last executing test programs: 18m58.530678591s ago: executing program 4 (id=32): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) 18m58.125370211s ago: executing program 4 (id=35): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000d40)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x102) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 18m57.856147671s ago: executing program 4 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 18m56.131615145s ago: executing program 4 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200c080, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 18m55.229095888s ago: executing program 4 (id=46): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) 18m49.767699807s ago: executing program 4 (id=58): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80108907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000480010007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) 18m48.374247453s ago: executing program 32 (id=58): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80108907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000480010007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) 17m12.057663716s ago: executing program 2 (id=366): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000100)="a00064bced2a4a68", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) 17m9.685951872s ago: executing program 2 (id=372): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000003340)={@local, @remote, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "19b95b", 0xd43, 0x21, 0x1, @loopback, @remote, {[@hopopts={0x73, 0x193, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @generic={0xd8, 0xc8b, "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"}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x7, 0x1, "5cd800"}, "b937b6d18cdd9993b2e1fc9639aea4664c96ba2b7f71749d0be2a8a5bcd2e24a573699d8e3f0d6be1be6fc78d281a557450fe2ebf80945066bd9a6223301e2afb15de71765594266ffb37ef6193125b6e252dab16b0b659e224c6c4bd8c0ed320017a34a63b7e2f90190d7e678bba15afcb4836af800cc66c10320127dbe2e5b4ea565c116c8dfdd1e2684"}}}}}}, 0x0) 17m6.611060802s ago: executing program 2 (id=376): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 17m4.474573141s ago: executing program 2 (id=381): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0}) 17m2.242443164s ago: executing program 2 (id=386): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0xed0, &(0x7f0000000140)={0x0, 0x100003, 0x10300, 0x2, 0x302}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) truncate(0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) setpgid(0x0, r3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) wait4(0x0, 0x0, 0x40000000, 0x0) 16m57.628183607s ago: executing program 2 (id=391): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 16m40.722746986s ago: executing program 33 (id=391): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 15m53.68409267s ago: executing program 1 (id=508): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000007000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000630101000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0xd2, &(0x7f00000002c0)=""/210, 0x40f00, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 15m53.494286207s ago: executing program 1 (id=509): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000006c0)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x4040000) close(r1) 15m51.413147269s ago: executing program 1 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_destroy(0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) 15m50.507108814s ago: executing program 1 (id=514): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 15m49.209213834s ago: executing program 1 (id=518): syz_usb_connect(0x3, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff0005240610"], 0x0) 15m46.361959168s ago: executing program 1 (id=527): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) write(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x5) 15m43.767781269s ago: executing program 34 (id=527): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) write(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x5) 10m15.293732722s ago: executing program 5 (id=1420): syz_emit_vhci(&(0x7f0000000580)=ANY=[], 0x7) 10m15.074929077s ago: executing program 5 (id=1421): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) syz_io_uring_setup(0x1116, &(0x7f0000000100)={0x0, 0xbfdc, 0x100, 0x0, 0x1}, &(0x7f0000000940), &(0x7f0000000180)) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) 10m14.289305024s ago: executing program 5 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000feffffff0f00000008000300", @ANYRES32=r1, @ANYBLOB="05003500b500000008003400035f"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x18) 10m14.100118721s ago: executing program 5 (id=1423): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c000000400007012bbd7000fedbdf25037c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="040008"], 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 10m13.915890042s ago: executing program 5 (id=1424): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200"], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x2e}, 0x1) 10m13.617863169s ago: executing program 5 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="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", 0x16c}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000019080)=0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x210a, r8}, 0x0) 9m57.478290281s ago: executing program 35 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="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", 0x16c}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000019080)=0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x210a, r8}, 0x0) 8m47.514413085s ago: executing program 8 (id=1705): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000002433000000000000000000000000000a"], 0xb8}}, 0x10) 8m45.535674812s ago: executing program 8 (id=1709): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) 8m38.843575001s ago: executing program 8 (id=1727): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = io_uring_setup(0x30f5, &(0x7f0000000280)={0x0, 0x7022, 0x8, 0xfffffffe, 0x19b}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000200)=""/80, 0xfffffff1, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/163, 0xa3, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f0000000940)=""/224, 0xe0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xb8, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000ac0)=""/207, 0xcf, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000740)={0x2, 0x0, {&(0x7f0000000300)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000480)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) syz_emit_ethernet(0x7c, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r1], 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000040)=0x1f) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000007c0)={0x2, 0x0, {&(0x7f0000000140)=""/9, 0x9, &(0x7f00000005c0)=""/168, 0xc525565a05c69735}}, 0x48) poll(&(0x7f00000001c0)=[{r1, 0xd404}, {0xffffffffffffffff, 0x201}], 0x2, 0x8) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x2b6, &(0x7f0000000740)={0x0, 0x201c2a, 0x10100, 0x0, 0x20400000}, &(0x7f0000000900)=0x0, &(0x7f0000000bc0)=0x0) sendto$inet(r6, &(0x7f0000000840)="21e28fb8f5baaa948c75e684978319e86ab01a48b4c8403df71d93912eb1f826e861022834ea3efdee4cc1c0f1b510efbdd49ca7755d79d77fffddedd83ff6659f65c6571043a6645ffbdfaf7d1f40f90e099157834be8c5dc79e466fd1eeae0b5", 0x61, 0x4004001, &(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x939514a0e4ee2983, 0x0, 0x0, 0x0, &(0x7f0000000c40), 0x1, 0xc, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0xffffffffffff8000, 0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000080)=0x4) 8m37.223221529s ago: executing program 8 (id=1730): setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x10, 0x0) 8m36.94601472s ago: executing program 8 (id=1732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x80010, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r3, 0x540b, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) 8m26.1469178s ago: executing program 8 (id=1762): mknodat(0xffffffffffffff9c, 0x0, 0x4000, 0x700) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000016c0)='H', 0x1}], 0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup\x00', 0x0, 0x809fccad09757fac, 0x0) 8m10.840558817s ago: executing program 36 (id=1762): mknodat(0xffffffffffffff9c, 0x0, 0x4000, 0x700) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000016c0)='H', 0x1}], 0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup\x00', 0x0, 0x809fccad09757fac, 0x0) 24.302270437s ago: executing program 0 (id=2910): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) 20.971440344s ago: executing program 7 (id=2914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r5 = syz_io_uring_setup(0x52a, &(0x7f0000000580)={0x0, 0x74c2, 0x400, 0x2, 0x2a0}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) io_uring_setup(0x400289a, &(0x7f00000002c0)={0x0, 0xafa5, 0x1000, 0x2, 0x1000d1, 0x0, r5}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r10 = dup(r9) ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0xedd, 0x75, 0x2, 0x4010002, 0x7}) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, 0x0, 0x24000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19.738597575s ago: executing program 0 (id=2916): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_init_net_socket$ax25(0x3, 0x3, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557", 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0), 0x0, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc054) 18.533198434s ago: executing program 0 (id=2917): openat$mice(0xffffff9c, 0x0, 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 17.358796013s ago: executing program 9 (id=2919): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) 17.027357033s ago: executing program 7 (id=2920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r5 = syz_io_uring_setup(0x52a, &(0x7f0000000580)={0x0, 0x74c2, 0x400, 0x2, 0x2a0}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = fsopen(&(0x7f0000000200)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r11 = dup(r10) ioctl$SG_BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000240)={'\x00', 0xedd, 0x75, 0x2, 0x4010002, 0x7}) ioctl$BLKTRACESTART(r11, 0x1274, 0x0) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, 0x0, 0x24000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 14.921289371s ago: executing program 3 (id=2923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 13.717058853s ago: executing program 6 (id=2924): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) fcntl$setown(r0, 0x8, 0x0) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x70b925, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x10000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x48}}, 0x0) listen(0xffffffffffffffff, 0x7ff) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0) 12.622995315s ago: executing program 9 (id=2925): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) 12.05072434s ago: executing program 7 (id=2926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) 11.619339844s ago: executing program 9 (id=2927): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@local, @broadcast}, &(0x7f0000000180)=0xfffffffffffffea9) r3 = openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(r3, 0x0, 0x200, 0x4bde) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x3, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r4, 0x540b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 10.925058386s ago: executing program 7 (id=2928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) 10.589929816s ago: executing program 6 (id=2929): setresgid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x400) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x8, r4, 0x6}, 0xc) 10.465166277s ago: executing program 3 (id=2930): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x35) process_vm_writev(0x0, &(0x7f0000002a80), 0x0, &(0x7f0000005dc0), 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x200, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x44080) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x20a000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) syz_emit_ethernet(0x114a, &(0x7f0000006fc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000050080780001"], 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r6) 8.545566757s ago: executing program 9 (id=2931): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x0, 0xe}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000580), 0x0) 7.656681629s ago: executing program 6 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 7.448022761s ago: executing program 3 (id=2933): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x1, 0x1fd, 0x7f, 0x0, 0x11}) 7.381635372s ago: executing program 0 (id=2934): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 7.380454332s ago: executing program 7 (id=2935): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) 7.236409141s ago: executing program 3 (id=2936): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 7.19141965s ago: executing program 6 (id=2937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) 6.777313239s ago: executing program 9 (id=2938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2', &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb00x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x70b925, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x10000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x48}}, 0x0) listen(0xffffffffffffffff, 0x7ff) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0) 5.012688425s ago: executing program 6 (id=2940): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x20a0, 0x20000000, 0x0, 0x0, 0x0) 3.746480898s ago: executing program 3 (id=2941): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 2.524618594s ago: executing program 9 (id=2942): setresgid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x400) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x8, r4, 0x6}, 0xc) 2.501666077s ago: executing program 6 (id=2943): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8040) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000005180)={0x2020}, 0x2020) mq_unlink(0x0) close_range(r7, 0xffffffffffffffff, 0x2) set_mempolicy(0x2, 0x0, 0x4) 1.28359738s ago: executing program 7 (id=2944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000100)={0x0, 0x0, 0x29, 0x0, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') 464.943097ms ago: executing program 3 (id=2945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000100)={0x0, 0x0, 0x29, 0x0, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') 0s ago: executing program 0 (id=2946): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6000, @fd, 0x9, 0x0, 0x0, 0xd, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4) kernel console output (not intermixed with test programs): .0017: failed probing pen v1 parameters: -71 [ 601.339171][ T9] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 601.339289][ T9] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 601.357877][ T9] usb 6-1: USB disconnect, device number 21 [ 602.751666][T10506] random: crng reseeded on system resumption [ 603.545102][ T5864] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 603.553072][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 603.731464][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.731499][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.732938][ T5864] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 603.732968][ T5864] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 603.732990][ T5864] usb 4-1: Manufacturer: syz [ 603.745037][ T5864] usb 4-1: config 0 descriptor?? [ 603.829011][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.829040][ T9] usb 6-1: config 0 has no interfaces? [ 603.831777][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 603.831997][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 603.832013][ T9] usb 6-1: SerialNumber: syz [ 603.888446][ T9] usb 6-1: config 0 descriptor?? [ 604.056752][T10516] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 604.056783][T10516] CIFS mount error: No usable UNC path provided in device string! [ 604.056783][T10516] [ 604.057379][T10516] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 604.167369][ T37] usb 6-1: USB disconnect, device number 22 [ 604.372316][T10521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 604.865173][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.865656][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.605669][ T5864] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #100: -71 [ 606.605740][ T5864] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 606.605758][ T5864] uclogic 0003:256C:006D.0018: failed probing pen v1 parameters: -71 [ 606.605812][ T5864] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 606.605922][ T5864] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 606.728138][ T5864] usb 4-1: USB disconnect, device number 26 [ 606.965682][ T808] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 607.578652][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 607.647456][ T808] usb 1-1: not running at top speed; connect to a high speed hub [ 608.054437][ T808] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 608.054470][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.054492][ T808] usb 1-1: Product: syz [ 608.054508][ T808] usb 1-1: Manufacturer: syz [ 608.054523][ T808] usb 1-1: SerialNumber: syz [ 608.392149][ T808] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.483581][ T9770] udevd[9770]: setting owner of /dev/gsmtty15 to uid=0, gid=0 failed: No such file or directory [ 611.415638][ T808] usb 1-1: USB disconnect, device number 20 [ 612.243998][T10226] udevd[10226]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.633140][T10591] ieee802154 phy0 wpan0: encryption failed: -22 [ 612.635347][T10591] binder: 10585:10591 ioctl 4008586f 200000000080 returned -22 [ 615.863781][T10600] Bluetooth: Wrong link type (-57) [ 616.818530][T10600] Bluetooth: hci0: command 0x0406 tx timeout [ 616.818573][T10600] Bluetooth: hci2: command 0x0406 tx timeout [ 618.765667][T10632] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.768180][T10632] binder: 10626:10632 ioctl 4008586f 200000000080 returned -22 [ 623.939589][ T5806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 624.582463][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.582548][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.924191][T10685] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.942442][T10685] binder: 10678:10685 ioctl 4008586f 200000000080 returned -22 [ 626.059032][T10695] overlayfs: missing 'lowerdir' [ 626.350486][T10690] cgroup: none used incorrectly [ 628.036277][ T5810] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 629.876581][T10737] 9p: Bad value for 'rfdno' [ 630.174415][T10739] cgroup: none used incorrectly [ 631.907173][T10754] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1404'. [ 632.714385][T10763] 9p: Bad value for 'rfdno' [ 638.253279][ T808] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 638.445585][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 638.961069][ T808] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 638.961115][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.961137][ T808] usb 4-1: Product: syz [ 638.961153][ T808] usb 4-1: Manufacturer: syz [ 638.961169][ T808] usb 4-1: SerialNumber: syz [ 639.277807][ T808] usb 4-1: config 0 descriptor?? [ 639.296684][ T808] uvcvideo 4-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 639.296728][ T808] uvcvideo 4-1:0.0: No valid video chain found. [ 639.494834][ T5864] usb 4-1: USB disconnect, device number 27 [ 639.514893][ T5927] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 639.565426][ T6112] Bluetooth: hci5: Frame reassembly failed (-84) [ 641.528406][ T5806] Bluetooth: hci5: command 0x1003 tx timeout [ 641.533490][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 643.820095][ T5810] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 643.918359][T10869] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.930606][T10869] binder: 10864:10869 ioctl 4008586f 200000000080 returned -22 [ 647.138586][T10874] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 648.213361][T10901] binder: 10898:10901 ioctl 4008586f 200000000080 returned -22 [ 649.099337][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1464'. [ 649.099363][T10903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1464'. [ 652.730719][T10933] binder: 10929:10933 ioctl 4008586f 200000000080 returned -22 [ 655.089995][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 656.025720][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 656.027329][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 656.028699][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 656.033102][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 656.867222][ T5806] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 657.042530][T10960] overlayfs: failed to resolve './file1/file0': -2 [ 657.474520][T10966] binder: 10962:10966 ioctl 4008586f 200000000080 returned -22 [ 658.612701][ T5806] Bluetooth: hci5: command tx timeout [ 658.751265][ T5806] Bluetooth: hci4: unexpected event for opcode 0x040d [ 659.681531][T10946] chnl_net:caif_netlink_parms(): no params data found [ 660.396045][ T5806] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 660.402234][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.402452][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.402682][T10946] bridge_slave_0: entered allmulticast mode [ 660.405459][T10946] bridge_slave_0: entered promiscuous mode [ 660.484360][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.484543][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.484793][T10946] bridge_slave_1: entered allmulticast mode [ 660.508501][T10946] bridge_slave_1: entered promiscuous mode [ 660.578084][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.582028][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.585716][ T5811] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 660.645840][ T5806] Bluetooth: hci5: command tx timeout [ 660.679089][T10946] team0: Port device team_slave_0 added [ 660.693091][T10946] team0: Port device team_slave_1 added [ 660.740455][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.740493][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.742046][ T5811] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 660.742075][ T5811] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 660.742106][ T5811] usb 1-1: Manufacturer: syz [ 660.743086][T11001] overlayfs: failed to resolve './file1/file0': -2 [ 660.791590][ T5811] usb 1-1: config 0 descriptor?? [ 661.208300][T11006] ieee802154 phy0 wpan0: encryption failed: -22 [ 661.223300][T11006] binder: 11003:11006 ioctl 4008586f 200000000080 returned -22 [ 662.387643][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.399546][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.399585][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.584146][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.584167][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.584197][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.735795][ T5806] Bluetooth: hci5: command tx timeout [ 662.811762][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.815086][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.805756][ T5806] Bluetooth: hci5: command tx timeout [ 664.871562][ T5811] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #100: -71 [ 664.871609][ T5811] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 664.871622][ T5811] uclogic 0003:256C:006D.0019: failed probing pen v1 parameters: -71 [ 664.871659][ T5811] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 664.871746][ T5811] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 664.941657][T10946] hsr_slave_0: entered promiscuous mode [ 664.957261][T10946] hsr_slave_1: entered promiscuous mode [ 664.958346][T10946] debugfs: 'hsr0' already exists in 'hsr' [ 664.958375][T10946] Cannot create hsr debugfs directory [ 664.973600][ T5811] usb 1-1: USB disconnect, device number 21 [ 665.548135][ T5806] Bluetooth: hci2: unexpected event for opcode 0x0020 [ 667.428875][T11044] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.445990][T11044] binder: 11040:11044 ioctl 4008586f 200000000080 returned -22 [ 669.488687][T10946] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 669.779907][T10946] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 670.472296][T10946] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 670.525887][T10946] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 671.020491][T11077] ieee802154 phy0 wpan0: encryption failed: -22 [ 671.023522][T11077] binder: 11069:11077 ioctl 4008586f 200000000080 returned -22 [ 672.890498][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.980604][T10946] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.019874][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.020076][ T7479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.513929][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.514068][ T8171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.056411][T11126] ieee802154 phy0 wpan0: encryption failed: -22 [ 675.072124][T11126] binder: 11122:11126 ioctl 4008586f 200000000080 returned -22 [ 676.959116][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.475791][ T809] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 678.051808][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.051846][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.055002][ T809] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 678.055034][ T809] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 678.055054][ T809] usb 4-1: Manufacturer: syz [ 678.188920][ T809] usb 4-1: config 0 descriptor?? [ 678.663781][T10946] veth0_vlan: entered promiscuous mode [ 678.687183][T11166] fuse: Invalid rootmode [ 678.689766][T10946] veth1_vlan: entered promiscuous mode [ 678.809498][T10946] veth0_macvtap: entered promiscuous mode [ 678.827698][T10946] veth1_macvtap: entered promiscuous mode [ 679.634959][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.681294][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.726928][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.728071][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.728334][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.728995][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.154877][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.155594][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.803449][ T809] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #100: -71 [ 681.803515][ T809] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 681.803535][ T809] uclogic 0003:256C:006D.001A: failed probing pen v1 parameters: -71 [ 681.803598][ T809] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 681.803708][ T809] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 681.875928][ T809] usb 4-1: USB disconnect, device number 28 [ 682.219548][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.219573][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.419638][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.419661][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.666316][T11207] fuse: Invalid rootmode [ 685.828971][T11236] fuse: Invalid rootmode [ 686.009146][T11243] overlayfs: failed to resolve './file1/file0': -2 [ 686.022548][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.784460][T11263] netlink: 288 bytes leftover after parsing attributes in process `syz.7.1581'. [ 688.281120][T11276] overlayfs: failed to resolve './file1/file0': -2 [ 689.370348][T11293] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1592'. [ 692.059227][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1603'. [ 692.059275][T11321] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 692.059293][T11321] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 692.363719][T11327] netlink: 288 bytes leftover after parsing attributes in process `syz.8.1605'. [ 706.148467][T11420] 9p: Bad value for 'rfdno' [ 706.575633][ T809] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 706.725645][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 706.728139][ T809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.728170][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.728197][ T809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 706.728223][ T809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.728268][ T809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 706.728293][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.958093][ T809] usb 4-1: GET_CAPABILITIES returned 0 [ 706.958152][ T809] usbtmc 4-1:16.0: can't read capabilities [ 707.126178][ T5810] Bluetooth: hci1: command 0xfc11 tx timeout [ 707.126516][ T5806] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 707.245387][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.269400][ T5863] usb 4-1: USB disconnect, device number 29 [ 710.269023][T11452] 9p: Bad value for 'rfdno' [ 713.919589][T11487] 9p: Bad value for 'rfdno' [ 714.967601][T11504] loop5: detected capacity change from 0 to 7 [ 715.090804][T11195] Dev loop5: unable to read RDB block 7 [ 715.090866][T11195] loop5: unable to read partition table [ 715.091151][T11195] loop5: partition table beyond EOD, truncated [ 715.154704][T11504] Dev loop5: unable to read RDB block 7 [ 715.154763][T11504] loop5: unable to read partition table [ 715.155008][T11504] loop5: partition table beyond EOD, truncated [ 715.155045][T11504] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 715.900382][T11512] program syz.0.1662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.989784][T11514] 9p: Bad value for 'rfdno' [ 716.061143][T11506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 716.061281][T11506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 716.217858][T11506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 716.218169][T11506] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 716.317634][T11506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 716.318801][T11506] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 716.405113][T11506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 716.428035][T11506] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 716.502883][T11506] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 716.503733][T11506] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 716.612647][T11506] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 717.008247][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 717.146564][ T9] usb 1-1: device descriptor read/64, error -71 [ 717.366540][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 717.400290][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 717.559178][ T9] usb 1-1: device descriptor read/64, error -71 [ 717.673928][ T9] usb usb1-port1: attempt power cycle [ 717.919264][ T5934] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 718.016422][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 718.037258][ T9] usb 1-1: device descriptor read/8, error -71 [ 718.096461][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 718.098692][ T5934] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 718.098723][ T5934] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 718.098749][ T5934] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 718.098775][ T5934] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.098826][ T5934] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.098843][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.248937][ T5806] Bluetooth: hci4: command 0x0406 tx timeout [ 718.327622][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 718.336633][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 718.406624][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 718.579847][ T5806] Bluetooth: hci5: command 0x0c1a tx timeout [ 718.749015][ T9] usb 1-1: device descriptor read/8, error -71 [ 718.927800][ T9] usb usb1-port1: unable to enumerate USB device [ 718.964899][ T5934] usb 8-1: GET_CAPABILITIES returned 0 [ 718.964952][ T5934] usbtmc 8-1:16.0: can't read capabilities [ 719.174936][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 719.208522][ T5934] usb 8-1: USB disconnect, device number 13 [ 719.617264][ T9] IPVS: starting estimator thread 0... [ 719.646272][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 719.726639][T11557] IPVS: using max 8 ests per chain, 19200 per kthread [ 719.754375][T11560] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 719.754766][T11560] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 719.755001][T11560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 719.755202][T11560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 719.755405][T11560] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 721.386099][T11578] overlayfs: overlapping lowerdir path [ 721.736952][ T5801] IPVS: starting estimator thread 0... [ 721.766883][ T5800] Bluetooth: hci5: command 0x0c1a tx timeout [ 721.766928][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 721.766959][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 721.766990][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 721.768069][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 721.850133][T11591] IPVS: using max 11 ests per chain, 26400 per kthread [ 723.975964][ T5806] Bluetooth: hci5: command 0x0c1a tx timeout [ 732.420531][T11663] ubi31: attaching mtd0 [ 732.514965][T11663] ubi31: scanning is finished [ 732.514992][T11663] ubi31: empty MTD device detected [ 733.395570][T11663] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 733.395601][T11663] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 733.395620][T11663] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 733.395638][T11663] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 733.395656][T11663] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 733.395674][T11663] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 733.395692][T11663] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 34601999 [ 733.395714][T11663] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 733.467809][T11670] ubi31: background thread "ubi_bgt31d" started, PID 11670 [ 737.362281][T11703] IPVS: length: 528 != 8 [ 738.263604][T11709] overlayfs: overlapping lowerdir path [ 742.080352][T11746] IPVS: length: 528 != 8 [ 745.612337][ T5864] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 746.222913][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.222949][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.225255][ T5864] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 746.225282][ T5864] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 746.225309][ T5864] usb 4-1: Manufacturer: syz [ 746.285259][ T5864] usb 4-1: config 0 descriptor?? [ 747.530234][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.157811][T11790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.180656][T11790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.348885][ T5864] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #100: -71 [ 750.348932][ T5864] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 750.348945][ T5864] uclogic 0003:256C:006D.001B: failed probing pen v1 parameters: -71 [ 750.349008][ T5864] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 750.349090][ T5864] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 750.446064][ T5864] usb 4-1: USB disconnect, device number 30 [ 750.514032][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.529464][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.478032][T11778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.499604][T11778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.540813][ T5863] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 754.703486][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.703520][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.707004][ T5863] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 754.707035][ T5863] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 754.707057][ T5863] usb 1-1: Manufacturer: syz [ 754.774198][ T5863] usb 1-1: config 0 descriptor?? [ 757.343170][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.343749][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.812685][ T5863] uclogic 0003:256C:006D.001C: failed retrieving string descriptor #100: -71 [ 758.812731][ T5863] uclogic 0003:256C:006D.001C: failed retrieving pen parameters: -71 [ 758.812744][ T5863] uclogic 0003:256C:006D.001C: failed probing pen v1 parameters: -71 [ 758.812781][ T5863] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 758.812861][ T5863] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 758.916544][ T5863] usb 1-1: USB disconnect, device number 26 [ 761.755924][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 761.777506][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 761.779563][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 761.804915][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 761.805741][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 762.004325][T11903] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1800'. [ 763.569778][ T1279] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.569868][T11884] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1795'. [ 763.618858][ T1279] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.653342][ T1279] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.664532][ T1279] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.851854][ T5806] Bluetooth: hci1: command tx timeout [ 765.980538][ T5806] Bluetooth: hci1: command tx timeout [ 767.298712][T11955] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1815'. [ 767.940532][T11958] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1817'. [ 767.982001][T11900] chnl_net:caif_netlink_parms(): no params data found [ 768.022477][ T5806] Bluetooth: hci1: command tx timeout [ 770.032738][ T5863] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 770.212894][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 770.215816][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.215843][ T5863] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 770.220368][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 770.220397][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.220420][ T5863] usb 4-1: Product: syz [ 770.220436][ T5863] usb 4-1: Manufacturer: syz [ 770.220451][ T5863] usb 4-1: SerialNumber: syz [ 770.339329][ T5806] Bluetooth: hci1: command tx timeout [ 770.353679][ T5863] usb 4-1: config 0 descriptor?? [ 771.334936][T11987] overlayfs: missing 'lowerdir' [ 771.350168][ T5801] usb 4-1: USB disconnect, device number 31 [ 771.445667][T11990] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1826'. [ 771.517390][T11900] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.517591][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.517828][T11900] bridge_slave_0: entered allmulticast mode [ 771.520659][T11900] bridge_slave_0: entered promiscuous mode [ 771.974890][T11900] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.975040][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.975505][T11900] bridge_slave_1: entered allmulticast mode [ 772.345370][T11900] bridge_slave_1: entered promiscuous mode [ 772.346993][T11995] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1829'. [ 773.337704][T11900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.364987][T11900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.581964][T11900] team0: Port device team_slave_0 added [ 773.605268][T11900] team0: Port device team_slave_1 added [ 773.840386][T11900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.840404][T11900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.840434][T11900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.894581][T11900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.894599][T11900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.894628][T11900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.056032][T12028] overlayfs: missing 'lowerdir' [ 775.228561][T12034] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1838'. [ 775.414063][T11900] hsr_slave_0: entered promiscuous mode [ 775.420439][T11900] hsr_slave_1: entered promiscuous mode [ 775.421088][T11900] debugfs: 'hsr0' already exists in 'hsr' [ 775.421106][T11900] Cannot create hsr debugfs directory [ 775.421468][ T143] bridge_slave_1: left allmulticast mode [ 775.421485][ T143] bridge_slave_1: left promiscuous mode [ 775.421665][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.542808][ T143] bridge_slave_0: left allmulticast mode [ 775.542832][ T143] bridge_slave_0: left promiscuous mode [ 775.543027][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.264385][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1845'. [ 778.024570][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.300855][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.335646][ T143] bond0 (unregistering): Released all slaves [ 778.377316][T12060] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1844'. [ 778.583883][T12071] overlayfs: missing 'lowerdir' [ 780.965696][T11900] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 784.382076][T12111] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1857'. [ 784.542805][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1856'. [ 784.584324][T11900] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 784.626779][T12117] overlayfs: missing 'lowerdir' [ 784.712660][T11900] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 784.799814][T12120] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1861'. [ 784.800360][T11900] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 785.556943][ T143] hsr_slave_0: left promiscuous mode [ 785.603584][ T143] hsr_slave_1: left promiscuous mode [ 785.604544][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.665499][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.550558][ T143] team0 (unregistering): Port device team_slave_1 removed [ 787.605425][ T143] team0 (unregistering): Port device team_slave_0 removed [ 788.297760][T12141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 788.298601][T12141] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 788.299408][T12141] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 788.299925][T12141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.300231][T12141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 788.300477][T12141] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 788.456719][T12141] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 788.598172][T11900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.633869][T11900] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.656824][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.656933][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.690474][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.725076][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.946135][ T143] IPVS: stop unused estimator thread 0... [ 790.239501][T11900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.288735][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 790.355239][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 790.355251][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 790.355292][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 790.355297][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 790.355375][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout [ 790.455978][T12175] overlayfs: missing 'lowerdir' [ 790.824856][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1870'. [ 790.824882][T12183] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1870'. [ 791.154386][T12195] Bluetooth: hci0: unsupported parameter 255 [ 791.154411][T12195] Bluetooth: hci0: unsupported parameter 255 [ 791.392730][T12202] loop5: detected capacity change from 0 to 7 [ 791.420062][T12202] Dev loop5: unable to read RDB block 7 [ 791.420107][T12202] loop5: AHDI p1 p2 [ 791.420141][T12202] loop5: partition table partially beyond EOD, truncated [ 791.421751][T12202] loop5: p1 size 150995456 extends beyond EOD, truncated [ 791.572287][T12204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 791.572496][T12204] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 791.572680][T12204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 791.572866][T12204] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 791.573059][T12204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 791.613366][T11661] udevd[11661]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 791.698639][T11900] veth0_vlan: entered promiscuous mode [ 791.716147][T11900] veth1_vlan: entered promiscuous mode [ 791.754905][T11900] veth0_macvtap: entered promiscuous mode [ 791.876059][T11900] veth1_macvtap: entered promiscuous mode [ 791.960665][T11900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.017663][T11900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.082188][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.082661][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.083204][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.084932][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.047481][T12218] overlayfs: missing 'lowerdir' [ 793.500184][T12240] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1882'. [ 793.500212][T12240] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1882'. [ 793.615509][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 793.615554][ T5810] Bluetooth: hci1: command 0x0c1a tx timeout [ 793.615584][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 793.615613][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 793.615641][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 793.691474][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.691497][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.891780][T12243] Bluetooth: hci0: unsupported parameter 255 [ 793.891799][T12243] Bluetooth: hci0: unsupported parameter 255 [ 794.003155][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.003180][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.096623][ T5863] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 794.245617][ T5863] usb 8-1: Using ep0 maxpacket: 32 [ 794.248339][ T5863] usb 8-1: no configurations [ 794.248358][ T5863] usb 8-1: can't read configurations, error -22 [ 794.375505][ T5863] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 794.529004][ T5863] usb 8-1: Using ep0 maxpacket: 32 [ 794.530996][ T5863] usb 8-1: no configurations [ 794.531014][ T5863] usb 8-1: can't read configurations, error -22 [ 794.531543][ T5863] usb usb8-port1: attempt power cycle [ 794.905895][ T5863] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 794.926531][ T5863] usb 8-1: Using ep0 maxpacket: 32 [ 794.927373][ T5863] usb 8-1: no configurations [ 794.927390][ T5863] usb 8-1: can't read configurations, error -22 [ 795.055853][ T5863] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 795.076460][ T5863] usb 8-1: Using ep0 maxpacket: 32 [ 795.080548][ T5863] usb 8-1: no configurations [ 795.080568][ T5863] usb 8-1: can't read configurations, error -22 [ 795.081449][ T5863] usb usb8-port1: unable to enumerate USB device [ 795.471748][T12261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 795.471954][T12261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 795.472145][T12261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 795.472332][T12261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 795.472514][T12261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 795.710318][T12271] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 795.710384][T12271] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 796.670838][T12278] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1893'. [ 796.670867][T12278] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1893'. [ 797.322575][T12301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 797.323165][T12301] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 797.323608][T12301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 797.324039][T12301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 797.325231][T12301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 797.998633][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1905'. [ 797.998676][T12307] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1905'. [ 799.376141][ T5800] Bluetooth: hci1: command 0x0c1a tx timeout [ 799.376187][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 799.376217][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 799.376247][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 799.376278][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 801.024967][T12340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1916'. [ 801.024998][T12340] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1916'. [ 801.243877][T10600] Bluetooth: hci5: command 0xfc11 tx timeout [ 801.244166][ T5810] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 804.811038][T12379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1923'. [ 805.057178][ T5863] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 805.234015][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.234046][ T5863] usb 4-1: config 0 has no interface number 0 [ 805.749771][ T5863] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 805.749806][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.749829][ T5863] usb 4-1: Product: syz [ 805.749846][ T5863] usb 4-1: Manufacturer: syz [ 805.749861][ T5863] usb 4-1: SerialNumber: syz [ 805.901178][ T5863] usb 4-1: config 0 descriptor?? [ 805.941569][ T5863] usb 4-1: selecting invalid altsetting 1 [ 805.941770][ T5863] dvb_ttusb_budget: ttusb_init_controller: error [ 805.941786][ T5863] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 806.633981][ T5863] DVB: Unable to find symbol stv0299_attach() [ 806.802194][T12398] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1928'. [ 806.802219][T12398] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1928'. [ 806.929240][ T5863] DVB: Unable to find symbol tda8083_attach() [ 806.929265][ T5863] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 808.758472][ T9] usb 4-1: USB disconnect, device number 32 [ 808.904700][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.132571][T12416] fuse: root generation should be zero [ 810.637701][T12448] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1944'. [ 810.888157][ T10] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 811.073282][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 811.073330][ T10] usb 8-1: config 0 has no interface number 0 [ 811.077301][ T10] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 811.104686][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.104733][ T10] usb 8-1: Product: syz [ 811.104776][ T10] usb 8-1: Manufacturer: syz [ 811.104812][ T10] usb 8-1: SerialNumber: syz [ 811.152279][ T10] usb 8-1: config 0 descriptor?? [ 811.172904][ T10] usb 8-1: selecting invalid altsetting 1 [ 811.173099][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 811.173116][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 811.543986][ T10] DVB: Unable to find symbol stv0299_attach() [ 812.920112][ T10] DVB: Unable to find symbol tda8083_attach() [ 812.920130][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 814.686068][ T5811] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 814.867914][ T5811] usb 1-1: device descriptor read/64, error -71 [ 814.971016][T12489] loop5: detected capacity change from 0 to 7 [ 814.976533][T12489] Dev loop5: unable to read RDB block 7 [ 814.976565][T12489] loop5: AHDI p1 p2 [ 814.976597][T12489] loop5: partition table partially beyond EOD, truncated [ 814.976830][T12489] loop5: p1 size 150995456 extends beyond EOD, truncated [ 815.098331][ T809] usb 8-1: USB disconnect, device number 18 [ 815.123358][ T5811] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 815.270778][ T5811] usb 1-1: device descriptor read/64, error -71 [ 815.379106][ T5811] usb usb1-port1: attempt power cycle [ 815.661293][T11661] udevd[11661]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 822.489587][ T5863] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 822.671787][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.671818][ T5863] usb 4-1: config 0 has no interfaces? [ 822.673452][ T5863] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 822.673481][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 822.673502][ T5863] usb 4-1: SerialNumber: syz [ 822.739862][ T5863] usb 4-1: config 0 descriptor?? [ 822.858971][T12275] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 822.989045][T12275] usb 1-1: device descriptor read/64, error -71 [ 823.005861][ T5863] usb 4-1: USB disconnect, device number 33 [ 823.649063][T12275] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 823.794132][T12275] usb 1-1: device descriptor read/64, error -71 [ 823.899539][T12275] usb usb1-port1: attempt power cycle [ 824.269040][T12275] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 824.312403][T12275] usb 1-1: device descriptor read/8, error -71 [ 824.554516][T12275] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 824.569932][T12275] usb 1-1: device descriptor read/8, error -71 [ 824.679450][T12275] usb usb1-port1: unable to enumerate USB device [ 827.279638][ T5801] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 827.429492][ T5801] usb 8-1: Using ep0 maxpacket: 16 [ 827.431968][ T5801] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.438810][ T5801] usb 8-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 827.438858][ T5801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.438896][ T5801] usb 8-1: Product: syz [ 827.438928][ T5801] usb 8-1: Manufacturer: syz [ 827.438961][ T5801] usb 8-1: SerialNumber: syz [ 827.522477][ T5801] usb 8-1: config 0 descriptor?? [ 827.542473][ T5801] uvcvideo 8-1:0.0: probe with driver uvcvideo failed with error -22 [ 827.755927][ T5811] usb 8-1: USB disconnect, device number 19 [ 830.660843][T12710] loop5: detected capacity change from 0 to 7 [ 830.688929][T12710] Dev loop5: unable to read RDB block 7 [ 830.688965][T12710] loop5: AHDI p1 p2 [ 830.688998][T12710] loop5: partition table partially beyond EOD, truncated [ 830.689257][T12710] loop5: p1 size 150995456 extends beyond EOD, truncated [ 831.438168][T11661] udevd[11661]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 832.737310][T12734] binder: 12732:12734 ioctl c0306201 0 returned -14 [ 833.409402][T12745] 9p: Bad value for 'wfdno' [ 833.810169][ T5807] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 833.960230][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 833.964334][ T5807] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 833.964396][ T5807] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 833.964429][ T5807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 833.964456][ T5807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 833.964481][ T5807] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 833.964532][ T5807] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 833.964557][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.203921][T12766] binder: 12762:12766 ioctl c0306201 0 returned -14 [ 834.305192][ T5807] usb 1-1: GET_CAPABILITIES returned 0 [ 834.305259][ T5807] usbtmc 1-1:16.0: can't read capabilities [ 834.420411][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 834.513945][ T5811] usb 1-1: USB disconnect, device number 34 [ 834.581154][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 834.583709][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.693152][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 834.693187][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.693209][ T9] usb 8-1: Product: syz [ 834.693224][ T9] usb 8-1: Manufacturer: syz [ 834.693239][ T9] usb 8-1: SerialNumber: syz [ 834.739454][ T9] usb 8-1: config 0 descriptor?? [ 835.442139][ T9] usb 8-1: USB disconnect, device number 20 [ 835.960499][ T5811] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 836.120707][ T5811] usb 10-1: Using ep0 maxpacket: 16 [ 836.123182][ T5811] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.164435][ T5811] usb 10-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 836.164469][ T5811] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.164491][ T5811] usb 10-1: Product: syz [ 836.164507][ T5811] usb 10-1: Manufacturer: syz [ 836.164523][ T5811] usb 10-1: SerialNumber: syz [ 836.214251][ T5811] usb 10-1: config 0 descriptor?? [ 836.239688][ T5811] uvcvideo 10-1:0.0: probe with driver uvcvideo failed with error -22 [ 836.448478][ T5807] usb 10-1: USB disconnect, device number 2 [ 839.440915][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 839.650947][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 839.659299][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 839.659331][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 839.659444][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 839.659470][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.659516][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 839.659539][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.997884][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 839.997934][ T9] usbtmc 4-1:16.0: can't read capabilities [ 840.267547][ T5807] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 840.948548][ T9] usb 4-1: USB disconnect, device number 34 [ 841.229475][ T5807] usb 10-1: Using ep0 maxpacket: 16 [ 841.247158][ T5807] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.251877][ T5807] usb 10-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 841.251955][ T5807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.252016][ T5807] usb 10-1: Product: syz [ 841.252052][ T5807] usb 10-1: Manufacturer: syz [ 841.252093][ T5807] usb 10-1: SerialNumber: syz [ 841.315929][ T5807] usb 10-1: config 0 descriptor?? [ 841.354742][ T5807] uvcvideo 10-1:0.0: probe with driver uvcvideo failed with error -22 [ 841.562836][ T9] usb 10-1: USB disconnect, device number 3 [ 844.060918][T12875] binder: 12874:12875 ioctl c0306201 0 returned -14 [ 849.742715][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2100'. [ 854.662841][T10600] Bluetooth: hci5: command 0xfc11 tx timeout [ 854.682853][ T5810] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 854.834645][T12975] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2116'. [ 855.132937][ T5801] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 855.288148][ T5801] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 855.288179][ T5801] usb 8-1: config 0 has no interface number 0 [ 855.291456][ T5801] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 855.291486][ T5801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.291507][ T5801] usb 8-1: Product: syz [ 855.291527][ T5801] usb 8-1: Manufacturer: syz [ 855.291543][ T5801] usb 8-1: SerialNumber: syz [ 855.435152][ T5801] usb 8-1: config 0 descriptor?? [ 855.463719][ T5801] usb 8-1: selecting invalid altsetting 1 [ 855.463889][ T5801] dvb_ttusb_budget: ttusb_init_controller: error [ 855.463904][ T5801] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 858.189200][ T5801] DVB: Unable to find symbol stv0299_attach() [ 858.429208][ T5801] DVB: Unable to find symbol tda8083_attach() [ 858.429226][ T5801] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 858.463706][ T5801] usb 8-1: USB disconnect, device number 21 [ 860.977620][T13010] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2129'. [ 862.283536][ T5811] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 862.437236][ T5811] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 862.437267][ T5811] usb 10-1: config 0 has no interface number 0 [ 862.440236][ T5811] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 862.440266][ T5811] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.440286][ T5811] usb 10-1: Product: syz [ 862.440302][ T5811] usb 10-1: Manufacturer: syz [ 862.440317][ T5811] usb 10-1: SerialNumber: syz [ 862.522195][ T5811] usb 10-1: config 0 descriptor?? [ 862.562929][ T5811] usb 10-1: selecting invalid altsetting 1 [ 862.563103][ T5811] dvb_ttusb_budget: ttusb_init_controller: error [ 862.563119][ T5811] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 864.872378][ T5811] DVB: Unable to find symbol stv0299_attach() [ 866.051726][ T5811] DVB: Unable to find symbol tda8083_attach() [ 866.051745][ T5811] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 866.102317][ T5811] usb 10-1: USB disconnect, device number 4 [ 866.637968][T13047] loop5: detected capacity change from 0 to 7 [ 866.653347][T13047] Dev loop5: unable to read RDB block 7 [ 866.653389][T13047] loop5: unable to read partition table [ 866.653596][T13047] loop5: partition table beyond EOD, truncated [ 866.653629][T13047] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 869.502149][T13072] netlink: 212360 bytes leftover after parsing attributes in process `syz.9.2143'. [ 870.360816][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.436606][T13080] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2146'. [ 870.696393][ T808] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 872.932925][ T808] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 872.932956][ T808] usb 10-1: config 0 has no interface number 0 [ 872.974313][ T808] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 872.974349][ T808] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.974370][ T808] usb 10-1: Product: syz [ 872.974386][ T808] usb 10-1: Manufacturer: syz [ 872.974402][ T808] usb 10-1: SerialNumber: syz [ 873.066482][ T808] usb 10-1: config 0 descriptor?? [ 873.088678][ T808] usb 10-1: selecting invalid altsetting 1 [ 873.088797][ T808] dvb_ttusb_budget: ttusb_init_controller: error [ 873.088808][ T808] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 873.285048][ T808] DVB: Unable to find symbol stv0299_attach() [ 874.831090][ T808] DVB: Unable to find symbol tda8083_attach() [ 874.831103][ T808] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 876.796420][ T809] usb 10-1: USB disconnect, device number 5 [ 877.447381][T13113] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.2156'. [ 880.227062][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2164'. [ 888.885113][T13212] binder: 13211:13212 ioctl c0306201 0 returned -14 [ 891.126914][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 891.302381][ T9] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 891.302414][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 891.331346][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 891.331395][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.331433][ T9] usb 1-1: Product: syz [ 891.331466][ T9] usb 1-1: Manufacturer: syz [ 891.331499][ T9] usb 1-1: SerialNumber: syz [ 891.418340][ T9] usb 1-1: config 0 descriptor?? [ 891.473155][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 892.535218][ T9] gspca_sunplus: reg_r err -110 [ 892.535337][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 894.420380][ T5934] usb 1-1: USB disconnect, device number 35 [ 894.663813][T13251] binder: 13249:13251 ioctl c0306201 0 returned -14 [ 894.702098][T13252] 9p: Bad value for 'wfdno' [ 896.314249][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 896.465882][ T809] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 896.624182][ T809] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.624210][ T809] usb 8-1: config 0 has no interfaces? [ 896.625886][ T809] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 896.625915][ T809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 896.625941][ T809] usb 8-1: SerialNumber: syz [ 897.136082][ T809] usb 8-1: config 0 descriptor?? [ 897.307021][T13279] binder: 13278:13279 ioctl c0306201 0 returned -14 [ 897.390266][ T809] usb 8-1: USB disconnect, device number 22 [ 899.541552][T13307] binder: 13306:13307 ioctl c0306201 0 returned -14 [ 900.040906][T13316] loop5: detected capacity change from 0 to 7 [ 900.514598][T13316] Dev loop5: unable to read RDB block 7 [ 900.514648][T13316] loop5: unable to read partition table [ 900.514885][T13316] loop5: partition table beyond EOD, truncated [ 900.514920][T13316] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 903.545337][T13340] overlayfs: failed to resolve './file0': -2 [ 906.728878][ T5934] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 906.858881][ T5934] usb 8-1: device descriptor read/64, error -71 [ 907.827775][ T5934] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 908.369345][ T5934] usb 8-1: device descriptor read/64, error -71 [ 908.479426][ T5934] usb usb8-port1: attempt power cycle [ 911.619277][ T5934] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 911.796497][ T5934] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.798578][ T5934] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 911.798610][ T5934] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 911.798633][ T5934] usb 10-1: Manufacturer: syz [ 911.863066][ T5934] usb 10-1: config 0 descriptor?? [ 911.885513][ T5934] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 913.300105][ T808] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 913.510344][ T808] usb 8-1: device descriptor read/64, error -71 [ 915.789793][ T808] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 916.122444][ T5811] usb 10-1: USB disconnect, device number 6 [ 918.630266][ T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 918.680306][ T809] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 918.797870][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 918.799449][ T9] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 918.799478][ T9] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 918.799500][ T9] usb 8-1: Manufacturer: syz [ 918.836476][ T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.836505][ T809] usb 4-1: config 0 has no interfaces? [ 918.853833][ T809] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 918.853911][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 918.853967][ T809] usb 4-1: SerialNumber: syz [ 918.927043][ T9] usb 8-1: config 0 descriptor?? [ 918.960537][ T809] usb 4-1: config 0 descriptor?? [ 919.010341][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 919.178909][ T9] usb 4-1: USB disconnect, device number 35 [ 922.401005][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.404603][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.963178][ T9] usb 8-1: USB disconnect, device number 28 [ 926.431030][T12986] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 926.584415][T12986] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.584444][T12986] usb 10-1: config 0 has no interfaces? [ 926.586182][T12986] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 926.586211][T12986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 926.586233][T12986] usb 10-1: SerialNumber: syz [ 926.635872][T12986] usb 10-1: config 0 descriptor?? [ 926.827452][ T809] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 926.974984][T12986] usb 10-1: USB disconnect, device number 7 [ 926.993630][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 926.995136][ T809] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 926.995164][ T809] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 926.995186][ T809] usb 1-1: Manufacturer: syz [ 927.075150][ T809] usb 1-1: config 0 descriptor?? [ 927.098415][ T809] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 930.882967][ T9] usb 1-1: USB disconnect, device number 36 [ 932.027415][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.558858][T13590] loop5: detected capacity change from 0 to 7 [ 933.586258][T13590] Dev loop5: unable to read RDB block 7 [ 933.586314][T13590] loop5: unable to read partition table [ 933.586536][T13590] loop5: partition table beyond EOD, truncated [ 933.586572][T13590] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 940.382771][ T5801] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 940.595419][ T5801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.595450][ T5801] usb 4-1: config 0 has no interfaces? [ 940.598497][ T5801] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 940.598529][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 940.598550][ T5801] usb 4-1: SerialNumber: syz [ 940.657124][ T5801] usb 4-1: config 0 descriptor?? [ 941.413732][ T808] usb 4-1: USB disconnect, device number 36 [ 946.406598][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2357'. [ 947.455059][T13735] loop5: detected capacity change from 0 to 7 [ 947.492372][T13735] Dev loop5: unable to read RDB block 7 [ 947.492408][T13735] loop5: unable to read partition table [ 947.511827][T13735] loop5: partition table beyond EOD, truncated [ 947.511856][T13735] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 952.942671][T12986] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 952.965068][T13791] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2383'. [ 953.479871][T12986] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.479900][T12986] usb 10-1: config 0 has no interfaces? [ 953.505279][T12986] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 953.505313][T12986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 953.505333][T12986] usb 10-1: SerialNumber: syz [ 953.514374][T12986] usb 10-1: config 0 descriptor?? [ 954.148027][ T5801] usb 10-1: USB disconnect, device number 8 [ 956.514005][T13824] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2395'. [ 958.076629][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2404'. [ 959.736545][T13863] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2407'. [ 961.275099][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 961.405032][ T9] usb 8-1: device descriptor read/64, error -71 [ 961.995137][ T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 962.125226][ T9] usb 8-1: device descriptor read/64, error -71 [ 962.235755][ T9] usb usb8-port1: attempt power cycle [ 964.405179][T13907] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2422'. [ 967.924373][ T5807] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 968.055789][ T5807] usb 10-1: device descriptor read/64, error -71 [ 969.264810][ T5807] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 973.638667][T13967] 9p: Bad value for 'wfdno' [ 982.329711][T14009] 9p: Bad value for 'rfdno' [ 982.509148][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2457'. [ 982.763821][T14019] loop5: detected capacity change from 0 to 7 [ 982.775557][T14019] Dev loop5: unable to read RDB block 7 [ 982.775606][T14019] loop5: unable to read partition table [ 982.775840][T14019] loop5: partition table beyond EOD, truncated [ 982.775873][T14019] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 986.921376][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 986.954932][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 987.008461][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 987.009719][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 987.010545][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 987.324724][T10600] Bluetooth: hci5: command 0xfc11 tx timeout [ 987.412525][ T5810] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 989.557215][ T5810] Bluetooth: hci6: command tx timeout [ 990.795401][T14036] chnl_net:caif_netlink_parms(): no params data found [ 991.879129][ T5810] Bluetooth: hci6: command tx timeout [ 992.203188][T14036] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.228652][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.228993][T14036] bridge_slave_0: entered allmulticast mode [ 992.231834][T14036] bridge_slave_0: entered promiscuous mode [ 992.299842][T14036] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.299971][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.300253][T14036] bridge_slave_1: entered allmulticast mode [ 992.303241][T14036] bridge_slave_1: entered promiscuous mode [ 992.445669][T14036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.470481][T14036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.648092][T14036] team0: Port device team_slave_0 added [ 992.664845][T14036] team0: Port device team_slave_1 added [ 992.730895][T14036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.730915][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.730945][T14036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.733446][T14036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.733463][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.733492][T14036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.068196][T14036] hsr_slave_0: entered promiscuous mode [ 993.084745][T14036] hsr_slave_1: entered promiscuous mode [ 993.085857][T14036] debugfs: 'hsr0' already exists in 'hsr' [ 993.085884][T14036] Cannot create hsr debugfs directory [ 993.499759][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.966139][T10600] Bluetooth: hci6: command tx timeout [ 994.459909][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2470'. [ 995.920751][T10600] Bluetooth: hci3: command 0xfc11 tx timeout [ 995.921058][ T5810] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 996.121151][ T5810] Bluetooth: hci6: command tx timeout [ 997.910054][T14036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.255197][T14110] 9p: Bad value for 'rfdno' [ 998.458327][T14036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.048290][T14036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.369651][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2485'. [ 999.648559][T14036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.903775][T14036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1002.171262][T14036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1003.205949][T14036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1003.342430][T14036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1003.868410][T14036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.964386][T14036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.283201][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.283352][T11781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.494948][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.495102][T11781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.557454][T14151] loop5: detected capacity change from 0 to 7 [ 1005.585094][T14151] Dev loop5: unable to read RDB block 7 [ 1005.585129][T14151] loop5: unable to read partition table [ 1005.585282][T14151] loop5: partition table beyond EOD, truncated [ 1005.585296][T14151] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1007.178650][T14036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.379661][T14036] veth0_vlan: entered promiscuous mode [ 1007.474705][T14036] veth1_vlan: entered promiscuous mode [ 1007.683008][T14036] veth0_macvtap: entered promiscuous mode [ 1007.736788][T14036] veth1_macvtap: entered promiscuous mode [ 1007.851433][T14036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.914183][T14036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.987156][ T1506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.987359][ T1506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.987389][ T1506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.987415][ T1506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.909983][T14180] ieee802154 phy0 wpan0: encryption failed: -22 [ 1008.947387][T14180] binder: 14175:14180 ioctl 4008586f 200000000080 returned -22 [ 1009.106769][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.106793][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.822660][T11781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.822685][T11781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.732339][T12986] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1017.004631][T12986] usb 10-1: device descriptor read/64, error -71 [ 1017.131714][ T5811] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1017.132018][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1017.241380][T12986] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1017.491402][T12986] usb 10-1: device descriptor read/64, error -71 [ 1017.497212][ T5811] usb 1-1: device descriptor read/64, error -32 [ 1017.759871][T12986] usb usb10-port1: attempt power cycle [ 1018.938910][ T5811] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1018.940069][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 1019.111672][ T5811] usb 1-1: device descriptor read/64, error -32 [ 1019.131618][T12986] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1019.152457][T12986] usb 10-1: device descriptor read/8, error -71 [ 1019.367486][ T5811] usb usb1-port1: attempt power cycle [ 1020.161950][T12986] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1020.263924][T12986] usb 10-1: device descriptor read/8, error -71 [ 1020.373626][T12986] usb usb10-port1: unable to enumerate USB device [ 1020.412047][ T5811] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1020.442817][ C1] raw-gadget.1 gadget.0: failed to queue control event [ 1020.501995][ T5811] usb 1-1: device descriptor read/8, error -32 [ 1020.563976][T14215] raw-gadget.1 gadget.0: failed to queue suspend event [ 1020.564072][T14215] raw-gadget.1 gadget.0: failed to queue disconnect event [ 1023.512171][ T5807] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1025.142366][ T5807] usb 1-1: device descriptor read/64, error -71 [ 1026.451886][ T5807] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1026.644033][ T5807] usb 1-1: device descriptor read/64, error -71 [ 1027.032606][ T5807] usb usb1-port1: attempt power cycle [ 1027.423913][ T5807] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1027.632763][T14290] program syz.7.2530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1027.980139][ T5807] usb 1-1: device descriptor read/8, error -71 [ 1028.118384][T14292] 9pnet_fd: Insufficient options for proto=fd [ 1028.172637][ T10] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1028.302735][ T10] usb 8-1: device descriptor read/64, error -71 [ 1028.542802][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1028.672719][ T10] usb 8-1: device descriptor read/64, error -71 [ 1028.787549][ T10] usb usb8-port1: attempt power cycle [ 1029.122781][ T10] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1029.156392][ T10] usb 8-1: device descriptor read/8, error -71 [ 1029.394073][ T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1029.414948][ T10] usb 8-1: device descriptor read/8, error -71 [ 1029.523753][ T10] usb usb8-port1: unable to enumerate USB device [ 1033.402336][T14338] 9pnet_fd: Insufficient options for proto=fd [ 1034.933791][ T809] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1035.095733][ T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.095764][ T809] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1035.100584][ T809] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1035.100616][ T809] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1035.100638][ T809] usb 4-1: Manufacturer: syz [ 1035.151880][ T809] usb 4-1: config 0 descriptor?? [ 1035.567951][T14368] program syz.0.2551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.303511][ T37] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1036.456417][ T37] usb 1-1: device descriptor read/64, error -71 [ 1036.717421][ T37] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1036.896478][ T37] usb 1-1: device descriptor read/64, error -71 [ 1037.008438][ T37] usb usb1-port1: attempt power cycle [ 1037.673912][ T37] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1037.700261][ T37] usb 1-1: device descriptor read/8, error -71 [ 1037.993002][ T37] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1038.034337][ T37] usb 1-1: device descriptor read/8, error -71 [ 1038.122195][T14382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.127584][T14382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.148870][ T37] usb usb1-port1: unable to enumerate USB device [ 1039.681235][ T37] usb 4-1: USB disconnect, device number 37 [ 1040.396520][T14388] qrtr: Invalid version 0 [ 1042.690922][T14406] 9pnet_fd: Insufficient options for proto=fd [ 1044.544948][T14418] program syz.9.2564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.805903][ T809] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1044.944630][ T809] usb 10-1: device descriptor read/64, error -71 [ 1045.315603][ T809] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1045.724756][ T809] usb 10-1: device descriptor read/64, error -71 [ 1045.836291][ T809] usb usb10-port1: attempt power cycle [ 1046.511971][ T809] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1047.154475][ T809] usb 10-1: device descriptor read/8, error -71 [ 1047.979069][ T809] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1048.356786][ T809] usb 10-1: device descriptor read/8, error -71 [ 1048.465441][ T809] usb usb10-port1: unable to enumerate USB device [ 1049.318540][T14449] 9pnet_fd: Insufficient options for proto=fd [ 1051.818864][T14474] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.852551][T14472] qrtr: Invalid version 0 [ 1051.981898][T14474] binder: 14458:14474 ioctl 4008586f 200000000080 returned -22 [ 1054.513755][T14491] netlink: 288 bytes leftover after parsing attributes in process `syz.9.2582'. [ 1054.712621][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.811355][T14494] program syz.0.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.405882][ T5811] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1056.506220][T12986] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1056.555956][ T5811] usb 1-1: device descriptor read/64, error -71 [ 1056.628170][T14498] 9p: Bad value for 'rfdno' [ 1056.658782][T12986] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.658812][T12986] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1056.660292][T12986] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1056.660321][T12986] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1056.660343][T12986] usb 10-1: Manufacturer: syz [ 1056.716263][T12986] usb 10-1: config 0 descriptor?? [ 1056.805837][ T5811] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1056.946047][ T5811] usb 1-1: device descriptor read/64, error -71 [ 1057.056476][ T5811] usb usb1-port1: attempt power cycle [ 1057.231045][T10600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1057.268124][T10600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1057.283492][T10600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1057.303307][T10600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1057.321653][T10600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1057.435665][ T5811] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1058.403607][ T5811] usb 1-1: device descriptor read/8, error -71 [ 1059.486409][ T5810] Bluetooth: hci3: command tx timeout [ 1059.530660][T14518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.534490][T14518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.974354][T14525] overlayfs: failed to resolve './file0': -2 [ 1062.083598][ T5810] Bluetooth: hci3: command tx timeout [ 1062.252273][ T9] usb 10-1: USB disconnect, device number 19 [ 1064.365243][ T5810] Bluetooth: hci3: command tx timeout [ 1064.797380][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2596'. [ 1064.905161][T14547] 9p: Bad value for 'rfdno' [ 1064.989010][T14548] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.004503][T14548] binder: 14530:14548 ioctl 4008586f 200000000080 returned -22 [ 1065.156791][T14534] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2594'. [ 1065.199835][ T5927] bridge_slave_1: left allmulticast mode [ 1065.199869][ T5927] bridge_slave_1: left promiscuous mode [ 1065.200153][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.282630][ T5927] bridge_slave_0: left allmulticast mode [ 1065.282663][ T5927] bridge_slave_0: left promiscuous mode [ 1065.282943][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.885780][T14556] program syz.7.2600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.294808][ T37] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1066.370499][T10600] Bluetooth: hci3: command tx timeout [ 1066.401991][T14560] overlayfs: failed to resolve './file1': -2 [ 1066.429047][ T37] usb 8-1: device descriptor read/64, error -71 [ 1066.873057][ T37] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1068.710358][ T37] usb 8-1: device descriptor read/64, error -71 [ 1069.836764][ T37] usb usb8-port1: attempt power cycle [ 1070.028299][T14575] 9p: Bad value for 'rfdno' [ 1070.095159][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2606'. [ 1071.960209][T14597] overlayfs: failed to resolve './file1': -2 [ 1072.068767][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.271519][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.434970][ T5927] bond0 (unregistering): Released all slaves [ 1073.539206][T14586] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2610'. [ 1074.120765][T14504] chnl_net:caif_netlink_parms(): no params data found [ 1074.665372][T14504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.692949][T14504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.693182][T14504] bridge_slave_0: entered allmulticast mode [ 1074.695152][T14504] bridge_slave_0: entered promiscuous mode [ 1075.180167][T14504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.206272][T14504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.207299][T14504] bridge_slave_1: entered allmulticast mode [ 1075.245338][T14504] bridge_slave_1: entered promiscuous mode [ 1075.309627][T14619] program syz.7.2617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1075.540421][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2619'. [ 1075.611363][ T37] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1075.704284][T14504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.707452][T14504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.808485][ T37] usb 8-1: device descriptor read/64, error -71 [ 1076.048284][ T37] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1076.198713][ T37] usb 8-1: device descriptor read/64, error -71 [ 1076.308732][ T37] usb usb8-port1: attempt power cycle [ 1076.324528][T14504] team0: Port device team_slave_0 added [ 1076.347513][T14504] team0: Port device team_slave_1 added [ 1076.560599][T14504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.560614][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.560634][T14504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.595483][T14504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.595538][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.595615][T14504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.688246][ T37] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1076.708790][ T37] usb 8-1: device descriptor read/8, error -71 [ 1076.823924][T14632] overlayfs: failed to resolve './file1': -2 [ 1076.968327][ T37] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1077.012446][ T37] usb 8-1: device descriptor read/8, error -71 [ 1077.284749][ T37] usb usb8-port1: unable to enumerate USB device [ 1078.718812][T14645] ieee802154 phy0 wpan0: encryption failed: -22 [ 1078.725928][T14645] binder: 14629:14645 ioctl 4008586f 200000000080 returned -22 [ 1078.908389][T14647] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2627'. [ 1079.140082][T14504] hsr_slave_0: entered promiscuous mode [ 1079.142775][T14504] hsr_slave_1: entered promiscuous mode [ 1079.143835][T14504] debugfs: 'hsr0' already exists in 'hsr' [ 1079.143863][T14504] Cannot create hsr debugfs directory [ 1080.518921][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2629'. [ 1080.676903][ T5927] hsr_slave_0: left promiscuous mode [ 1080.748599][ T5927] hsr_slave_1: left promiscuous mode [ 1080.749811][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.749839][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.847159][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.847189][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.933015][ T5927] veth1_macvtap: left promiscuous mode [ 1081.933128][ T5927] veth0_macvtap: left promiscuous mode [ 1081.933380][ T5927] veth1_vlan: left promiscuous mode [ 1081.933563][ T5927] veth0_vlan: left promiscuous mode [ 1082.706828][T14679] program syz.9.2637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1083.418869][ T37] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1083.548854][ T37] usb 10-1: device descriptor read/64, error -71 [ 1084.599074][ T37] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1084.646587][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1084.680030][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1084.728899][ T37] usb 10-1: device descriptor read/64, error -71 [ 1084.840892][ T37] usb usb10-port1: attempt power cycle [ 1086.026496][T14703] ieee802154 phy0 wpan0: encryption failed: -22 [ 1086.030013][T14703] binder: 14698:14703 ioctl 4008586f 200000000080 returned -22 [ 1086.079652][ T37] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1086.484011][ T37] usb 10-1: device descriptor read/8, error -71 [ 1087.480298][ T5927] team0 (unregistering): Port device team_slave_1 removed [ 1087.581276][ T5927] team0 (unregistering): Port device team_slave_0 removed [ 1088.402135][T14683] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2639'. [ 1089.113116][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2653'. [ 1089.148657][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2653'. [ 1090.791293][T14745] ieee802154 phy0 wpan0: encryption failed: -22 [ 1090.794229][T14745] binder: 14739:14745 ioctl 4008586f 200000000080 returned -22 [ 1092.234562][T14751] program syz.6.2659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1093.418631][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2663'. [ 1093.678126][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2663'. [ 1094.342848][T14504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.571286][T14760] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2662'. [ 1094.597063][ T5927] IPVS: stop unused estimator thread 0... [ 1094.850225][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1094.973614][T14504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.003293][ T10] usb 10-1: no configurations [ 1095.003315][ T10] usb 10-1: can't read configurations, error -22 [ 1095.248656][ T10] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1095.576047][T14781] ieee802154 phy0 wpan0: encryption failed: -22 [ 1095.579676][T14781] binder: 14772:14781 ioctl 4008586f 200000000080 returned -22 [ 1096.454094][ T10] usb 10-1: no configurations [ 1096.454117][ T10] usb 10-1: can't read configurations, error -22 [ 1096.454692][ T10] usb usb10-port1: attempt power cycle [ 1096.823879][ T10] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1097.160478][ T10] usb 10-1: no configurations [ 1097.160498][ T10] usb 10-1: can't read configurations, error -22 [ 1097.290427][ T10] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1097.320540][ T10] usb 10-1: no configurations [ 1097.320554][ T10] usb 10-1: can't read configurations, error -22 [ 1097.324721][ T10] usb usb10-port1: unable to enumerate USB device [ 1097.567292][T14504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.558637][T14504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.673614][T14803] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2673'. [ 1099.088287][ T5927] bridge_slave_1: left allmulticast mode [ 1099.088319][ T5927] bridge_slave_1: left promiscuous mode [ 1099.088712][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.312112][ T5927] bridge_slave_0: left allmulticast mode [ 1099.312144][ T5927] bridge_slave_0: left promiscuous mode [ 1099.312415][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.632383][T14814] program syz.6.2677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1102.205429][T14822] ieee802154 phy0 wpan0: encryption failed: -22 [ 1102.208348][T14822] binder: 14816:14822 ioctl 4008586f 200000000080 returned -22 [ 1103.361168][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1104.252750][ T9] usb 1-1: no configurations [ 1104.252768][ T9] usb 1-1: can't read configurations, error -22 [ 1104.411190][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1104.543480][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2683'. [ 1104.562229][ T9] usb 1-1: no configurations [ 1104.562249][ T9] usb 1-1: can't read configurations, error -22 [ 1104.562599][ T9] usb usb1-port1: attempt power cycle [ 1104.921212][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1104.943181][ T9] usb 1-1: no configurations [ 1104.943202][ T9] usb 1-1: can't read configurations, error -22 [ 1105.076975][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1105.104132][ T9] usb 1-1: no configurations [ 1105.104154][ T9] usb 1-1: can't read configurations, error -22 [ 1105.104527][ T9] usb usb1-port1: unable to enumerate USB device [ 1105.771911][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.834968][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.874434][ T5927] bond0 (unregistering): Released all slaves [ 1105.898598][T14809] netlink: 288 bytes leftover after parsing attributes in process `syz.9.2676'. [ 1107.895738][ T38] audit: type=1326 audit(1774831583.545:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.896860][ T38] audit: type=1326 audit(1774831583.545:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.898644][ T38] audit: type=1326 audit(1774831583.545:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.899953][ T38] audit: type=1326 audit(1774831583.545:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.900485][ T38] audit: type=1326 audit(1774831583.545:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.901239][ T38] audit: type=1326 audit(1774831583.545:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.925238][ T38] audit: type=1326 audit(1774831583.575:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.952571][ T38] audit: type=1326 audit(1774831583.605:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.953439][ T38] audit: type=1326 audit(1774831583.605:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1107.965214][ T38] audit: type=1326 audit(1774831583.615:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14862 comm="syz.7.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc17c799 code=0x7ffc0000 [ 1110.930200][T14874] program syz.6.2692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1111.596273][T14504] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1112.916209][T14504] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1113.044172][T14504] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1113.095753][T10600] Bluetooth: hci6: command 0x0406 tx timeout [ 1113.146511][T14504] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1113.762242][ T9] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1113.771428][ T5927] hsr_slave_0: left promiscuous mode [ 1113.824184][ T5927] hsr_slave_1: left promiscuous mode [ 1113.825249][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.825277][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.877867][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.877889][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.893139][ T9] usb 10-1: device descriptor read/64, error -71 [ 1113.966655][ T5927] veth1_macvtap: left promiscuous mode [ 1113.966732][ T5927] veth0_macvtap: left promiscuous mode [ 1113.966914][ T5927] veth1_vlan: left promiscuous mode [ 1113.967036][ T5927] veth0_vlan: left promiscuous mode [ 1114.144531][ T9] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1114.302302][ T9] usb 10-1: device descriptor read/64, error -71 [ 1114.414076][ T9] usb usb10-port1: attempt power cycle [ 1114.753545][ T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1114.783282][ T9] usb 10-1: device descriptor read/8, error -71 [ 1115.022298][ T9] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1115.042911][ T9] usb 10-1: device descriptor read/8, error -71 [ 1115.153569][ T9] usb usb10-port1: unable to enumerate USB device [ 1115.514602][ T5927] team0 (unregistering): Port device team_slave_1 removed [ 1115.583240][ T5927] team0 (unregistering): Port device team_slave_0 removed [ 1116.145091][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.061576][T14943] program syz.9.2711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1118.332659][ T9] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1118.462760][ T9] usb 10-1: device descriptor read/64, error -71 [ 1118.554012][T10600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1118.560066][T10600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1118.592869][T10600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1118.655905][T10600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1118.696268][T10600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1118.744649][ T9] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1118.882706][ T9] usb 10-1: device descriptor read/64, error -71 [ 1118.993115][ T9] usb usb10-port1: attempt power cycle [ 1119.109992][ T5927] IPVS: stop unused estimator thread 0... [ 1119.335159][ T9] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1119.353631][ T9] usb 10-1: device descriptor read/8, error -71 [ 1119.612817][ T9] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1119.645150][ T9] usb 10-1: device descriptor read/8, error -71 [ 1119.753383][ T9] usb usb10-port1: unable to enumerate USB device [ 1119.803086][ T5807] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1119.967741][ T5807] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1119.967786][ T5807] usb 1-1: can't read configurations, error -61 [ 1120.123122][ T5807] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1120.278895][ T5807] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1120.278936][ T5807] usb 1-1: can't read configurations, error -61 [ 1120.279424][ T5807] usb usb1-port1: attempt power cycle [ 1120.624173][ T5807] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1120.686033][ T5807] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1120.687504][ T5807] usb 1-1: can't read configurations, error -61 [ 1120.773001][T10600] Bluetooth: hci4: command tx timeout [ 1120.812884][ T5807] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1120.837982][ T5807] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1120.838023][ T5807] usb 1-1: can't read configurations, error -61 [ 1120.838460][ T5807] usb usb1-port1: unable to enumerate USB device [ 1122.504017][T14951] chnl_net:caif_netlink_parms(): no params data found [ 1122.523955][ T10] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1122.653174][ T10] usb 10-1: device descriptor read/64, error -71 [ 1122.853184][T10600] Bluetooth: hci4: command tx timeout [ 1122.913230][ T10] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1123.043580][ T10] usb 10-1: device descriptor read/64, error -71 [ 1123.153608][ T10] usb usb10-port1: attempt power cycle [ 1124.238247][ T10] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1124.254456][ T10] usb 10-1: device descriptor read/8, error -71 [ 1124.503405][ T10] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1124.524526][ T10] usb 10-1: device descriptor read/8, error -71 [ 1124.647695][ T10] usb usb10-port1: unable to enumerate USB device [ 1124.933353][T10600] Bluetooth: hci4: command tx timeout [ 1126.444553][T15006] 9p: Could not find request transport: fd0x0000000000000004 [ 1126.995720][T14951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.002490][T14951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.002696][T14951] bridge_slave_0: entered allmulticast mode [ 1127.013626][T10600] Bluetooth: hci4: command tx timeout [ 1127.047154][T14951] bridge_slave_0: entered promiscuous mode [ 1127.050868][T14951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.053421][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.077934][T14951] bridge_slave_1: entered allmulticast mode [ 1127.080846][T14951] bridge_slave_1: entered promiscuous mode [ 1127.222661][T14951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.246273][T14951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.299958][T14951] team0: Port device team_slave_0 added [ 1127.303312][T14951] team0: Port device team_slave_1 added [ 1127.362928][T14951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.362946][T14951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.362968][T14951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.411647][T14951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.411668][T14951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.411734][T14951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.476350][T15019] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2727'. [ 1127.984629][T14951] hsr_slave_0: entered promiscuous mode [ 1127.988989][T14951] hsr_slave_1: entered promiscuous mode [ 1128.275844][ T5864] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1128.426809][ T5864] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1128.426839][ T5864] usb 10-1: can't read configurations, error -61 [ 1128.553884][ T5864] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1128.708452][ T5864] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1128.708544][ T5864] usb 10-1: can't read configurations, error -61 [ 1128.708994][ T5864] usb usb10-port1: attempt power cycle [ 1129.070895][ T5927] bridge_slave_1: left allmulticast mode [ 1129.070925][ T5927] bridge_slave_1: left promiscuous mode [ 1129.071110][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.096167][ T5864] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1129.120756][ T5864] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1129.120785][ T5864] usb 10-1: can't read configurations, error -61 [ 1129.253202][ T5864] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1129.281737][ T5864] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1129.281782][ T5864] usb 10-1: can't read configurations, error -61 [ 1129.282382][ T5864] usb usb10-port1: unable to enumerate USB device [ 1129.341667][ T5927] bridge_slave_0: left allmulticast mode [ 1129.341701][ T5927] bridge_slave_0: left promiscuous mode [ 1129.341982][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.214746][ T5863] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1131.344130][ T5863] usb 1-1: device descriptor read/64, error -71 [ 1131.584218][ T5863] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1131.734350][ T5863] usb 1-1: device descriptor read/64, error -71 [ 1131.846889][ T5863] usb usb1-port1: attempt power cycle [ 1132.036167][T15058] 9pnet_fd: Insufficient options for proto=fd [ 1132.214291][ T5863] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1132.235919][ T5863] usb 1-1: device descriptor read/8, error -71 [ 1132.484273][ T5863] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1132.504957][ T5863] usb 1-1: device descriptor read/8, error -71 [ 1132.615094][ T5863] usb usb1-port1: unable to enumerate USB device [ 1134.738793][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.954405][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.117228][ T5927] bond0 (unregistering): Released all slaves [ 1136.123309][ T5927] hsr_slave_0: left promiscuous mode [ 1136.164654][ T5927] hsr_slave_1: left promiscuous mode [ 1136.165742][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.198067][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.293282][T15079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.825646][T15092] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2741'. [ 1138.172808][ T5927] team0 (unregistering): Port device team_slave_1 removed [ 1138.275959][ T5927] team0 (unregistering): Port device team_slave_0 removed [ 1138.399944][ T5807] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1138.566671][ T5807] usb 1-1: config 0 has no interfaces? [ 1138.567634][ T5807] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1138.567655][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1138.567670][ T5807] usb 1-1: SerialNumber: syz [ 1138.635213][ T5807] usb 1-1: config 0 descriptor?? [ 1138.920436][ T5807] usb 1-1: USB disconnect, device number 65 [ 1139.791696][T15100] 9pnet_fd: Insufficient options for proto=fd [ 1143.254581][ T809] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1143.416058][ T809] usb 1-1: device descriptor read/64, error -71 [ 1143.655500][ T809] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1143.785601][ T809] usb 1-1: device descriptor read/64, error -71 [ 1143.899776][ T809] usb usb1-port1: attempt power cycle [ 1144.257101][ T809] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1144.281688][ T809] usb 1-1: device descriptor read/8, error -71 [ 1144.532890][ T809] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1144.550737][ T809] usb 1-1: device descriptor read/8, error -71 [ 1144.659460][ T809] usb usb1-port1: unable to enumerate USB device [ 1144.908942][T14951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1144.971210][T14951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1145.169285][T14951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1145.269646][T14951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1146.501453][T14951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.628488][T14951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.687692][T15165] 9pnet_fd: Insufficient options for proto=fd [ 1146.743381][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.743532][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.824975][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.825074][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.302250][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1150.302271][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1151.352791][T14951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.506308][T12986] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1151.636576][T12986] usb 10-1: device descriptor read/64, error -71 [ 1151.654008][T14951] veth0_vlan: entered promiscuous mode [ 1151.717569][T14951] veth1_vlan: entered promiscuous mode [ 1151.876331][T12986] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1152.016360][T12986] usb 10-1: device descriptor read/64, error -71 [ 1152.028107][T14951] veth0_macvtap: entered promiscuous mode [ 1152.071337][T14951] veth1_macvtap: entered promiscuous mode [ 1152.127026][T12986] usb usb10-port1: attempt power cycle [ 1152.183645][T14951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.264320][T14951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.316086][ T819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.334512][ T819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.355639][ T819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.392676][ T819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.466553][T12986] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1152.519646][T12986] usb 10-1: device descriptor read/8, error -71 [ 1152.786655][T12986] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1152.807436][T12986] usb 10-1: device descriptor read/8, error -71 [ 1152.916871][T12986] usb usb10-port1: unable to enumerate USB device [ 1153.300350][T15232] 9pnet_fd: Insufficient options for proto=fd [ 1153.756563][ T5864] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1153.909631][ T5864] usb 1-1: config 0 has no interfaces? [ 1153.911143][ T5864] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1153.911174][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1153.911197][ T5864] usb 1-1: SerialNumber: syz [ 1154.127267][ T5864] usb 1-1: config 0 descriptor?? [ 1154.368081][ T5864] usb 1-1: USB disconnect, device number 70 [ 1154.756581][T11338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.756603][T11338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.151159][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.151183][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.189825][T15272] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2774'. [ 1157.189853][T15272] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2774'. [ 1158.377574][T12986] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1158.507494][T12986] usb 4-1: device descriptor read/64, error -71 [ 1158.757074][T12986] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1158.901410][T12986] usb 4-1: device descriptor read/64, error -71 [ 1159.007820][T12986] usb usb4-port1: attempt power cycle [ 1159.367202][T12986] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1159.396534][T12986] usb 4-1: device descriptor read/8, error -71 [ 1159.637186][T12986] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1159.666740][T12986] usb 4-1: device descriptor read/8, error -71 [ 1159.767647][T12986] usb usb4-port1: unable to enumerate USB device [ 1162.718791][ T809] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1162.869581][ T809] usb 4-1: config 0 has no interfaces? [ 1162.870716][ T809] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1162.870737][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1162.870751][ T809] usb 4-1: SerialNumber: syz [ 1162.910714][ T809] usb 4-1: config 0 descriptor?? [ 1163.122536][ T809] usb 4-1: USB disconnect, device number 42 [ 1165.071946][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2788'. [ 1165.071977][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2788'. [ 1166.097953][ T5807] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1167.057954][ T5807] usb 10-1: device descriptor read/64, error -71 [ 1167.320038][ T5807] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1167.448049][ T5807] usb 10-1: device descriptor read/64, error -71 [ 1167.568430][ T5807] usb usb10-port1: attempt power cycle [ 1167.928128][ T5807] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1167.959624][ T5807] usb 10-1: device descriptor read/8, error -71 [ 1168.228114][ T5807] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1168.254489][ T5807] usb 10-1: device descriptor read/8, error -71 [ 1168.465345][ T5807] usb usb10-port1: unable to enumerate USB device [ 1169.108224][T15364] libceph: resolve '0..' (ret=-3): failed [ 1169.230117][T15367] netlink: 'syz.9.2797': attribute type 11 has an invalid length. [ 1173.668707][ T5807] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1173.823942][ T5807] usb 1-1: device descriptor read/64, error -71 [ 1174.068793][ T5807] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1174.208997][ T5807] usb 1-1: device descriptor read/64, error -71 [ 1174.319700][ T5807] usb usb1-port1: attempt power cycle [ 1174.678914][ T5807] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1174.710089][ T5807] usb 1-1: device descriptor read/8, error -71 [ 1174.979495][ T5807] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1175.003279][ T5807] usb 1-1: device descriptor read/8, error -71 [ 1175.119408][ T5807] usb usb1-port1: unable to enumerate USB device [ 1177.872265][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.579787][ T37] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1183.652044][ T37] usb 8-1: config 0 has no interfaces? [ 1183.653530][ T37] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1183.653558][ T37] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1183.653587][ T37] usb 8-1: SerialNumber: syz [ 1183.713151][ T37] usb 8-1: config 0 descriptor?? [ 1183.933337][ T37] usb 8-1: USB disconnect, device number 43 [ 1184.069865][ T809] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1184.229867][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 1184.231944][ T809] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1184.232020][ T809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1184.232038][ T809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1184.232056][ T809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1184.232073][ T809] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.232104][ T809] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1184.232121][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.452211][ T809] usb 1-1: usb_control_msg returned -32 [ 1184.452255][ T809] usbtmc 1-1:16.0: can't read capabilities [ 1184.501871][ T809] usb 1-1: USB disconnect, device number 75 [ 1184.568041][T15495] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1189.430570][ T37] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1189.594567][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 1189.597067][ T37] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1189.597110][ T37] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1189.597126][ T37] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1189.597144][ T37] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1189.597161][ T37] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.597192][ T37] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1189.597209][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.926809][ T37] usb 1-1: usb_control_msg returned -32 [ 1189.926846][ T37] usbtmc 1-1:16.0: can't read capabilities [ 1189.993529][ T37] usb 1-1: USB disconnect, device number 76 [ 1193.760983][ T5863] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1193.922851][ T5863] usb 10-1: Using ep0 maxpacket: 8 [ 1194.032627][ T5863] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1194.114375][ T5863] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 1194.114397][ T5863] usb 10-1: config 0 has no interface number 0 [ 1194.114429][ T5863] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1194.114449][ T5863] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1194.114465][ T5863] usb 10-1: config 0 interface 88 has no altsetting 0 [ 1194.393717][ T5863] usb 10-1: string descriptor 0 read error: -22 [ 1194.393826][ T5863] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1194.393844][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1194.442623][ T5863] usb 10-1: config 0 descriptor?? [ 1194.843918][ T5863] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input7 [ 1195.251096][ T5807] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1195.421284][ T5807] usb 4-1: Using ep0 maxpacket: 8 [ 1195.423834][ T5807] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1195.423894][ T5807] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1195.423911][ T5807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1195.423928][ T5807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1195.423946][ T5807] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1195.423977][ T5807] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1195.423994][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.795161][ T5807] usb 4-1: GET_CAPABILITIES returned 0 [ 1195.795213][ T5807] usbtmc 4-1:16.0: can't read capabilities [ 1196.939839][ T5807] usb 4-1: USB disconnect, device number 43 [ 1197.048456][T14152] udevd[14152]: Error opening device "/dev/input/event4": Input/output error [ 1197.048740][T14152] udevd[14152]: Unable to EVIOCGABS device "/dev/input/event4" [ 1197.048871][T14152] udevd[14152]: Unable to EVIOCGABS device "/dev/input/event4" [ 1199.033871][T15622] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1199.326740][T15616] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1200.653675][T12986] usb 10-1: USB disconnect, device number 52 [ 1203.765002][ T5807] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1205.502219][ T5810] Bluetooth: hci3: command 0xfc11 tx timeout [ 1205.518377][T10600] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1205.700424][T12986] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 1205.700744][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1205.852718][T12986] usb 1-1: device descriptor read/64, error -32 [ 1206.102225][T12986] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 1206.102572][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1206.233255][T12986] usb 1-1: device descriptor read/64, error -32 [ 1207.038785][T12986] usb usb1-port1: attempt power cycle [ 1207.392510][T12986] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 1207.456023][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1207.482852][T12986] usb 1-1: device descriptor read/8, error -32 [ 1207.595523][T12986] raw-gadget.2 gadget.0: failed to queue suspend event [ 1207.601935][T12986] raw-gadget.2 gadget.0: failed to queue reset event [ 1207.708005][T12986] raw-gadget.2 gadget.0: failed to queue resume event [ 1207.772423][T12986] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 1207.792593][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1207.792737][T12986] usb 1-1: device descriptor read/8, error -32 [ 1207.902753][T12986] raw-gadget.2 gadget.0: failed to queue suspend event [ 1207.903059][T12986] usb usb1-port1: unable to enumerate USB device [ 1208.932738][ T5807] usb 8-1: device descriptor read/64, error -110 [ 1212.669183][T15662] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1213.202514][T15701] fuse: Bad value for 'user_id' [ 1213.202536][T15701] fuse: Bad value for 'user_id' [ 1213.430973][T15712] binder: BINDER_SET_CONTEXT_MGR already set [ 1213.430990][T15712] binder: 15694:15712 ioctl 4018620d 200000004a80 returned -16 [ 1214.159770][T15700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.063274][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1215.223184][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1215.286990][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1215.306451][ T9] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 1215.306482][ T9] usb 1-1: config 0 has no interface number 0 [ 1215.306531][ T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1215.306559][ T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1215.306582][ T9] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1215.432393][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1215.432494][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1215.432512][ T9] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1215.516777][ T9] usb 1-1: config 0 descriptor?? [ 1215.547146][ T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input8 [ 1216.598561][T14152] udevd[14152]: Error opening device "/dev/input/event4": Input/output error [ 1216.598620][T14152] udevd[14152]: Unable to EVIOCGABS device "/dev/input/event4" [ 1216.598666][T14152] udevd[14152]: Unable to EVIOCGABS device "/dev/input/event4" [ 1216.598723][T14152] udevd[14152]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1217.549668][ T5164] udevd[5164]: worker [14152] terminated by signal 6 (Aborted) [ 1217.549726][ T5164] udevd[5164]: worker [14152] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input8/event4' [ 1218.993686][ T5863] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1219.123852][ T5863] usb 4-1: device descriptor read/64, error -71 [ 1219.393677][ T5863] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1219.523769][ T5863] usb 4-1: device descriptor read/64, error -71 [ 1219.644101][ T5863] usb usb4-port1: attempt power cycle [ 1219.650450][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2897'. [ 1219.893380][T15591] usb 1-1: USB disconnect, device number 81 [ 1219.993964][ T5863] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1220.015191][ T5863] usb 4-1: device descriptor read/8, error -71 [ 1220.323763][ T5863] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1220.388953][ T5863] usb 4-1: device descriptor read/8, error -71 [ 1220.495336][ T5863] usb usb4-port1: unable to enumerate USB device [ 1224.470921][T15794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2905'. [ 1224.565030][T15794] C: renamed from team_slave_0 (while UP) [ 1224.606934][T15794] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2905'. [ 1229.029090][T15804] syz.9.2909 (15804): drop_caches: 2 [ 1229.804799][ T5863] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1229.914851][ T5810] Bluetooth: hci3: command 0xfc11 tx timeout [ 1229.918193][T10600] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1230.074842][ T5863] usb 4-1: device descriptor read/64, error -71 [ 1230.314864][ T5863] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1230.444879][ T5863] usb 4-1: device descriptor read/64, error -71 [ 1230.482540][T15823] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1230.555338][ T5863] usb usb4-port1: attempt power cycle [ 1230.894906][ T5863] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1230.915788][ T5863] usb 4-1: device descriptor read/8, error -71 [ 1231.154950][ T5863] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1231.180944][ T5863] usb 4-1: device descriptor read/8, error -71 [ 1231.237110][T15832] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1231.305044][ T5863] usb usb4-port1: unable to enumerate USB device [ 1234.773942][T15854] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1239.034131][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.986098][T12986] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1241.110298][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 1241.120081][T12986] usb 8-1: device descriptor read/64, error -71 [ 1241.357716][T12986] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1241.516602][T12986] usb 8-1: device descriptor read/64, error -71 [ 1241.637406][T12986] usb usb8-port1: attempt power cycle [ 1242.006110][T12986] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1242.026678][T12986] usb 8-1: device descriptor read/8, error -71 [ 1242.286084][T12986] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1242.323266][T12986] usb 8-1: device descriptor read/8, error -71 [ 1242.445172][T12986] usb usb8-port1: unable to enumerate USB device [ 1242.916479][T15591] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1243.096229][T15591] usb 10-1: Using ep0 maxpacket: 8 [ 1243.102982][T15591] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1243.103046][T15591] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1243.103069][T15591] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1243.103087][T15591] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1243.103104][T15591] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1243.103136][T15591] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1243.103153][T15591] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.440947][T15591] usb 10-1: GET_CAPABILITIES returned 0 [ 1243.441003][T15591] usbtmc 10-1:16.0: can't read capabilities [ 1243.642633][ T37] usb 10-1: USB disconnect, device number 53 [ 1248.385609][T15914] syz.9.2938 (15914): drop_caches: 2 [ 1250.547812][ T37] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1250.548099][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1250.677014][ T37] usb 8-1: device descriptor read/64, error -32 [ 1250.971863][ T37] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1250.972150][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1251.127136][ T37] usb 8-1: device descriptor read/64, error -32 [ 1251.258942][ T37] usb usb8-port1: attempt power cycle [ 1251.397124][ T5807] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1251.397393][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1251.457150][ T5863] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1251.457451][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1251.537313][ T5807] usb 4-1: device descriptor read/64, error -32 [ 1251.647116][ T37] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1251.667415][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1251.667520][ T37] usb 8-1: device descriptor read/8, error -32 [ 1251.687231][ T5863] usb 1-1: device descriptor read/64, error -32 [ 1251.777680][ T37] raw-gadget.0 gadget.7: failed to queue suspend event [ 1251.778005][ T37] raw-gadget.0 gadget.7: failed to queue reset event [ 1251.781276][ T5807] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1251.781509][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1251.862445][ T37] raw-gadget.0 gadget.7: failed to queue resume event [ 1251.917327][ T37] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1251.917473][ T5807] usb 4-1: device descriptor read/64, error -32 [ 1251.940207][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1251.947198][ T5863] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1251.959007][ T37] usb 8-1: device descriptor read/8, error -32 [ 1252.028863][ T5807] usb usb4-port1: attempt power cycle [ 1252.068681][ T37] raw-gadget.0 gadget.7: failed to queue suspend event [ 1252.082445][ T37] usb usb8-port1: unable to enumerate USB device [ 1252.095115][ T36] ------------[ cut here ]-----------[ 1252.095115][ T36] ------------[ cut here ]------------ [ 1252.095159][ T36] in_task() && kcov_mode_enabled(mode) [ 1252.095199][ T36] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:2/36 [ 1252.095467][ T36] Modules linked in: [ 1252.095552][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1252.095628][ T36] Tainted: [L]=SOFTLOCKUP [ 1252.095650][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1252.095692][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 1252.095946][ T36] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1252.096030][ T36] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 e3 d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 8a 3c 5f 09 89 c0 48 c7 c7 a8 33 4f [ 1252.096086][ T36] RSP: 0018:ffffc90000ab79d8 EFLAGS: 00010202 [ 1252.096138][ T36] RAX: 0000000000000002 RBX: ffff88801d2d9e80 RCX: 0000000000000000 [ 1252.096173][ T36] RDX: 0000000000000000 RSI: ffffffff8ba67560 RDI: ffffffff8ba67520 [ 1252.096215][ T36] RBP: ffff8880207bc500 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 1252.096265][ T36] R10: dffffc0000000000 R11: fffffbfff1ed4cf7 R12: ffff888076ff1d88 [ 1252.096308][ T36] R13: ffff888050f107c0 R14: 0000000000000000 R15: ffff888076ff1da0 [ 1252.096350][ T36] FS: 0000000000000000(0000) GS:ffff888126436000(0000) knlGS:0000000000000000 [ 1252.096395][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1252.096437][ T36] CR2: 0000200000068030 CR3: 0000000074eb4000 CR4: 00000000003526f0 [ 1252.096501][ T36] Call Trace: [ 1252.096523][ T36] [ 1252.096566][ T36] ieee80211_iface_work+0x211/0x1340 [ 1252.096742][ T36] cfg80211_wiphy_work+0x2ab/0x4a0 [ 1252.096904][ T36] ? process_scheduled_works+0xa8d/0x18c0 [ 1252.097062][ T36] process_scheduled_works+0xb6e/0x18c0 [ 1252.097131][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 1252.097151][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 1252.097172][ T36] ? assign_work+0x3d5/0x5e0 [ 1252.097209][ T36] worker_thread+0xa53/0xfc0 [ 1252.097272][ T36] kthread+0x388/0x470 [ 1252.097297][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1252.097373][ T36] ? __pfx_kthread+0x10/0x10 [ 1252.097413][ T36] ret_from_fork+0x51e/0xb90 [ 1252.097470][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1252.097503][ T36] ? __switch_to+0xc7d/0x1450 [ 1252.097616][ T36] ? __pfx_kthread+0x10/0x10 [ 1252.097644][ T36] ret_from_fork_asm+0x1a/0x30 [ 1252.097754][ T36] [ 1252.097783][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1252.097804][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1252.097843][ T36] Tainted: [L]=SOFTLOCKUP [ 1252.097864][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1252.097907][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 1252.097961][ T36] Call Trace: [ 1252.097971][ T36] [ 1252.097981][ T36] vpanic+0x56c/0xa60 [ 1252.098101][ T36] ? __pfx__printk+0x10/0x10 [ 1252.098130][ T36] ? __pfx_vpanic+0x10/0x10 [ 1252.098177][ T36] ? is_bpf_text_address+0x292/0x2b0 [ 1252.098285][ T36] ? is_bpf_text_address+0x26/0x2b0 [ 1252.098344][ T36] panic+0xc5/0xd0 [ 1252.098438][ T36] ? __pfx_panic+0x10/0x10 [ 1252.098486][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 1252.098550][ T36] __warn+0x315/0x4f0 [ 1252.098617][ T36] ? kcov_remote_start+0x5d8/0x710 [ 1252.098649][ T36] ? kcov_remote_start+0x5d8/0x710 [ 1252.098720][ T36] __report_bug+0x29a/0x540 [ 1252.098837][ T36] ? kcov_remote_start+0x5d8/0x710 [ 1252.098908][ T36] ? __pfx___report_bug+0x10/0x10 [ 1252.098960][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 1252.099025][ T36] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1252.099133][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 1252.099195][ T36] ? kcov_remote_start+0x5d8/0x710 [ 1252.099269][ T36] report_bug+0x16a/0x220 [ 1252.099296][ T36] ? kcov_remote_start+0x5d8/0x710 [ 1252.099324][ T36] ? kcov_remote_start+0x5da/0x710 [ 1252.099398][ T36] handle_bug+0x9c/0x200 [ 1252.099560][ T36] exc_invalid_op+0x1a/0x50 [ 1252.099591][ T36] asm_exc_invalid_op+0x1a/0x20 [ 1252.099695][ T36] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1252.099724][ T36] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 e3 d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 8a 3c 5f 09 89 c0 48 c7 c7 a8 33 4f [ 1252.099745][ T36] RSP: 0018:ffffc90000ab79d8 EFLAGS: 00010202 [ 1252.099781][ T36] RAX: 0000000000000002 RBX: ffff88801d2d9e80 RCX: 0000000000000000 [ 1252.099839][ T36] RDX: 0000000000000000 RSI: ffffffff8ba67560 RDI: ffffffff8ba67520 [ 1252.099869][ T36] RBP: ffff8880207bc500 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 1252.099887][ T36] R10: dffffc0000000000 R11: fffffbfff1ed4cf7 R12: ffff888076ff1d88 [ 1252.099904][ T36] R13: ffff888050f107c0 R14: 0000000000000000 R15: ffff888076ff1da0 [ 1252.099937][ T36] ? rt_spin_lock+0x1e0/0x400 [ 1252.100038][ T36] ? kcov_remote_start+0xe0/0x710 [ 1252.100072][ T36] ieee80211_iface_work+0x211/0x1340 [ 1252.100185][ T36] cfg80211_wiphy_work+0x2ab/0x4a0 [ 1252.100219][ T36] ? process_scheduled_works+0xa8d/0x18c0 [ 1252.100283][ T36] process_scheduled_works+0xb6e/0x18c0 [ 1252.100400][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 1252.100503][ T36] ? assign_work+0x3d5/0x5e0 [ 1252.100550][ T36] worker_thread+0xa53/0xfc0 [ 1252.100682][ T36] kthread+0x388/0x470 [ 1252.100709][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1252.100763][ T36] ? __pfx_kthread+0x10/0x10 [ 1252.100829][ T36] ret_from_fork+0x51e/0xb90 [ 1252.100875][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1252.100938][ T36] ? __switch_to+0xc7d/0x1450 [ 1252.101019][ T36] ? __pfx_kthread+0x10/0x10 [ 1252.101049][ T36] ret_from_fork_asm+0x1a/0x30 [ 1252.101167][ T36] [ 1252.101769][ T36] Kernel Offset: disabled