880][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.862296][ T978] usb 4-1: config 0 descriptor?? [ 1374.147311][T10002]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.165769][T10002]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.186190][T10002]  (unregistering): Released all slaves [ 1374.301836][ T978] HID 045e:07da: Invalid code 65791 type 1 [ 1374.338826][ T978] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input26 [ 1374.363865][ T978] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1374.455151][T10002] bond1 (unregistering): (slave veth5): Releasing active interface [ 1374.464631][T10002] vlan2: entered promiscuous mode [ 1374.475358][T10002] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1374.487486][T10002] bond1 (unregistering): Released all slaves [ 1374.504405][T12406] usb 4-1: USB disconnect, device number 44 [ 1375.587016][ T1726] Bluetooth: hci1: command tx timeout [ 1376.577812][ T978] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1376.727820][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 1376.745753][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1376.759397][ T978] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1376.768689][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.779608][ T978] usb 3-1: config 0 descriptor?? [ 1376.796900][ T978] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1377.100413][ T10] usb 3-1: USB disconnect, device number 23 [ 1378.282036][ T3659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.514327][ T3646] lo speed is unknown, defaulting to 1000 [ 1379.639864][ T3646] lo speed is unknown, defaulting to 1000 [ 1380.476505][ T3530] chnl_net:caif_netlink_parms(): no params data found [ 1380.490594][ T3678] Malformed UNC in devname [ 1380.490594][ T3678] [ 1380.518737][ T3678] CIFS: VFS: Malformed UNC in devname [ 1383.052538][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.067373][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.086766][ T3530] bridge_slave_0: entered allmulticast mode [ 1383.105475][ T3530] bridge_slave_0: entered promiscuous mode [ 1383.128542][T10002] hsr_slave_0: left promiscuous mode [ 1383.138403][T10002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.157009][T10002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.185577][T12406] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1386.458132][T10002] team0 (unregistering): Port device team_slave_1 removed [ 1386.541137][T12406] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1386.554832][T12406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.563045][T12406] usb 2-1: Product: syz [ 1386.567501][T12406] usb 2-1: Manufacturer: syz [ 1386.575051][T12406] usb 2-1: SerialNumber: syz [ 1386.590586][T12406] usb 2-1: config 0 descriptor?? [ 1386.642742][T10002] team0 (unregistering): Port device team_slave_0 removed [ 1387.562289][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.573983][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.582692][ T3530] bridge_slave_1: entered allmulticast mode [ 1387.600480][ T3530] bridge_slave_1: entered promiscuous mode [ 1387.661509][T12406] usb 2-1: Firmware version (0.0) predates our first public release. [ 1387.681708][T12406] usb 2-1: Please update to version 0.2 or newer [ 1387.846332][ T3530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.863495][ T3530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.076612][ T3749] afs: Bad value for 'source' [ 1388.163045][T12406] usb 2-1: USB disconnect, device number 61 [ 1388.165042][ T3530] team0: Port device team_slave_0 added [ 1388.273653][ T3530] team0: Port device team_slave_1 added [ 1391.430478][ T3530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.480280][ T3530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.506277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1391.642405][ T3530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.271773][ T3530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.307167][ T3530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.365771][ T3530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.514555][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3016'. [ 1392.707953][ T3790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3016'. [ 1392.721016][ T3530] hsr_slave_0: entered promiscuous mode [ 1392.791669][ T3530] hsr_slave_1: entered promiscuous mode [ 1392.809286][ T3530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1392.816901][ T3530] Cannot create hsr debugfs directory [ 1394.289797][ T3819] input: syz0 as /devices/virtual/input/input29 [ 1395.583229][ T3530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1396.585329][ T3845] bridge0: port 3(gretap0) entered blocking state [ 1396.594278][ T3845] bridge0: port 3(gretap0) entered disabled state [ 1396.600962][ T3845] gretap0: entered allmulticast mode [ 1396.609819][ T3845] gretap0: entered promiscuous mode [ 1396.616436][ T3845] bridge0: port 3(gretap0) entered blocking state [ 1396.623029][ T3845] bridge0: port 3(gretap0) entered forwarding state [ 1396.631289][ T3846] gretap0: left allmulticast mode [ 1396.636429][ T3846] gretap0: left promiscuous mode [ 1396.641673][ T3846] bridge0: port 3(gretap0) entered disabled state [ 1396.916387][ T3530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1397.118624][ T3530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1397.200006][ T3530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1398.002361][ T3530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.524974][ T3530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.562531][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1398.654373][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.661589][ T3642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.767537][ T3867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1398.788960][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.796159][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.120229][ T3530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.274625][ T3530] veth0_vlan: entered promiscuous mode [ 1401.954602][ T3530] veth1_vlan: entered promiscuous mode [ 1402.035722][ T3530] veth0_macvtap: entered promiscuous mode [ 1402.092673][ T3530] veth1_macvtap: entered promiscuous mode [ 1402.258863][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.745483][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.797711][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.862301][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.893144][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.926917][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.957688][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.983959][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.154427][ T3530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.215214][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.451103][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.462308][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.474057][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.484795][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.495522][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.505656][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.516400][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.535142][ T3530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.645657][ T3530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.691869][ T3530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.703854][ T3530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.714055][ T3530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.023823][ T3642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.074147][ T3642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.189427][ T3642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.197310][ T3642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.219254][ T3960] wireguard0: entered promiscuous mode [ 1405.233982][ T3960] wireguard0: entered allmulticast mode [ 1408.200747][ T3993] netlink: 'syz.5.3047': attribute type 1 has an invalid length. [ 1408.251200][ T3993] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3047'. [ 1409.477226][T10737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1409.523291][T10737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1409.541607][T10737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1409.551504][T10737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1409.566683][T10737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1409.694828][ T6435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.788212][ T4002] lo speed is unknown, defaulting to 1000 [ 1410.115719][ T6435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.346700][ T6435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.519404][ T6435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.917786][ T4002] lo speed is unknown, defaulting to 1000 [ 1410.965639][ T4009] lo speed is unknown, defaulting to 1000 [ 1410.998409][ T6435] bridge_slave_0: left allmulticast mode [ 1411.014564][ T6435] bridge_slave_0: left promiscuous mode [ 1411.027955][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.658096][T10737] Bluetooth: hci2: command tx timeout [ 1413.669730][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.683674][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.695830][ T6435] bond0 (unregistering): Released all slaves [ 1413.728225][T10737] Bluetooth: hci2: command tx timeout [ 1413.884475][ T4009] lo speed is unknown, defaulting to 1000 [ 1415.827755][T10737] Bluetooth: hci2: command tx timeout [ 1416.087110][ T4072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 1417.889505][T10737] Bluetooth: hci2: command tx timeout [ 1421.141302][ T6435] hsr_slave_0: left promiscuous mode [ 1421.242412][ T6435] hsr_slave_1: left promiscuous mode [ 1421.778449][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.785927][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.253084][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.267651][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.336966][ T6435] veth1_macvtap: left promiscuous mode [ 1422.356026][ T6435] veth0_macvtap: left promiscuous mode [ 1422.361884][ T6435] veth1_vlan: left promiscuous mode [ 1422.390748][ T6435] veth0_vlan: left promiscuous mode [ 1422.657851][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1422.851137][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1422.871598][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.882591][ T24] usb 2-1: Product: syz [ 1422.886858][ T24] usb 2-1: Manufacturer: syz [ 1422.894379][ T24] usb 2-1: SerialNumber: syz [ 1422.913888][ T24] usb 2-1: config 0 descriptor?? [ 1423.020024][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.026643][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.307067][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 1423.370682][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 1423.746007][ T24] usb 2-1: Firmware version (0.0) predates our first public release. [ 1423.765045][ T24] usb 2-1: Please update to version 0.2 or newer [ 1423.974423][ T4009] chnl_net:caif_netlink_parms(): no params data found [ 1424.147035][ T10] lo speed is unknown, defaulting to 1000 [ 1424.224261][ T10] syz0: Port: 1 Link DOWN [ 1424.400893][ T24] usb 2-1: USB disconnect, device number 62 [ 1425.716342][T10737] Bluetooth: hci4: command 0x0406 tx timeout [ 1426.129046][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.156995][ T4009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.181816][ T4009] bridge_slave_0: entered allmulticast mode [ 1426.210329][ T4009] bridge_slave_0: entered promiscuous mode [ 1426.239083][ T4009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.272574][ T4009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.296950][ T4009] bridge_slave_1: entered allmulticast mode [ 1426.312046][ T4009] bridge_slave_1: entered promiscuous mode [ 1427.107708][ T5873] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1427.116244][ T4009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.278377][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1427.278396][ T30] audit: type=1326 audit(1746427118.014:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4199 comm="syz.2.3092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b98e969 code=0x0 [ 1427.288479][ T4009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.388356][ T5873] usb 2-1: device descriptor read/64, error -71 [ 1427.483223][ T4207] random: crng reseeded on system resumption [ 1428.817700][ T5873] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1429.193798][ T5873] usb 2-1: device descriptor read/64, error -71 [ 1429.354135][ T5873] usb usb2-port1: attempt power cycle [ 1430.076585][ T4009] team0: Port device team_slave_0 added [ 1430.224581][ T4009] team0: Port device team_slave_1 added [ 1430.392715][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.427924][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.549607][ T4009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.256118][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.287823][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.328975][ T4231] input: syz0 as /devices/virtual/input/input30 [ 1431.491693][ T4009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.655009][ T4009] hsr_slave_0: entered promiscuous mode [ 1431.700357][ T4009] hsr_slave_1: entered promiscuous mode [ 1431.759161][ T4009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1431.815277][ T4009] Cannot create hsr debugfs directory [ 1431.830622][ T4248] lo speed is unknown, defaulting to 1000 [ 1432.338909][ T4248] lo speed is unknown, defaulting to 1000 [ 1432.478274][ T4258] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1432.530966][ T4255] IPVS: stopping master sync thread 4258 ... [ 1432.747844][ T4248] lo speed is unknown, defaulting to 1000 [ 1432.964753][ T4248] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1434.364773][ T4248] lo speed is unknown, defaulting to 1000 [ 1435.173345][ T4248] lo speed is unknown, defaulting to 1000 [ 1435.179015][ T4271] lo speed is unknown, defaulting to 1000 [ 1435.553322][ T4248] lo speed is unknown, defaulting to 1000 [ 1435.791679][ T4248] lo speed is unknown, defaulting to 1000 [ 1435.816323][ T4248] lo speed is unknown, defaulting to 1000 [ 1435.840308][ T4248] lo speed is unknown, defaulting to 1000 [ 1437.068653][ T4009] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1437.105979][ T4009] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1437.156713][ T4009] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1437.212940][ T4009] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1437.483624][ T975] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1437.634058][ T4009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.722156][ T4009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1437.746801][ T975] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 1437.772499][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.797411][ T975] usb 6-1: config 0 has no interface number 0 [ 1437.812667][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.819932][ T4197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1437.836269][ T975] usb 6-1: New USB device found, idVendor=28a7, idProduct=71ab, bcdDevice=df.39 [ 1437.864178][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.896226][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.903560][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1437.908942][ T975] usb 6-1: Product: syz [ 1437.915082][ T975] usb 6-1: Manufacturer: syz [ 1437.927094][ T975] usb 6-1: SerialNumber: syz [ 1437.945293][ T975] usb 6-1: config 0 descriptor?? [ 1437.945382][ T30] audit: type=1326 audit(1746427128.674:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4324 comm="syz.1.3115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f460a78e969 code=0x0 [ 1437.960233][ T975] cdc_wdm 6-1:0.246: More than one union descriptor, skipping ... [ 1437.982363][ T975] cdc_wdm 6-1:0.246: probe with driver cdc_wdm failed with error -22 [ 1438.231778][ T10] usb 6-1: USB disconnect, device number 20 [ 1439.457431][ T4009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.478802][ T4009] veth0_vlan: entered promiscuous mode [ 1440.564319][ T4009] veth1_vlan: entered promiscuous mode [ 1440.666531][ T4009] veth0_macvtap: entered promiscuous mode [ 1440.810878][ T4009] veth1_macvtap: entered promiscuous mode [ 1440.827901][ T5873] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1441.560581][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.571529][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.588407][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.602128][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.625577][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.656686][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.687950][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 1441.702346][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.722862][ T5873] usb 2-1: no configurations [ 1441.741416][ T5873] usb 2-1: can't read configurations, error -22 [ 1441.748105][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.782990][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.802968][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.834292][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.854647][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.897782][ T5873] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1441.915258][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.949861][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.998929][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.022142][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.053054][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.079723][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1442.107634][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 1442.117537][ T4009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.153941][ T5873] usb 2-1: no configurations [ 1442.164714][ T5873] usb 2-1: can't read configurations, error -22 [ 1442.179305][ T4009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.198372][ T5873] usb usb2-port1: attempt power cycle [ 1442.206167][ T4009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.234640][ T4009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.543500][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.557881][ T5873] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1442.579609][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.598591][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 1442.614893][ T5873] usb 2-1: no configurations [ 1442.631525][ T5873] usb 2-1: can't read configurations, error -22 [ 1442.660106][ T30] audit: type=1326 audit(1746427133.384:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4398 comm="syz.2.3128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b98e969 code=0x0 [ 1442.668218][T10633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.706606][T10633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.007681][ T5873] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1443.090566][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 1443.244251][ T5873] usb 2-1: no configurations [ 1443.442159][ T5873] usb 2-1: can't read configurations, error -22 [ 1443.679103][ T5873] usb usb2-port1: unable to enumerate USB device [ 1446.262786][ T4465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1447.921082][ T4476] Malformed UNC in devname [ 1447.921082][ T4476] [ 1447.978098][ T4476] CIFS: VFS: Malformed UNC in devname [ 1447.981814][ T30] audit: type=1326 audit(1746427138.714:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4477 comm="syz.3.3143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf58e969 code=0x0 [ 1448.280906][ T4482] random: crng reseeded on system resumption [ 1448.297792][T13365] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1449.323651][T13365] usb 5-1: Using ep0 maxpacket: 8 [ 1449.395324][T13365] usb 5-1: no configurations [ 1449.407756][T13365] usb 5-1: can't read configurations, error -22 [ 1449.585248][T13365] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1449.797880][T13365] usb 5-1: Using ep0 maxpacket: 8 [ 1449.812474][T13365] usb 5-1: no configurations [ 1449.817122][T13365] usb 5-1: can't read configurations, error -22 [ 1450.028125][T13365] usb usb5-port1: attempt power cycle [ 1451.778096][T13365] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1452.017702][T13365] usb 5-1: device not accepting address 61, error -71 [ 1453.601747][ T30] audit: type=1326 audit(1746427144.334:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4536 comm="syz.4.3155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bd278e969 code=0x0 [ 1454.392907][ T4544] random: crng reseeded on system resumption [ 1455.584556][ T4551] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 1456.727707][ T975] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1457.277776][ T975] usb 2-1: device descriptor read/64, error -71 [ 1457.371120][ T4576] Malformed UNC in devname [ 1457.371120][ T4576] [ 1457.378197][ T4576] CIFS: VFS: Malformed UNC in devname [ 1457.597851][ T975] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1457.622431][ T4578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.727965][ T975] usb 2-1: device descriptor read/64, error -71 [ 1457.881635][ T975] usb usb2-port1: attempt power cycle [ 1458.967720][ T975] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1459.149418][ T975] usb 2-1: device descriptor read/8, error -71 [ 1460.928247][T10737] Bluetooth: hci5: command 0x0406 tx timeout [ 1462.331618][ T4614] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1463.582909][ T4623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.198724][ T975] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1464.248579][ T4644] Malformed UNC in devname [ 1464.248579][ T4644] [ 1464.255274][ T4644] CIFS: VFS: Malformed UNC in devname [ 1465.119582][ T975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.131754][ T975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1465.289065][ T975] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1465.321904][ T975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1465.408492][ T4653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3189'. [ 1465.487709][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.506474][ T975] usb 3-1: Product: syz [ 1465.519031][ T975] usb 3-1: Manufacturer: syz [ 1465.535619][ T975] usb 3-1: SerialNumber: syz [ 1466.295925][ T975] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1466.317648][ T975] cdc_ncm 3-1:1.0: bind() failure [ 1466.425453][ T4661] Malformed UNC in devname [ 1466.425453][ T4661] [ 1466.446372][ T4661] CIFS: VFS: Malformed UNC in devname [ 1467.740048][T13365] usb 3-1: USB disconnect, device number 24 [ 1467.956156][ T4677] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3195'. [ 1469.164414][ T1726] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 1471.305269][ T4713] Malformed UNC in devname [ 1471.305269][ T4713] [ 1471.312066][ T4713] CIFS: VFS: Malformed UNC in devname [ 1471.477798][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1472.071038][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1472.088275][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.115943][ T10] usb 3-1: config 0 has no interfaces? [ 1472.128214][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1472.149292][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.170681][ T10] usb 3-1: config 0 descriptor?? [ 1472.279481][ T4719] input: syz0 as /devices/virtual/input/input31 [ 1474.691552][ T5873] usb 3-1: USB disconnect, device number 25 [ 1477.097226][ T4758] Malformed UNC in devname [ 1477.097226][ T4758] [ 1477.157067][ T4758] CIFS: VFS: Malformed UNC in devname [ 1477.177912][ T4761] Malformed UNC in devname [ 1477.177912][ T4761] [ 1477.184562][ T4761] CIFS: VFS: Malformed UNC in devname [ 1481.053265][ T4790] dlm: no local IP address has been set [ 1481.060566][ T4790] dlm: cannot start dlm midcomms -107 [ 1484.454933][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.461532][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.433324][ T4798] netlink: 'syz.2.3229': attribute type 4 has an invalid length. [ 1485.441213][ T4798] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3229'. [ 1488.395212][ T4820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1489.812703][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1490.003211][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1490.128797][ T24] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 1490.204111][ T24] usb 5-1: config 0 has no interface number 0 [ 1490.309358][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1490.411601][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.496849][ T24] usb 5-1: Product: syz [ 1490.532133][ T24] usb 5-1: Manufacturer: syz [ 1490.558487][ T24] usb 5-1: SerialNumber: syz [ 1490.805652][ T24] usb 5-1: config 0 descriptor?? [ 1490.913478][ T24] hub 5-1:0.145: bad descriptor, ignoring hub [ 1490.939582][ T24] hub 5-1:0.145: probe with driver hub failed with error -5 [ 1490.949864][ T24] usbhid 5-1:0.145: couldn't find an input interrupt endpoint [ 1491.004867][ T4840] lo speed is unknown, defaulting to 1000 [ 1491.221546][ T4840] lo speed is unknown, defaulting to 1000 [ 1491.299838][ T978] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 1491.397973][T13365] usb 5-1: USB disconnect, device number 63 [ 1491.471882][ T978] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1491.481777][ T978] usb 3-1: config 0 has no interface number 0 [ 1491.488879][ T978] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1491.500113][ T978] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1491.510885][ T978] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1491.523534][ T978] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1491.537217][ T978] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1491.555148][ T978] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1491.572384][ T978] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1491.582946][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.599868][ T978] usb 3-1: config 0 descriptor?? [ 1491.606794][ T4843] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1491.614445][ T4843] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1491.641780][ T978] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1491.861826][ T1726] Bluetooth: hci1: command 0x0406 tx timeout [ 1492.847058][T13365] usb 3-1: USB disconnect, device number 26 [ 1492.915787][T13365] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1496.570984][ T4901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3259'. [ 1497.694472][ T4909] wireguard0: entered promiscuous mode [ 1497.700241][ T4909] wireguard0: entered allmulticast mode [ 1499.209722][ T4933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1499.217630][T18109] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1499.469622][T18109] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.490109][T18109] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.528862][T18109] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1499.547867][T18109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.556003][T18109] usb 4-1: Product: syz [ 1499.586201][T18109] usb 4-1: Manufacturer: syz [ 1499.592738][T18109] usb 4-1: SerialNumber: syz [ 1499.642080][T18109] usb 4-1: selecting invalid altsetting 1 [ 1499.865429][ T4953] input: syz0 as /devices/virtual/input/input32 [ 1499.918419][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3275'. [ 1500.022934][T18109] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1500.029198][T18109] cdc_ncm 4-1:1.0: bind() failure [ 1500.267754][T13365] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1500.427618][T13365] usb 6-1: device descriptor read/64, error -71 [ 1500.464011][ T4959] input: syz0 as /devices/virtual/input/input33 [ 1500.687787][T13365] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1500.897660][T13365] usb 6-1: device descriptor read/64, error -71 [ 1501.078544][T13365] usb usb6-port1: attempt power cycle [ 1501.457708][T13365] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1501.498968][T13365] usb 6-1: device descriptor read/8, error -71 [ 1501.784520][T13365] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1501.888518][T13365] usb 6-1: device descriptor read/8, error -71 [ 1502.009538][T13365] usb usb6-port1: unable to enumerate USB device [ 1502.012406][ T5873] usb 4-1: USB disconnect, device number 45 [ 1502.607990][T18109] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1502.614597][T10737] Bluetooth: hci4: command 0x0406 tx timeout [ 1502.625695][T18109] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1504.400271][ T5005] sp0: Synchronizing with TNC [ 1504.967612][ T978] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1505.169618][ T978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.304949][ T978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.316030][ T978] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1505.331684][ T978] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1505.357676][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.365908][ T978] usb 6-1: Product: syz [ 1505.370160][ T978] usb 6-1: Manufacturer: syz [ 1505.375158][ T978] usb 6-1: SerialNumber: syz [ 1505.537997][ T5031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3299'. [ 1506.128870][T10737] Bluetooth: hci5: command 0x0406 tx timeout [ 1506.137087][T18109] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1506.147651][T18109] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1506.841969][ T978] cdc_ncm 6-1:1.0: bind() failure [ 1506.870462][ T978] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1506.900829][ T978] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1506.919157][ T978] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1506.945781][ T978] usb 6-1: USB disconnect, device number 25 [ 1508.297639][T10737] Bluetooth: hci1: command 0x0406 tx timeout [ 1508.384832][T18109] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1508.395681][T18109] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1509.719627][ T5075] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3312'. [ 1510.849281][T18109] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1510.855603][T18109] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1510.859594][T10737] Bluetooth: hci2: command 0x0c1a tx timeout [ 1511.998471][ T5095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'. [ 1512.316055][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3317'. [ 1512.616904][ T5102] ptrace attach of "./syz-executor exec"[1724] was attempted by ""[5102] [ 1513.171538][ T5106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1519.341230][ T5151] ptrace attach of "./syz-executor exec"[3530] was attempted by ""[5151] [ 1523.628909][ T5184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1528.588012][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1528.839848][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.907787][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.919851][ T24] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1528.931864][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1528.946976][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 1528.965634][ T24] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1529.001742][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1529.011787][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.027297][ T24] usb 5-1: Product: syz [ 1529.037620][ T24] usb 5-1: Manufacturer: syz [ 1529.049807][ T24] usb 5-1: SerialNumber: syz [ 1530.471577][ T24] cdc_ncm 5-1:1.0: bind() failure [ 1530.514846][ T24] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1530.564198][ T24] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1530.637766][ T24] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1530.707664][ T24] usb 5-1: USB disconnect, device number 64 [ 1545.901647][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.908259][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.340479][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.346842][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1659.177752][ T31] INFO: task kworker/1:1:12406 blocked for more than 143 seconds. [ 1659.185633][ T31] Not tainted 6.15.0-rc5-syzkaller #0 [ 1659.191630][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1659.200387][ T31] task:kworker/1:1 state:D stack:21736 pid:12406 tgid:12406 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1659.212660][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1659.219465][ T31] Call Trace: [ 1659.222772][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1659.225732][ T31] __schedule+0x168f/0x4c70 [ 1659.235664][ T31] ? schedule+0x165/0x360 [ 1659.246525][ T31] ? __pfx___schedule+0x10/0x10 [ 1659.251782][ T31] ? schedule+0x91/0x360 [ 1659.256075][ T31] schedule+0x165/0x360 [ 1659.277589][ T31] schedule_preempt_disabled+0x13/0x30 [ 1659.283134][ T31] __mutex_lock+0x724/0xe80 [ 1659.307526][ T31] ? __mutex_lock+0x51b/0xe80 [ 1659.312472][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1659.326533][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1659.334247][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1659.340340][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1659.346109][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1659.352324][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1659.359276][ T31] process_scheduled_works+0xadb/0x17a0 [ 1659.364898][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1659.370963][ T31] worker_thread+0x8a0/0xda0 [ 1659.375813][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1659.382266][ T31] ? __kthread_parkme+0x7b/0x200 [ 1659.387239][ T31] kthread+0x70e/0x8a0 [ 1659.391355][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1659.396497][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.401207][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.405822][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1659.411089][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.416309][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.421013][ T31] ret_from_fork+0x4b/0x80 [ 1659.425453][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.430092][ T31] ret_from_fork_asm+0x1a/0x30 [ 1659.434899][ T31] [ 1659.438272][ T31] INFO: task kworker/1:4:18109 blocked for more than 143 seconds. [ 1659.446089][ T31] Not tainted 6.15.0-rc5-syzkaller #0 [ 1659.452110][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1659.460926][ T31] task:kworker/1:4 state:D stack:22120 pid:18109 tgid:18109 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1659.475677][ T31] Workqueue: events rfkill_op_handler [ 1659.481408][ T31] Call Trace: [ 1659.484712][ T31] [ 1659.487761][ T31] __schedule+0x168f/0x4c70 [ 1659.492540][ T31] ? schedule+0x165/0x360 [ 1659.496953][ T31] ? __pfx___schedule+0x10/0x10 [ 1659.502068][ T31] ? schedule+0x91/0x360 [ 1659.506335][ T31] schedule+0x165/0x360 [ 1659.510571][ T31] schedule_preempt_disabled+0x13/0x30 [ 1659.516052][ T31] __mutex_lock+0x724/0xe80 [ 1659.520675][ T31] ? __mutex_lock+0x51b/0xe80 [ 1659.525404][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1659.530794][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1659.535867][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.541192][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1659.547113][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1659.553524][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 1659.558894][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1659.564647][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1659.571308][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1659.577080][ T31] rfkill_set_block+0x1cf/0x440 [ 1659.582521][ T31] rfkill_epo+0x7e/0x180 [ 1659.586817][ T31] rfkill_op_handler+0x84/0x240 [ 1659.591782][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1659.597793][ T31] process_scheduled_works+0xadb/0x17a0 [ 1659.603425][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1659.609489][ T31] worker_thread+0x8a0/0xda0 [ 1659.614321][ T31] kthread+0x70e/0x8a0 [ 1659.618450][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1659.623695][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.628384][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.633008][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1659.638260][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.643480][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.648165][ T31] ret_from_fork+0x4b/0x80 [ 1659.652602][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.657193][ T31] ret_from_fork_asm+0x1a/0x30 [ 1659.662049][ T31] [ 1659.665117][ T31] INFO: task syz.1.3274:4944 blocked for more than 143 seconds. [ 1659.673043][ T31] Not tainted 6.15.0-rc5-syzkaller #0 [ 1659.679010][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1659.687745][ T31] task:syz.1.3274 state:D stack:25560 pid:4944 tgid:4943 ppid:3147 task_flags:0x400140 flags:0x00004006 [ 1659.699747][ T31] Call Trace: [ 1659.703040][ T31] [ 1659.705970][ T31] __schedule+0x168f/0x4c70 [ 1659.710533][ T31] ? schedule+0x165/0x360 [ 1659.714891][ T31] ? __pfx___schedule+0x10/0x10 [ 1659.719851][ T31] ? schedule+0x91/0x360 [ 1659.724130][ T31] schedule+0x165/0x360 [ 1659.728429][ T31] schedule_preempt_disabled+0x13/0x30 [ 1659.733920][ T31] __mutex_lock+0x724/0xe80 [ 1659.738506][ T31] ? kobject_put+0x43f/0x480 [ 1659.743132][ T31] ? __mutex_lock+0x51b/0xe80 [ 1659.747857][ T31] ? rfkill_unregister+0xc8/0x220 [ 1659.752906][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1659.757992][ T31] ? __pfx_device_del+0x10/0x10 [ 1659.762882][ T31] rfkill_unregister+0xc8/0x220 [ 1659.767795][ T31] nfc_unregister_device+0x96/0x2a0 [ 1659.773003][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1659.779119][ T31] virtual_ncidev_close+0x56/0x90 [ 1659.784204][ T31] __fput+0x449/0xa70 [ 1659.788278][ T31] task_work_run+0x1d1/0x260 [ 1659.792930][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1659.798150][ T31] get_signal+0x11c5/0x1310 [ 1659.802702][ T31] ? task_work_add+0x377/0x420 [ 1659.807549][ T31] arch_do_signal_or_restart+0x95/0x780 [ 1659.813190][ T31] ? __fget_files+0x2a/0x420 [ 1659.817968][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1659.824172][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1659.830140][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 1659.835717][ T31] do_syscall_64+0x103/0x210 [ 1659.840400][ T31] ? clear_bhb_loop+0x45/0xa0 [ 1659.845120][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.851098][ T31] RIP: 0033:0x7f460a78e969 [ 1659.855544][ T31] RSP: 002b:00007f460b592038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1659.864007][ T31] RAX: fffffffffffffff2 RBX: 00007f460a9b5fa0 RCX: 00007f460a78e969 [ 1659.872026][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1659.880063][ T31] RBP: 00007f460a810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1659.888345][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1659.896362][ T31] R13: 0000000000000000 R14: 00007f460a9b5fa0 R15: 00007fffe280a608 [ 1659.904423][ T31] [ 1659.907558][ T31] [ 1659.907558][ T31] Showing all locks held in the system: [ 1659.915300][ T31] 1 lock held by khungtaskd/31: [ 1659.920216][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1659.930160][ T31] 2 locks held by getty/5571: [ 1659.934832][ T31] #0: ffff88814d42a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1659.944641][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1659.954847][ T31] 3 locks held by kworker/1:1/12406: [ 1659.960199][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1659.971268][ T31] #1: ffffc900046cfc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1659.984871][ T31] #2: ffffffff8f5b6d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1659.996267][ T31] 4 locks held by kworker/1:4/18109: [ 1660.001833][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1660.012887][ T31] #1: ffffc900038cfc60 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1660.023917][ T31] #2: ffffffff8f5b6d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 1660.033458][ T31] #3: ffff88807b46b100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1660.043210][ T31] 2 locks held by syz.1.3274/4944: [ 1660.048632][ T31] #0: ffff88807b46b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1660.058718][ T31] #1: ffffffff8f5b6d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1660.068929][ T31] 2 locks held by syz-executor/5155: [ 1660.074220][ T31] #0: ffff88802279e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1660.084274][ T31] #1: ffffffff8f5b6d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1660.094265][ T31] 2 locks held by syz.5.3356/5240: [ 1660.099425][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.108180][ T31] #1: ffffffff8f5b6d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 1660.118285][ T31] 1 lock held by syz.3.3365/5264: [ 1660.123333][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.131995][ T31] 1 lock held by syz.2.3366/5267: [ 1660.137386][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.145926][ T31] 1 lock held by syz.4.3371/5287: [ 1660.150995][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.159558][ T31] 1 lock held by syz-executor/5294: [ 1660.164767][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.173268][ T31] 1 lock held by syz-executor/5296: [ 1660.178521][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.187018][ T31] 1 lock held by syz-executor/5298: [ 1660.192278][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.200824][ T31] 1 lock held by syz-executor/5300: [ 1660.206028][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.214538][ T31] 1 lock held by syz-executor/5306: [ 1660.220016][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.228563][ T31] 1 lock held by syz-executor/5309: [ 1660.233787][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.242353][ T31] 1 lock held by syz-executor/5311: [ 1660.247596][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.256097][ T31] 1 lock held by syz-executor/5313: [ 1660.261362][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.269912][ T31] 1 lock held by syz-executor/5315: [ 1660.275104][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.283610][ T31] 1 lock held by syz-executor/5318: [ 1660.288863][ T31] #0: ffffffff8e79b228 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1660.297368][ T31] [ 1660.299755][ T31] ============================================= [ 1660.299755][ T31] [ 1660.308200][ T31] NMI backtrace for cpu 0 [ 1660.308212][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 1660.308232][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1660.308243][ T31] Call Trace: [ 1660.308251][ T31] [ 1660.308259][ T31] dump_stack_lvl+0x189/0x250 [ 1660.308283][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1660.308306][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1660.308330][ T31] ? __pfx__printk+0x10/0x10 [ 1660.308371][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1660.308402][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1660.308426][ T31] ? _printk+0xcf/0x120 [ 1660.308458][ T31] ? __pfx__printk+0x10/0x10 [ 1660.308487][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1660.308516][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1660.308540][ T31] watchdog+0xfee/0x1030 [ 1660.308558][ T31] ? watchdog+0x1de/0x1030 [ 1660.308579][ T31] kthread+0x70e/0x8a0 [ 1660.308596][ T31] ? __pfx_watchdog+0x10/0x10 [ 1660.308611][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.308627][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.308641][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1660.308654][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.308669][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.308683][ T31] ret_from_fork+0x4b/0x80 [ 1660.308696][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.308710][ T31] ret_from_fork_asm+0x1a/0x30 [ 1660.308742][ T31] [ 1660.308747][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1660.453776][ C1] NMI backtrace for cpu 1 [ 1660.453797][ C1] CPU: 1 UID: 0 PID: 10002 Comm: kworker/u8:0 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 1660.453818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1660.453830][ C1] Workqueue: bat_events batadv_nc_worker [ 1660.453851][ C1] RIP: 0010:__lock_acquire+0x6ad/0xd20 [ 1660.453876][ C1] Code: 08 00 00 00 e8 a4 25 00 00 45 31 e4 85 c0 0f 84 57 04 00 00 83 3d a2 2f df 17 00 75 13 48 63 44 24 18 48 0f a3 05 63 a0 db 11 <0f> 83 35 05 00 00 31 c0 48 8b 3c 24 4c 8b b7 e0 0a 00 00 48 83 7c [ 1660.453891][ C1] RSP: 0018:ffffc90004f7f9a0 EFLAGS: 00000047 [ 1660.453905][ C1] RAX: 0000000000000007 RBX: 0000000000000002 RCX: ffffffff931acc58 [ 1660.453916][ C1] RDX: 0000000000000008 RSI: ffff888030882940 RDI: ffff888030881e00 [ 1660.453928][ C1] RBP: ffff8880308828f0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.453939][ C1] R10: 0000000000000000 R11: ffffffff8b1d1b52 R12: 0000000000000000 [ 1660.453950][ C1] R13: 0000000000000000 R14: ffff888030882960 R15: ffff888030882940 [ 1660.453961][ C1] FS: 0000000000000000(0000) GS:ffff8881261fd000(0000) knlGS:0000000000000000 [ 1660.453975][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1660.453986][ C1] CR2: 000055815ac54088 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 1660.454001][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1660.454011][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1660.454021][ C1] Call Trace: [ 1660.454028][ C1] [ 1660.454039][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1660.454053][ C1] lock_acquire+0x120/0x360 [ 1660.454074][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1660.454093][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1660.454108][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1660.454122][ C1] batadv_nc_worker+0xef/0x610 [ 1660.454137][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1660.454153][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1660.454178][ C1] process_scheduled_works+0xadb/0x17a0 [ 1660.454215][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1660.454248][ C1] worker_thread+0x8a0/0xda0 [ 1660.454283][ C1] kthread+0x70e/0x8a0 [ 1660.454302][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1660.454326][ C1] ? __pfx_kthread+0x10/0x10 [ 1660.454343][ C1] ? __pfx_kthread+0x10/0x10 [ 1660.454360][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1660.454376][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.454394][ C1] ? __pfx_kthread+0x10/0x10 [ 1660.454410][ C1] ret_from_fork+0x4b/0x80 [ 1660.454424][ C1] ? __pfx_kthread+0x10/0x10 [ 1660.454441][ C1] ret_from_fork_asm+0x1a/0x30 [ 1660.454474][ C1] [ 1660.454936][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1660.714611][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 1660.724681][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1660.734767][ T31] Call Trace: [ 1660.738057][ T31] [ 1660.740994][ T31] dump_stack_lvl+0x99/0x250 [ 1660.745600][ T31] ? __asan_memcpy+0x40/0x70 [ 1660.750215][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1660.755442][ T31] ? __pfx__printk+0x10/0x10 [ 1660.760076][ T31] panic+0x2db/0x790 [ 1660.763993][ T31] ? __pfx_panic+0x10/0x10 [ 1660.768422][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1660.774269][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1660.779650][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1660.785829][ T31] watchdog+0x102d/0x1030 [ 1660.790167][ T31] ? watchdog+0x1de/0x1030 [ 1660.794593][ T31] kthread+0x70e/0x8a0 [ 1660.798670][ T31] ? __pfx_watchdog+0x10/0x10 [ 1660.803351][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.807944][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.812555][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1660.817767][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.822976][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.827579][ T31] ret_from_fork+0x4b/0x80 [ 1660.832013][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.836622][ T31] ret_from_fork_asm+0x1a/0x30 [ 1660.841428][ T31] [ 1660.844787][ T31] Kernel Offset: disabled [ 1660.849118][ T31] Rebooting in 86400 seconds..