last executing test programs: 13.88268907s ago: executing program 0 (id=958): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0xf4}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)) read$FUSE(r1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) 12.758733438s ago: executing program 0 (id=961): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 10.951669744s ago: executing program 3 (id=971): write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x0, 0x0, 0x2, 0x8, 0x14, 0x2}, @ipv4=@gre={{0xb, 0x4, 0x2, 0x9, 0x145, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0xac}, @noop, @timestamp={0x44, 0xc, 0x86, 0x0, 0xd, [0x0, 0x1]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x40, 0x1, [0x1ff, 0xd], "e29d2ec0e48169d97dbf971d1a5b15a45a3b214e4d4feb4708c8b2a7c9e175b21a2529440c55b5e34c2d0ccdf1cbe11044aa5aee6da9cb09f9df87e307a58b0c"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x83, 0x100], "81b4e7c597e989898b317c39fbe8a09a82acf66016738013d5450d5c0ef02e9dd1898fcbacdfeea888495b7b"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x200, 0x6, 0x4], "e6a2be25e7433e96f7a043961d92643daf"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x4, 0x3, 0x0, 0x3, 0x5, 0x4}, 0x1, {0xfff}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x3, 0x2, 0x0, 0x1, 0x3, 0xff}, 0x2, {0x3, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x2, "f693a95fcca9d57ca822983cd23596d8150ad095f823103bb218c582348d29b32f3e2004c36ede75451c9b6eca6fd61821aedd6d3788fc46e1095abc9bf27e6fd166013748fd731e6921"}}}}, 0x14f) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 10.824040327s ago: executing program 3 (id=972): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1, 0x0, 0x51}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x4007, @fd_index=0x6, 0x7, 0x0, 0x0, 0x4, 0x0, {0x1, 0x0, 0x3, '\x00', 0x0, 0x1}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(r0, 0xe, 0x1) 8.515853645s ago: executing program 0 (id=978): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x814) 8.465384007s ago: executing program 1 (id=979): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) 8.203707283s ago: executing program 2 (id=981): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00'}) io_uring_enter(0xffffffffffffffff, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 8.000815728s ago: executing program 2 (id=982): write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x0, 0x0, 0x2, 0x8, 0x14, 0x2}, @ipv4=@gre={{0xb, 0x4, 0x2, 0x9, 0x145, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0xac}, @noop, @timestamp={0x44, 0xc, 0x86, 0x0, 0xd, [0x0, 0x1]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x40, 0x1, [0x1ff, 0xd], "e29d2ec0e48169d97dbf971d1a5b15a45a3b214e4d4feb4708c8b2a7c9e175b21a2529440c55b5e34c2d0ccdf1cbe11044aa5aee6da9cb09f9df87e307a58b0c"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x83, 0x100], "81b4e7c597e989898b317c39fbe8a09a82acf66016738013d5450d5c0ef02e9dd1898fcbacdfeea888495b7b"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x200, 0x6, 0x4], "e6a2be25e7433e96f7a043961d92643daf"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x4, 0x3, 0x0, 0x3, 0x5, 0x4}, 0x1, {0xfff}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x3, 0x2, 0x0, 0x1, 0x3, 0xff}, 0x2, {0x3, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x2, "f693a95fcca9d57ca822983cd23596d8150ad095f823103bb218c582348d29b32f3e2004c36ede75451c9b6eca6fd61821aedd6d3788fc46e1095abc9bf27e6fd166013748fd731e6921"}}}}, 0x14f) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.871209361s ago: executing program 3 (id=983): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\xcfPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') open(&(0x7f0000000380)='./bus\x00', 0x109240, 0xa4) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x48) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[], 0x2b) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2050012fffff2f14e946f3890de706415d3ffbebcffffff375e54a26a633a320000000c049078640109006401010069775428c8a9fd4148"], 0x0) close(r0) sendmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x20340) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 7.811815693s ago: executing program 2 (id=984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20040004) sendmsg$inet(r0, 0x0, 0x34068096) 7.707827925s ago: executing program 4 (id=985): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x4d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES64=r0], 0x0) 7.266131607s ago: executing program 2 (id=986): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff7ffc}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x581840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x8c0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x3, 0x4002) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mq_open(&(0x7f0000000e00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2w2\x96\xb2\xe9=[\xa1/\xd3\xda\xbc\xfa\xea\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa7\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc4=.\xc6o\xfc\xa1\xb7\x88\xcfr\xf5@\x19\x13k\xe3d\x1a\x97\x99\x8f\xc9>\xbf3#\x03\xd4\x93\xc2\v\xf2\xba\xfb\x86\x9dr\x8e\xca\xe0s\xfe$\xce\xdb\\\x8f\x05\x92!\xe4\xd0|\x9bC\xc4\xf8\xd9%\xff\xef+X\a%\xbcA\t.\xdd[~$d\t\xb5\xa5\x17K\x1e\xe4z\xad\xca\xfe\xb0\x7f\xb8\x1b\x92\x950\xf7k\xadW\x1d\xd2\xea6\b\xc7\xc8}\x9a\x9c\xea`\xfe\xc1\xc1&\x8a#\x1a\xd5\\/\x02\x1e2\xa6\xc1\x84\xc4\x87\xd0\x97w\x94T\x99\xc7\x8a\xf9VN\xa4XN\x8d\x04\x91\x13\x8f\xe1;\a\xcfEI\xee~x\xce\xb8\t\xad\xf4\xde\xf4\xd0\xfb\xbf\x8f\xbf\a\x00\xcd\x10\xc1I\xc5\x93\x94;UZ\x95\x17\x1d\xf3:\'\xfd~\xed7\x12\x02\x1dr\x05\xf3\x805\x110\x06X\xb7{\x7fZ\x15\xe2\xfa6{', 0x800, 0x11, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.784285619s ago: executing program 1 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) 6.757220449s ago: executing program 3 (id=988): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000640)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000b00)={0x34, &(0x7f0000000b40)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.179777014s ago: executing program 2 (id=989): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000003280)={0x10, 0x0, r4}, 0x10) 6.051669847s ago: executing program 0 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xf5b7b72ff9727c90, &(0x7f0000000480)=0x7fffffff, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x90) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000030603000000000000000000010000030900020073797a31000000000500010007"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40080) writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="2e1db69ccb6d665c9e9f1f095ab0aff11d921f3012c56e432ee2b586bdf92e680058acbc9806013662eeebf92e29a458c5d7d4b403837e6aef4664027341cfbe7b73101cf4cad2ff3eefae85d5eefd1a6e70eed24a9f62ad01b93c291243cf3ce7623af625f7fbf14ec6b167d0207373582b20778ce3a20e57ccfe964e60a8f26ade52385d1cd12fde218deb05c5d1c524188f86437bae193f09712733f94f623567c1fce34b0179ff9c80c1a6a00c5b73dd835f0c7b13fefe22dcdff7efbb2fe7", 0xc1}, {&(0x7f00000007c0)="6faf1287cddb1a23baafa9b10be12fbc7284f786a914bfecb47cdb1e1d617a9983248447d7e7aa7a5dcdfe16395169644fc691b8cbe9416183730b1c2b386c478b55028ab4fa", 0x46}, {&(0x7f0000000880)="de5afd3f9af9b9d0f5c84c46e3fea412d014c12e5dbcc33861306f3176c7d8e6708c65e26659352216c9251a30014471fde58e44fd14b6dbce97900c570a2249541b61b3fad2591ef6101dd84f2cb2d2853f8c065ea4b3a4fbdef19e9348edc0be0dcdfc7d271933f2b33735f2002cc83985729bca76dcf71aed561b2d8aed98aecad9a2cde3e1e06fa1d1d2145ce7fb735e3ac0287af438231f535ba7b028b69180b5090d58aa12b21822f1a45b05b2419293228610bf81e88d002be90ff9776d689c98d9d9240cfd6ebf5acfee10878b7d91a43846ac428173da735a0808547f44fc9ce9fea80716078c50aaa833b393fefb", 0xf3}, {&(0x7f0000000980)="cc6ae3a6e9d65b37dc950a819c892794f1ff59274ab715c78cff192a6502a2574e4c33d1ea31568f4d558e009ab25cf259effbf75e6f90fa4a2f698a00c91193e8da9ebb79", 0x45}, {&(0x7f0000000d00)="fd2015c97973c217de7cf529054fe44457081a16497f6a979ec78552afbcf859876281775c1f258fb678133f0dd4531a06e6ef270d26a93abf203529152621eb2f556d914b49707f795f7685dc9c8030fe2fc1819a32d6f88eccaaaffac5949ad1210d97d0c219cc219da22ec5d1a10da466000000000000000000000008cfbcd0472fed336cb81585942b4e629fc1738b6fb5568591817853cbe53f5e37715445d959e9ced365ab9850b5341ef6b88f7a12125718170c24f902a05ecdf2a6e2afff603eceb667339311ca2529f6ae4745f659940d38cd8259eb86bc08f8950c2b81ab84d61e90665311f8e81c933ad47e0d8e1cacb29c34edd34217727a010fd03cc414e2c00db93a6f6d8ddfa14c451d2dd507f997c20d2d4907fad5fd8c86019379ef4ebeeb1629597798fee0c655562de29926a30bf2", 0x138}, {&(0x7f0000000a80)="2b2526a39b657b03f025", 0xa}, {&(0x7f0000000ac0)="2a7f5d5a1f60d27beb113741dd2d4ce1e7bbf3d55950a2aa34be8a27f19bb2e3e5823b01a3e279645de6e2f409900729d16b4ed3c0ef71d85d1251477ee1a40cb33a2fcc513a683d4e6d04a111e1f526d139813ca9ca3546325ecad243ba7bfff04243c931ac1dfb2df5767e7442cf461a0a58172e80c4523275e2af6c5686624a0d01702c31f5b1df0aa2347f7fddff88353836631855e37923679490d29992bb9d6c587743a6badbe8c817a88271839c2c017673540a737fdf5dd6e95a444527655d2c3bfbd6485e265a48", 0xcc}], 0x7) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) sendfile(r6, r6, 0x0, 0x1002000ff) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdbdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11e85e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f60200ca0268f2410e9a4a7d63b600100000e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f0100000000000000fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd388c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9dd56d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92d074a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a4043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6b00005b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e11567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a87e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c4f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2b357f46632d30c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea64f3d60a67dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ac0000000101010300000000000000000700000840000e7e7ba98006000340000000002c00018014000300fe8000000000000000000000000000aa14000400ff01000000000000000000000000000106000342000300001c001640000000000000000100000009fffffff980000000000000000000170020000fff00002c2a0000000100000009000000002400188008000240000001ff080002400000000808000340000000010800022ef479b0454223b4ba1521a1a6629e4000000002b2c5ede3734ea482ab150c8898637de326"], 0xac}}, 0x48000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000300)="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") socket$inet_mptcp(0x2, 0x1, 0x106) 5.805101524s ago: executing program 1 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x8, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) 3.771193395s ago: executing program 1 (id=992): r0 = syz_io_uring_setup(0xd3a, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 3.671061918s ago: executing program 1 (id=993): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1, 0x0, 0x51}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x4007, @fd_index=0x6, 0x7, 0x0, 0x0, 0x4, 0x0, {0x1, 0x0, 0x3, '\x00', 0x0, 0x1}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(r0, 0xe, 0x1) 3.383132945s ago: executing program 4 (id=994): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) 3.232468859s ago: executing program 0 (id=995): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f0000000b40)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket(0x2, 0x80805, 0x0) r5 = open(0x0, 0x84242, 0x1df2a23c5997fad6) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) fallocate(r2, 0x0, 0x1, 0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) 3.201315479s ago: executing program 4 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.093454347s ago: executing program 0 (id=997): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) 1.888806932s ago: executing program 4 (id=998): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\xcfPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0xa4) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x48) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r4, r2, 0x0, 0x4000000053d2) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2050012fffff2f14e946f3890de706415d3ffbebcffffff375e54a26a633a320000000c049078640109006401010069775428c8a9fd4148"], 0x0) close(r0) sendmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setns(0xc9, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r5, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x20340) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 883.568388ms ago: executing program 3 (id=999): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff7ffc}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x581840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x8c0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x3, 0x4002) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mq_open(&(0x7f0000000e00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2w2\x96\xb2\xe9=[\xa1/\xd3\xda\xbc\xfa\xea\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa7\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc4=.\xc6o\xfc\xa1\xb7\x88\xcfr\xf5@\x19\x13k\xe3d\x1a\x97\x99\x8f\xc9>\xbf3#\x03\xd4\x93\xc2\v\xf2\xba\xfb\x86\x9dr\x8e\xca\xe0s\xfe$\xce\xdb\\\x8f\x05\x92!\xe4\xd0|\x9bC\xc4\xf8\xd9%\xff\xef+X\a%\xbcA\t.\xdd[~$d\t\xb5\xa5\x17K\x1e\xe4z\xad\xca\xfe\xb0\x7f\xb8\x1b\x92\x950\xf7k\xadW\x1d\xd2\xea6\b\xc7\xc8}\x9a\x9c\xea`\xfe\xc1\xc1&\x8a#\x1a\xd5\\/\x02\x1e2\xa6\xc1\x84\xc4\x87\xd0\x97w\x94T\x99\xc7\x8a\xf9VN\xa4XN\x8d\x04\x91\x13\x8f\xe1;\a\xcfEI\xee~x\xce\xb8\t\xad\xf4\xde\xf4\xd0\xfb\xbf\x8f\xbf\a\x00\xcd\x10\xc1I\xc5\x93\x94;UZ\x95\x17\x1d\xf3:\'\xfd~\xed7\x12\x02\x1dr\x05\xf3\x805\x110\x06X\xb7{\x7fZ\x15\xe2\xfa6{', 0x800, 0x11, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 823.602539ms ago: executing program 4 (id=1000): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff7ffc}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) mq_open(&(0x7f0000000e00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2w2\x96\xb2\xe9=[\xa1/\xd3\xda\xbc\xfa\xea\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa7\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xc4=.\xc6o\xfc\xa1\xb7\x88\xcfr\xf5@\x19\x13k\xe3d\x1a\x97\x99\x8f\xc9>\xbf3#\x03\xd4\x93\xc2\v\xf2\xba\xfb\x86\x9dr\x8e\xca\xe0s\xfe$\xce\xdb\\\x8f\x05\x92!\xe4\xd0|\x9bC\xc4\xf8\xd9%\xff\xef+X\a%\xbcA\t.\xdd[~$d\t\xb5\xa5\x17K\x1e\xe4z\xad\xca\xfe\xb0\x7f\xb8\x1b\x92\x950\xf7k\xadW\x1d\xd2\xea6\b\xc7\xc8}\x9a\x9c\xea`\xfe\xc1\xc1&\x8a#\x1a\xd5\\/\x02\x1e2\xa6\xc1\x84\xc4\x87\xd0\x97w\x94T\x99\xc7\x8a\xf9VN\xa4XN\x8d\x04\x91\x13\x8f\xe1;\a\xcfEI\xee~x\xce\xb8\t\xad\xf4\xde\xf4\xd0\xfb\xbf\x8f\xbf\a\x00\xcd\x10\xc1I\xc5\x93\x94;UZ\x95\x17\x1d\xf3:\'\xfd~\xed7\x12\x02\x1dr\x05\xf3\x805\x110\x06X\xb7{\x7fZ\x15\xe2\xfa6{', 0x800, 0x11, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 561.159676ms ago: executing program 3 (id=1001): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x814) 159.711546ms ago: executing program 1 (id=1002): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYBLOB="010028"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) unshare(0x600) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000000c0)=0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x10) 100.750877ms ago: executing program 4 (id=1003): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x8, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) dup(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 2 (id=1004): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x4d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES64=r0], 0x0) kernel console output (not intermixed with test programs): _0: link becomes ready [ 81.956184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.965278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.991974][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.005736][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.015591][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.029134][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.039219][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.049106][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.059356][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.083646][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.104315][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.117147][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.130007][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.139550][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.149018][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.158097][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.168345][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.177559][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.186064][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.195933][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.210802][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.225995][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.238739][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.253495][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.263588][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.290263][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.295088][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 82.298726][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 82.341132][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.355515][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.365850][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.375295][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 82.375316][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 82.381467][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 82.395631][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.458454][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.469115][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.481994][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.492489][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.501793][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.511054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.521044][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.528252][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.544667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.553922][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.568957][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.576110][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.597401][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.620610][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.661891][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.678016][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.697898][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.724464][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.752361][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.778472][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.799702][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.817484][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.830672][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.864634][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.887110][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.922197][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.940815][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.950861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.978204][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.002572][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.018708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.056733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.071671][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.082325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.099179][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.106338][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.141757][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.151390][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.160086][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.169537][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.179632][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.197151][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.204919][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.228562][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.276299][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.295859][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.306189][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.319682][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.337545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.358080][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.377512][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.400397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.434260][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.479627][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.492912][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.520365][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.553440][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.567640][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.575275][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.607005][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.614585][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.637644][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.658378][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.669902][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.749597][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.762043][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.813000][ T4280] device veth0_vlan entered promiscuous mode [ 83.836786][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.849676][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.869622][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.888699][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.914465][ T4280] device veth1_vlan entered promiscuous mode [ 83.954585][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.963326][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.993507][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.011588][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.044203][ T4278] device veth0_vlan entered promiscuous mode [ 84.090585][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.107583][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.130903][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.161843][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.194847][ T4278] device veth1_vlan entered promiscuous mode [ 84.238694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.247947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.256242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.266071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.277213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.286067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.334889][ T4280] device veth0_macvtap entered promiscuous mode [ 84.350367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.367070][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 84.373145][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 84.385219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.409804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.425820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.435318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.443759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.449368][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 84.454501][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 84.457364][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 84.470505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.479405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.503477][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.522416][ T4280] device veth1_macvtap entered promiscuous mode [ 84.549937][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.558470][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.568369][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.578435][ T4273] device veth0_vlan entered promiscuous mode [ 84.606824][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.615649][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.643641][ T4273] device veth1_vlan entered promiscuous mode [ 84.663007][ T4278] device veth0_macvtap entered promiscuous mode [ 84.675744][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.684838][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.694103][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.703736][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.714933][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.731596][ T4277] device veth0_vlan entered promiscuous mode [ 84.745787][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.755208][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.765233][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.775030][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.783875][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.791899][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.809181][ T4278] device veth1_macvtap entered promiscuous mode [ 84.829988][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.856711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.865472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.877456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.885790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.894545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.902880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.916443][ T4277] device veth1_vlan entered promiscuous mode [ 84.925524][ T4274] device veth0_vlan entered promiscuous mode [ 84.940508][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.955132][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.968783][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.977871][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.987697][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.996439][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.005882][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.042335][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.059316][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.072777][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.083891][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.097450][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.116275][ T4274] device veth1_vlan entered promiscuous mode [ 85.125345][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.134649][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.144110][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.158517][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.168538][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.178032][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.186973][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.226198][ T4273] device veth0_macvtap entered promiscuous mode [ 85.239185][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.251050][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.261072][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.272897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.336327][ T4273] device veth1_macvtap entered promiscuous mode [ 85.346904][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.355111][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.364014][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.375100][ T4277] device veth0_macvtap entered promiscuous mode [ 85.414436][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.427414][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.437593][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.449014][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.461328][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.479127][ T4277] device veth1_macvtap entered promiscuous mode [ 85.494040][ T4274] device veth0_macvtap entered promiscuous mode [ 85.502060][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.517861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.525863][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.535003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.548154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.558033][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.566943][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.598301][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.615048][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.627345][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.641623][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.655979][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.676059][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.685634][ T4274] device veth1_macvtap entered promiscuous mode [ 85.692958][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.703828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.714999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.724739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.735366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.745600][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.755610][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.769707][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.778774][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.849947][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.861671][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.875244][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.889555][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.905465][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.917165][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.944589][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.959788][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.968779][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.993014][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.993800][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.011316][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.026170][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.038195][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.047746][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.058815][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.079472][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.090555][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.103238][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.113732][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.124491][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.135391][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.146278][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.158465][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.181966][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.193529][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.207755][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.218736][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.229232][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.239780][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.251461][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.259679][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.269191][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.279051][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.288942][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.299314][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.311649][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.321784][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.332985][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.343028][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.353790][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.363953][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.375297][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.387675][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.404140][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.413657][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.423612][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.433047][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.446737][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 86.453305][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 86.470026][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.480934][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.489776][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.499406][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.513483][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.523979][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.533864][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 86.539998][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 86.540011][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 86.598805][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.653544][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.725024][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.827239][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.835142][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.914371][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.916801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.933247][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.968478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.017445][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.025303][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.061948][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.136769][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.144687][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.218237][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.247369][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.255273][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.307856][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.326310][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.403170][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.489092][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.792281][ T4386] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 87.986382][ T4388] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 88.241275][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.986717][ T4316] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 89.082364][ T4317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.247516][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.263915][ T4316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.277375][ T4316] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 89.286475][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.303696][ T4317] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 89.325438][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.351952][ T4316] usb 2-1: config 0 descriptor?? [ 89.352628][ T4317] usb 1-1: Product: syz [ 89.365785][ T4317] usb 1-1: Manufacturer: syz [ 89.370683][ T4317] usb 1-1: SerialNumber: syz [ 89.589471][ T4317] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 89.623161][ T4317] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 89.666692][ T4317] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 89.693317][ T4316] usbhid 2-1:0.0: can't add hid device: -71 [ 89.701815][ T4316] usbhid: probe of 2-1:0.0 failed with error -71 [ 89.703196][ T4317] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 89.750962][ T4316] usb 2-1: USB disconnect, device number 2 [ 89.754824][ T4317] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 89.802017][ T4317] lan78xx: probe of 1-1:1.0 failed with error -32 [ 90.066713][ T7] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.228293][ T4441] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 90.273326][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.285810][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 90.301828][ T4441] device macvlan2 entered promiscuous mode [ 90.309932][ T7] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 90.325741][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.334260][ T7] usb 4-1: Product: syz [ 90.345480][ T7] usb 4-1: Manufacturer: syz [ 90.352447][ T7] usb 4-1: SerialNumber: syz [ 90.545064][ T4446] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 90.607180][ T7] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 91.437264][ T4320] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.445059][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 91.455838][ T7] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 91.671235][ T4320] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 91.682269][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.693130][ T4320] usb 2-1: Product: syz [ 91.697605][ T4320] usb 2-1: Manufacturer: syz [ 91.702261][ T4320] usb 2-1: SerialNumber: syz [ 91.724004][ T4316] usb 4-1: USB disconnect, device number 2 [ 91.740344][ T128] cfg80211: failed to load regulatory.db [ 91.909759][ T128] usb 1-1: USB disconnect, device number 2 [ 92.151063][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 93.181755][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 93.209900][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 93.246411][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 93.287657][ T4320] lan78xx: probe of 2-1:1.0 failed with error -32 [ 93.602153][ T4493] netlink: 'syz.0.34': attribute type 1 has an invalid length. [ 93.724923][ T4493] device macvlan2 entered promiscuous mode [ 94.001117][ T4497] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 94.269036][ T4507] fuse: Bad value for 'fd' [ 94.296688][ T4316] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 94.309504][ T4320] usb 2-1: USB disconnect, device number 3 [ 94.503790][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.526744][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.588402][ T4316] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 94.637618][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.721296][ T4316] usb 1-1: config 0 descriptor?? [ 94.889968][ T4320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.970669][ T4316] usbhid 1-1:0.0: can't add hid device: -71 [ 94.983935][ T4316] usbhid: probe of 1-1:0.0 failed with error -71 [ 95.006997][ T4316] usb 1-1: USB disconnect, device number 3 [ 95.106246][ T4320] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 95.122787][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.140107][ T4320] usb 2-1: Product: syz [ 95.144422][ T4320] usb 2-1: Manufacturer: syz [ 95.160591][ T4320] usb 2-1: SerialNumber: syz [ 95.381570][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 95.423695][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 95.436470][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 95.454269][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 95.479853][ T4320] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 95.522732][ T4320] lan78xx: probe of 2-1:1.0 failed with error -32 [ 95.576649][ T955] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.769263][ T955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.785203][ T955] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 95.821367][ T955] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 95.840848][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.857987][ T955] usb 3-1: Product: syz [ 95.871140][ T955] usb 3-1: Manufacturer: syz [ 95.881634][ T955] usb 3-1: SerialNumber: syz [ 95.901762][ T955] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 95.919582][ T955] gspca_mr97310a: reg write [21] error -22 [ 95.932393][ T955] mr97310a: probe of 3-1:1.0 failed with error -22 [ 96.866647][ T128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.073272][ T128] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 97.082763][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.091374][ T128] usb 5-1: Product: syz [ 97.095725][ T128] usb 5-1: Manufacturer: syz [ 97.100714][ T128] usb 5-1: SerialNumber: syz [ 97.515967][ T128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 97.605333][ T955] usb 2-1: USB disconnect, device number 4 [ 97.834702][ T4559] fuse: Bad value for 'fd' [ 98.346881][ T4316] usb 3-1: USB disconnect, device number 2 [ 98.532221][ T128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 98.544277][ T128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 98.553910][ T128] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 98.566022][ T128] lan78xx: probe of 5-1:1.0 failed with error -32 [ 99.116702][ T4316] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 99.308723][ T4316] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.329938][ T4316] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.355189][ T4316] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.370136][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.604706][ T4316] usb 1-1: usb_control_msg returned -32 [ 99.617634][ T4316] usbtmc 1-1:16.0: can't read capabilities [ 99.696261][ T128] usb 5-1: USB disconnect, device number 2 [ 100.356645][ T128] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.569580][ T4586] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 100.610150][ T128] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 100.626413][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.634882][ T128] usb 4-1: Product: syz [ 100.645474][ T128] usb 4-1: Manufacturer: syz [ 100.652035][ T128] usb 4-1: SerialNumber: syz [ 100.884287][ T128] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 100.916910][ T128] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 100.946172][ T128] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 100.958504][ T128] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 100.968804][ T128] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 100.979241][ T128] lan78xx: probe of 4-1:1.0 failed with error -32 [ 101.126744][ T4316] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.296638][ T128] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.329522][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 101.339218][ T4316] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.360340][ T4316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.374240][ T4316] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 101.392080][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.415607][ T4316] usb 3-1: config 0 descriptor?? [ 101.490198][ T128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.509324][ T128] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 101.535552][ T128] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 101.556272][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.574002][ T128] usb 2-1: Product: syz [ 101.578316][ T128] usb 2-1: Manufacturer: syz [ 101.590996][ T128] usb 2-1: SerialNumber: syz [ 101.608698][ T128] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 101.615059][ T128] gspca_mr97310a: reg write [21] error -22 [ 101.640084][ T128] mr97310a: probe of 2-1:1.0 failed with error -22 [ 101.852340][ T4316] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 101.899007][ T128] usb 1-1: USB disconnect, device number 4 [ 102.249279][ T955] usb 3-1: USB disconnect, device number 3 [ 103.099001][ T7] usb 4-1: USB disconnect, device number 3 [ 103.236747][ T955] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.430020][ T955] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 103.439384][ T955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.447563][ T955] usb 1-1: Product: syz [ 103.451839][ T955] usb 1-1: Manufacturer: syz [ 103.456494][ T955] usb 1-1: SerialNumber: syz [ 103.874049][ T955] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 104.068636][ T128] usb 2-1: USB disconnect, device number 5 [ 104.756822][ T4639] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 104.851729][ T4639] device macvlan2 entered promiscuous mode [ 104.890601][ T955] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 104.905348][ T955] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 104.918414][ T955] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 104.945628][ T955] lan78xx: probe of 1-1:1.0 failed with error -32 [ 105.355710][ T4651] netlink: 'syz.2.82': attribute type 4 has an invalid length. [ 105.696707][ T4316] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 105.901133][ T4316] usb 3-1: config 0 has no interfaces? [ 105.909381][ T4316] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.925277][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.945735][ T4316] usb 3-1: config 0 descriptor?? [ 106.019283][ T4320] usb 1-1: USB disconnect, device number 5 [ 106.091212][ T4672] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 106.180817][ T4316] usb 3-1: USB disconnect, device number 4 [ 106.258484][ T4676] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 106.424934][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 106.433951][ T4680] bond0: Unable to set up delay as MII monitoring is disabled [ 107.174993][ T4693] binder: 4692:4693 ioctl c0306201 0 returned -14 [ 107.416217][ T4698] netlink: 'syz.0.97': attribute type 3 has an invalid length. [ 107.456667][ T4698] netlink: 666 bytes leftover after parsing attributes in process `syz.0.97'. [ 109.047859][ T4733] process 'syz.1.108' launched './file2' with NULL argv: empty string added [ 109.214852][ T4738] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 109.230083][ T4737] IPVS: stopping master sync thread 4738 ... [ 109.268256][ T4737] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 109.687245][ T4751] device syzkaller0 entered promiscuous mode [ 110.325185][ T4770] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 110.823403][ T4783] device syzkaller0 entered promiscuous mode [ 110.863329][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 111.041397][ T4789] device syzkaller0 entered promiscuous mode [ 111.070077][ T4789] tipc: Started in network mode [ 111.093392][ T4789] tipc: Node identity 0a58e9d71531, cluster identity 4711 [ 111.132508][ T4789] tipc: Enabled bearer , priority 0 [ 111.843066][ T4786] tipc: Resetting bearer [ 111.998190][ T4786] tipc: Disabling bearer [ 112.450549][ T4798] netlink: 'syz.2.126': attribute type 4 has an invalid length. [ 112.766720][ T955] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 112.988780][ T955] usb 3-1: config 0 has no interfaces? [ 112.994466][ T955] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.029488][ T955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.066567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 113.117515][ T955] usb 3-1: config 0 descriptor?? [ 113.362193][ T4316] usb 3-1: USB disconnect, device number 5 [ 115.027181][ T955] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.227069][ T955] usb 3-1: Using ep0 maxpacket: 16 [ 115.237592][ T955] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.291630][ T955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.326859][ T955] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 115.366686][ T955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.422754][ T955] usb 3-1: config 0 descriptor?? [ 115.843659][ T4845] device syzkaller0 entered promiscuous mode [ 115.873809][ T955] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 115.896892][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 116.072988][ T4322] usb 3-1: USB disconnect, device number 6 [ 116.241846][ T4850] capability: warning: `syz.1.142' uses deprecated v2 capabilities in a way that may be insecure [ 116.967938][ T4870] program syz.4.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.117058][ T7] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 117.256919][ T955] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 117.309815][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.325441][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.345455][ T7] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 117.363682][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.376268][ T7] usb 3-1: config 0 descriptor?? [ 117.449726][ T955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.472658][ T955] usb 2-1: not running at top speed; connect to a high speed hub [ 117.500183][ T955] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 117.524740][ T955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.543883][ T955] usb 2-1: Product: syz [ 117.555300][ T955] usb 2-1: Manufacturer: syz [ 117.566359][ T955] usb 2-1: SerialNumber: syz [ 117.631077][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 117.641593][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 117.673253][ T7] usb 3-1: USB disconnect, device number 7 [ 117.807690][ T955] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 118.446840][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.656630][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 118.664135][ T4316] usb 5-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 118.727258][ T4316] usb 5-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.808241][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.835055][ T4316] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 118.871584][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.914700][ T4316] usb 5-1: config 0 descriptor?? [ 119.024323][ T4898] Zero length message leads to an empty skb [ 119.061503][ T955] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 119.078055][ T955] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 119.284976][ T128] usb 2-1: USB disconnect, device number 6 [ 119.345987][ T4316] lenovo 0003:17EF:60A3.0003: unknown main item tag 0x4 [ 119.366697][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.366948][ T4316] lenovo 0003:17EF:60A3.0003: unknown main item tag 0xd [ 119.395696][ T4316] lenovo 0003:17EF:60A3.0003: hidraw0: USB HID v9.42 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 119.556634][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 119.563939][ T7] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 119.584364][ T7] usb 1-1: config 0 has no interface number 0 [ 119.601961][ T7] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 119.679191][ T7] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xD3, skipping [ 119.694976][ T7] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.714591][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 119.749349][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.791516][ T7] usb 1-1: Product: syz [ 119.812705][ T7] usb 1-1: Manufacturer: syz [ 119.823793][ T7] usb 1-1: SerialNumber: syz [ 119.855400][ T7] usb 1-1: config 0 descriptor?? [ 119.911094][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input5 [ 120.163355][ T7] usb 1-1: USB disconnect, device number 6 [ 121.152916][ T4316] usb 5-1: USB disconnect, device number 3 [ 121.947311][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.097276][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.127119][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 122.137132][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.149312][ T7] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 122.157775][ T7] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 122.166074][ T7] usb 5-1: config 14 has no interface number 0 [ 122.172624][ T7] usb 5-1: config 14 has no interface number 1 [ 122.179135][ T7] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 122.190622][ T7] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 122.201759][ T7] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 122.213454][ T7] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.228002][ T7] usb 5-1: config 14 interface 57 has no altsetting 0 [ 122.234849][ T7] usb 5-1: config 14 interface 228 has no altsetting 0 [ 122.257464][ T7] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 122.276769][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.284823][ T7] usb 5-1: Product: syz [ 122.291429][ T7] usb 5-1: Manufacturer: syz [ 122.296344][ T7] usb 5-1: SerialNumber: syz [ 122.311108][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.335792][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.347681][ T4320] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.357110][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.365229][ T4320] usb 2-1: SerialNumber: syz [ 122.550662][ T4960] @0: renamed from virt_wifi0 [ 122.586496][ T4320] usb 2-1: 0:2 : does not exist [ 122.635026][ T4320] usb 2-1: USB disconnect, device number 7 [ 122.743209][ T7] legousbtower 5-1:14.57: interrupt endpoints not found [ 122.868352][ T4961] udevd[4961]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.942598][ T7] legousbtower 5-1:14.228: interrupt endpoints not found [ 125.106190][ T955] usb 5-1: USB disconnect, device number 4 [ 125.167784][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.331036][ T7] usb 2-1: device descriptor read/64, error -71 [ 125.576572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 125.586577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 125.596556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 125.606565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 125.616557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 125.626552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 125.636588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 125.646557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 125.656554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 126.446855][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.596762][ T7] usb 2-1: device descriptor read/64, error -71 [ 126.746635][ T7] usb usb2-port1: attempt power cycle [ 127.176705][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.239563][ T7] usb 2-1: device descriptor read/8, error -71 [ 127.541821][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.609512][ T7] usb 2-1: device descriptor read/8, error -71 [ 127.736935][ T7] usb usb2-port1: unable to enumerate USB device [ 128.012621][ T5041] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 132.206770][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.396660][ T7] usb 4-1: device descriptor read/64, error -71 [ 132.686823][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.695279][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702242][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.866847][ T7] usb 4-1: device descriptor read/64, error -71 [ 132.997219][ T7] usb usb4-port1: attempt power cycle [ 133.436635][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.477342][ T7] usb 4-1: device descriptor read/8, error -71 [ 133.746685][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.857299][ T7] usb 4-1: device descriptor read/8, error -71 [ 133.998296][ T7] usb usb4-port1: unable to enumerate USB device [ 136.069597][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 137.786893][ T4318] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 138.026632][ T4318] usb 2-1: device descriptor read/64, error -71 [ 138.034741][ T9] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 138.186758][ T5148] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 138.310064][ T4318] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 138.346300][ T5150] bond2: (slave veth5): Enslaving as an active interface with a down link [ 138.405369][ T5148] bond2: (slave veth0_to_bond): making interface the new active one [ 138.478864][ T5148] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.488570][ T4318] usb 2-1: device descriptor read/64, error -71 [ 138.559954][ T5150] device macvlan2 entered promiscuous mode [ 138.612830][ T5150] device bond2 entered promiscuous mode [ 138.626959][ T4318] usb usb2-port1: attempt power cycle [ 138.636825][ T5150] device veth0_to_bond entered promiscuous mode [ 138.654112][ T5150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.697788][ T5150] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth5 [ 138.769342][ T5150] device bond2 left promiscuous mode [ 138.805424][ T5150] device veth0_to_bond left promiscuous mode [ 139.015998][ T5148] syz.0.250 (5148) used greatest stack depth: 20528 bytes left [ 139.036689][ T4318] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 139.077323][ T4318] usb 2-1: device descriptor read/8, error -71 [ 139.227065][ T4343] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.356608][ T4318] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 139.407851][ T4318] usb 2-1: device descriptor read/8, error -71 [ 139.419298][ T4343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.446235][ T4343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 139.465605][ T4325] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 139.466359][ T4343] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 139.523243][ T4343] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 139.536735][ T4318] usb usb2-port1: unable to enumerate USB device [ 139.560873][ T4343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.591787][ T4343] usb 4-1: Product: syz [ 139.596029][ T4343] usb 4-1: Manufacturer: syz [ 139.620828][ T4343] usb 4-1: SerialNumber: syz [ 139.646227][ T4343] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 139.670348][ T4343] gspca_mr97310a: reg write [21] error -90 [ 139.676287][ T4343] mr97310a: probe of 4-1:1.0 failed with error -90 [ 139.876648][ T4318] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.105140][ T4318] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 140.116548][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.134132][ T4318] usb 3-1: Product: syz [ 140.143223][ T4318] usb 3-1: Manufacturer: syz [ 140.151669][ T4318] usb 3-1: SerialNumber: syz [ 140.162176][ T4318] usb 3-1: config 0 descriptor?? [ 140.581767][ T4318] usb 3-1: Firmware: major: 160, minor: 18, hardware type: UNKNOWN (79) [ 140.613974][ T5194] device syzkaller0 entered promiscuous mode [ 140.661409][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 140.837758][ T4318] usb 3-1: Firmware: build p $ [ 141.038859][ T4318] usb 3-1: failed to fetch extended address, random address set [ 141.124529][ T4318] usb 3-1: atusb_probe: initialization failed, error = -524 [ 141.132468][ T4318] atusb: probe of 3-1:0.0 failed with error -524 [ 141.152850][ T4318] usb 3-1: USB disconnect, device number 8 [ 141.893988][ T47] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 142.033440][ T22] usb 4-1: USB disconnect, device number 8 [ 142.174410][ T5223] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 142.244421][ T5223] bond2: (slave veth7): Enslaving as an active interface with a down link [ 142.272013][ T5223] bond2: (slave veth0_to_bond): making interface the new active one [ 142.312119][ T5223] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 142.368154][ T4318] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.558014][ T4318] usb 1-1: no configurations [ 142.562795][ T4318] usb 1-1: can't read configurations, error -22 [ 142.737575][ T4318] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.968903][ T4318] usb 1-1: no configurations [ 142.974269][ T4318] usb 1-1: can't read configurations, error -22 [ 143.039482][ T4318] usb usb1-port1: attempt power cycle [ 143.536834][ T4318] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.590027][ T4318] usb 1-1: no configurations [ 143.601805][ T4318] usb 1-1: can't read configurations, error -22 [ 143.806713][ T4318] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.858008][ T4318] usb 1-1: no configurations [ 143.862760][ T4318] usb 1-1: can't read configurations, error -22 [ 143.877302][ T4318] usb usb1-port1: unable to enumerate USB device [ 143.946690][ T22] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 144.195771][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.230358][ T22] usb 4-1: not running at top speed; connect to a high speed hub [ 144.271749][ T22] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 144.308423][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.316494][ T22] usb 4-1: Product: syz [ 144.324342][ T22] usb 4-1: Manufacturer: syz [ 144.361974][ T22] usb 4-1: SerialNumber: syz [ 144.574083][ T22] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 144.699095][ T4376] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 145.316674][ T128] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.560839][ T128] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.591284][ T128] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 145.616612][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.645031][ T128] usb 3-1: Product: syz [ 145.655168][ T128] usb 3-1: Manufacturer: syz [ 145.706588][ T128] usb 3-1: SerialNumber: syz [ 145.768651][ T128] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 146.570484][ T22] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 146.601416][ T22] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 146.775833][ T5240] 8021q: VLANs not supported on ip6tnl0 [ 146.811123][ T4318] usb 4-1: USB disconnect, device number 9 [ 147.154088][ T5204] Set syz1 is full, maxelem 65536 reached [ 147.610227][ T48] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 148.211181][ T128] gspca_mr97310a: reg write [21] error -71 [ 148.276119][ T128] mr97310a: probe of 3-1:1.0 failed with error -71 [ 148.323718][ T128] usb 3-1: USB disconnect, device number 9 [ 149.341396][ T5304] bond2: (slave veth0_to_bond): Releasing active interface [ 150.483674][ T9] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 150.791992][ T5332] netlink: 44 bytes leftover after parsing attributes in process `syz.1.318'. [ 152.089170][ T4318] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.177409][ T4378] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 153.226980][ T4318] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 153.439355][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.447496][ T4318] usb 4-1: Product: syz [ 153.452652][ T4318] usb 4-1: Manufacturer: syz [ 153.457354][ T4318] usb 4-1: SerialNumber: syz [ 153.465384][ T4318] usb 4-1: config 0 descriptor?? [ 154.245437][ T4318] usb 4-1: Firmware: major: 160, minor: 18, hardware type: UNKNOWN (79) [ 154.486673][ T4318] usb 4-1: Firmware: build p $ [ 154.767118][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 154.776142][ T5384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'. [ 154.933598][ T4318] usb 4-1: failed to fetch extended address, random address set [ 154.988884][ T4318] usb 4-1: atusb_probe: initialization failed, error = -524 [ 155.027213][ T4318] atusb: probe of 4-1:0.0 failed with error -524 [ 155.061673][ T4318] usb 4-1: USB disconnect, device number 10 [ 155.079508][ T5390] IPVS: Error connecting to the multicast addr [ 156.291941][ T5235] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 156.351104][ T5401] device syzkaller0 entered promiscuous mode [ 156.372550][ T5403] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 156.623912][ T5408] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4044617448 (258855516672 ns) > initial count (110676013376 ns). Using initial count to start timer. [ 156.651961][ T5408] kvm: apic: phys broadcast and lowest prio [ 156.697460][ T5403] bond2: (slave veth9): Enslaving as an active interface with a down link [ 156.760697][ T5405] bond2: (slave veth0_to_bond): making interface the new active one [ 156.788263][ T5405] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 156.892532][ T5406] device macvlan2 entered promiscuous mode [ 156.907782][ T5406] device bond2 entered promiscuous mode [ 156.927893][ T5406] device veth0_to_bond entered promiscuous mode [ 156.973735][ T5406] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.015516][ T5406] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 157.200648][ T5406] device bond2 left promiscuous mode [ 157.206023][ T5406] device veth0_to_bond left promiscuous mode [ 159.263197][ T5236] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 159.285553][ T5448] device syzkaller0 entered promiscuous mode [ 159.406698][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 159.588442][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.616676][ T22] usb 2-1: config 0 has no interfaces? [ 159.628483][ T4318] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.643539][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 159.681352][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.690470][ T22] usb 2-1: Product: syz [ 159.694781][ T22] usb 2-1: Manufacturer: syz [ 159.699817][ T22] usb 2-1: SerialNumber: syz [ 159.851208][ T4318] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.860387][ T22] usb 2-1: config 0 descriptor?? [ 159.892951][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.906986][ T5463] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 160.322991][ T4318] usb 5-1: Product: syz [ 160.330097][ T4318] usb 5-1: Manufacturer: syz [ 160.335017][ T4318] usb 5-1: SerialNumber: syz [ 160.813665][ T5466] bond3: (slave veth7): Enslaving as an active interface with a down link [ 160.857363][ T4318] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 160.906166][ T4318] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 160.978730][ T5468] bond3: (slave veth0_to_bond): making interface the new active one [ 161.020323][ T5468] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 161.104573][ T5463] device macvlan2 entered promiscuous mode [ 161.112167][ T5463] device bond3 entered promiscuous mode [ 161.118597][ T5463] device veth0_to_bond entered promiscuous mode [ 161.126010][ T5463] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.148140][ T5463] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 161.205306][ T5463] device bond3 left promiscuous mode [ 161.221959][ T5463] device veth0_to_bond left promiscuous mode [ 161.603098][ T4318] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 161.625182][ T4318] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 161.646055][ T4318] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.690539][ T4318] lan78xx: probe of 5-1:1.0 failed with error -32 [ 162.713232][ T5489] device syzkaller0 entered promiscuous mode [ 162.762900][ T4318] usb 2-1: USB disconnect, device number 16 [ 162.785006][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 162.819093][ T128] usb 5-1: USB disconnect, device number 5 [ 162.915620][ T5484] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 162.969196][ T5497] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 163.937330][ T5499] bond1: (slave veth3): Enslaving as an active interface with a down link [ 164.052370][ T5502] bond1: (slave veth0_to_bond): making interface the new active one [ 164.093978][ T5502] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 164.138349][ T5512] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 164.380275][ T5510] bond3: (slave veth11): Enslaving as an active interface with a down link [ 164.634475][ T5512] bond2: (slave veth0_to_bond): Releasing active interface [ 165.364930][ T5512] bond3: (slave veth0_to_bond): making interface the new active one [ 165.412132][ T5512] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 165.470168][ T5515] device macvlan2 entered promiscuous mode [ 165.512615][ T5515] device bond3 entered promiscuous mode [ 165.537008][ T5515] device veth0_to_bond entered promiscuous mode [ 165.545222][ T5515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.563253][ T5515] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 165.581864][ T5515] device bond3 left promiscuous mode [ 165.587476][ T5515] device veth0_to_bond left promiscuous mode [ 165.656963][ T128] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.860774][ T128] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 165.874875][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.922523][ T128] usb 1-1: Product: syz [ 165.941386][ T128] usb 1-1: Manufacturer: syz [ 165.952968][ T128] usb 1-1: SerialNumber: syz [ 167.031956][ T128] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 167.079096][ T128] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 167.256161][ T5548] device syzkaller0 entered promiscuous mode [ 167.270996][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 167.611997][ T5551] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 167.721296][ T128] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 167.764198][ T128] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 167.827686][ T128] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 167.849314][ T5553] bond1: (slave veth5): Enslaving as an active interface with a down link [ 167.859996][ T128] lan78xx: probe of 1-1:1.0 failed with error -32 [ 167.947274][ T5551] bond1: (slave veth0_to_bond): making interface the new active one [ 167.962397][ T5551] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 168.430877][ T5571] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 168.531610][ T5571] bond4: (slave veth13): Enslaving as an active interface with a down link [ 168.721421][ T5576] bond3: (slave veth0_to_bond): Releasing active interface [ 169.115392][ T5576] bond4: (slave veth0_to_bond): making interface the new active one [ 169.355881][ T5576] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.445190][ T4343] usb 1-1: USB disconnect, device number 11 [ 169.755955][ T5597] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 169.846261][ T5597] bond5: (slave veth15): Enslaving as an active interface with a down link [ 169.893649][ T5606] bond4: (slave veth0_to_bond): Releasing active interface [ 169.937845][ T5606] bond5: (slave veth0_to_bond): making interface the new active one [ 169.977168][ T5606] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 170.651682][ T5623] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 170.666701][ T4346] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.726082][ T5623] bond4: (slave veth9): Enslaving as an active interface with a down link [ 170.753624][ T5623] bond3: (slave veth0_to_bond): Releasing active interface [ 170.772310][ T5623] bond4: (slave veth0_to_bond): making interface the new active one [ 170.785618][ T5623] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 170.850442][ T4346] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 170.866832][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.875153][ T4346] usb 5-1: Product: syz [ 170.879466][ T4346] usb 5-1: Manufacturer: syz [ 170.884101][ T4346] usb 5-1: SerialNumber: syz [ 171.098948][ T4346] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 171.112641][ T4346] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 171.978205][ T5635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.412'. [ 172.887743][ T4346] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 172.921312][ T4346] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 172.939852][ T4346] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 172.983360][ T4346] lan78xx: probe of 5-1:1.0 failed with error -32 [ 173.573927][ T5659] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 173.688745][ T5664] bond2: (slave veth5): Enslaving as an active interface with a down link [ 173.747857][ T5669] bond1: (slave veth0_to_bond): Releasing active interface [ 173.762039][ T5669] bond2: (slave veth0_to_bond): making interface the new active one [ 173.771980][ T5669] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 173.936782][ T4320] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.297062][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.396035][ T4320] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 174.537889][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 174.773499][ T128] usb 5-1: USB disconnect, device number 6 [ 174.785210][ T4320] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 175.222809][ T4320] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 175.232392][ T4320] usb 3-1: Manufacturer: syz [ 175.386896][ T4320] usb 3-1: config 0 descriptor?? [ 175.712390][ T4320] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 176.096632][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 176.298355][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.329143][ T22] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 176.355121][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.383703][ T22] usb 2-1: Product: syz [ 176.401835][ T22] usb 2-1: Manufacturer: syz [ 176.415160][ T22] usb 2-1: SerialNumber: syz [ 176.454336][ T22] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 177.007275][ T22] gspca_mr97310a: reg write [21] error -110 [ 177.048177][ T22] mr97310a: probe of 2-1:1.0 failed with error -110 [ 178.063741][ T5720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.437'. [ 178.865698][ T4318] usb 3-1: USB disconnect, device number 10 [ 179.881072][ T4262] usb 2-1: USB disconnect, device number 17 [ 180.287954][ T5753] device syzkaller0 entered promiscuous mode [ 180.387910][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 181.557788][ T4343] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 181.797916][ T4343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.536059][ T4343] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 182.548233][ T4343] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 182.578330][ T4343] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 182.596736][ T4343] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 182.604964][ T4343] usb 3-1: Manufacturer: syz [ 182.612568][ T4343] usb 3-1: config 0 descriptor?? [ 182.630999][ T4343] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 182.842500][ T5781] device syzkaller0 entered promiscuous mode [ 182.861687][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.787039][ T4343] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 183.871368][ T5791] device syzkaller0 entered promiscuous mode [ 183.888763][ T5791] tipc: Started in network mode [ 183.897066][ T5791] tipc: Node identity 8689e68a4ba5, cluster identity 4711 [ 183.926801][ T5791] tipc: Enabled bearer , priority 0 [ 183.945233][ T5790] tipc: Resetting bearer [ 183.978349][ T4262] usb 3-1: USB disconnect, device number 11 [ 183.988155][ T4343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.058369][ T4343] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 184.089943][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.116590][ T4343] usb 2-1: Product: syz [ 184.128979][ T4343] usb 2-1: Manufacturer: syz [ 184.168743][ T4343] usb 2-1: SerialNumber: syz [ 184.273264][ T4343] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 184.291844][ T5790] tipc: Disabling bearer [ 185.986917][ T4346] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 186.492069][ T4346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.822758][ T4343] gspca_mr97310a: reg write [21] error -71 [ 186.882699][ T4343] mr97310a: probe of 2-1:1.0 failed with error -71 [ 186.889403][ T4346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.901106][ T4343] usb 2-1: USB disconnect, device number 18 [ 186.908610][ T4346] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.917842][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.927130][ T4346] usb 4-1: SerialNumber: syz [ 187.093273][ T5813] device syzkaller0 entered promiscuous mode [ 187.150599][ T4346] usb 4-1: 0:2 : does not exist [ 187.157039][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 187.206959][ T4346] usb 4-1: USB disconnect, device number 11 [ 187.470101][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.948321][ T5828] device syzkaller0 entered promiscuous mode [ 189.036901][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.120447][ T5828] tipc: Started in network mode [ 189.150514][ T5828] tipc: Node identity 1a110efb52e7, cluster identity 4711 [ 189.202573][ T5828] tipc: Enabled bearer , priority 0 [ 189.244151][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.325734][ T22] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 189.389730][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 189.419683][ T5826] tipc: Resetting bearer [ 189.516405][ T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 189.718408][ T22] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 189.786851][ T22] usb 5-1: Manufacturer: syz [ 189.821444][ T22] usb 5-1: config 0 descriptor?? [ 189.889192][ T22] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 190.012500][ T5826] tipc: Disabling bearer [ 191.526594][ T128] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 191.776367][ T128] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.872343][ T128] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.963519][ T5868] device syzkaller0 entered promiscuous mode [ 191.978153][ T128] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.015734][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.037800][ T128] usb 3-1: SerialNumber: syz [ 192.060638][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 192.095984][ T4262] usb 5-1: USB disconnect, device number 7 [ 192.105801][ T5873] device syzkaller0 entered promiscuous mode [ 192.163776][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.343955][ T128] usb 3-1: 0:2 : does not exist [ 192.407687][ T128] usb 3-1: USB disconnect, device number 12 [ 192.761421][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.148319][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.157218][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.866607][ T128] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.885189][ T5915] device syzkaller0 entered promiscuous mode [ 194.894209][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.062146][ T128] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 195.084225][ T128] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 195.183128][ T128] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 195.231089][ T128] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 195.274742][ T128] usb 3-1: Manufacturer: syz [ 195.442634][ T128] usb 3-1: config 0 descriptor?? [ 195.473621][ T128] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 196.070815][ T4377] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 197.156590][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 198.676613][ T4262] usb 3-1: USB disconnect, device number 13 [ 199.945533][ T48] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 200.358969][ T5977] fuse: Bad value for 'fd' [ 201.787602][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 201.793730][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 201.800040][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 201.800067][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 201.806072][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 203.333322][ T4262] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 203.660487][ T4262] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 203.854261][ T4262] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 204.034252][ T4262] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 204.125397][ T4262] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 204.150710][ T4262] usb 4-1: Manufacturer: syz [ 204.184452][ T4262] usb 4-1: config 0 descriptor?? [ 204.214297][ T4262] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 204.477390][ T6002] device syzkaller0 entered promiscuous mode [ 204.499077][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.613972][ T48] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 205.316972][ T4346] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 205.553987][ T4346] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 205.729539][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.854588][ T4346] usb 2-1: Product: syz [ 205.918811][ T4346] usb 2-1: Manufacturer: syz [ 205.956556][ T4346] usb 2-1: SerialNumber: syz [ 205.996719][ T6021] fuse: Bad value for 'fd' [ 206.194370][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 206.222982][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 206.263974][ T4343] usb 4-1: USB disconnect, device number 12 [ 207.220172][ T47] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 207.462087][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 208.527654][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 208.797706][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 208.809801][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 208.821969][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 208.834423][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 208.848896][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 208.862183][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 208.872018][ T4346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 208.883803][ T6055] fuse: Bad value for 'fd' [ 208.908127][ T4346] lan78xx: probe of 2-1:1.0 failed with error -71 [ 208.944329][ T4346] usb 2-1: USB disconnect, device number 19 [ 209.086613][ T4320] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 209.302298][ T4320] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 209.313343][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 209.352187][ T4320] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 209.367283][ T4320] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 209.375426][ T4320] usb 3-1: Manufacturer: syz [ 209.394797][ T4320] usb 3-1: config 0 descriptor?? [ 209.406429][ T4320] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 209.446630][ T4318] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.476800][ T4262] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 209.546331][ T5236] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 209.631885][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.653260][ T4318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.691405][ T4318] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 209.701854][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.710380][ T4262] usb 5-1: Using ep0 maxpacket: 8 [ 209.716061][ T4318] usb 4-1: SerialNumber: syz [ 209.723281][ T4262] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.751053][ T4262] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 141, changing to 11 [ 209.762564][ T4262] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.778018][ T4262] usb 5-1: config 1 interface 0 has no altsetting 0 [ 209.793806][ T4262] usb 5-1: language id specifier not provided by device, defaulting to English [ 209.830398][ T4262] usb 5-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.40 [ 209.845019][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.855071][ T4262] usb 5-1: Product: syz [ 209.864794][ T4262] usb 5-1: Manufacturer: ꓍翪늌Ἅ雽㹨뫿ࡣ⯬奾끼먑〡韦楄‟폆憙頬䋒毃漋轉餑ㆲ餴桀ᕫ豹絪⌍诚䪙↓쏰񜞶䒠ٞ謊頝욨ዡラ夿 [ 209.884824][ T4262] usb 5-1: SerialNumber: syz [ 209.957766][ T4318] usb 4-1: 0:2 : does not exist [ 210.026851][ T4318] usb 4-1: USB disconnect, device number 13 [ 210.112366][ T4262] usbhid 5-1:1.0: can't add hid device: -71 [ 210.133064][ T4262] usbhid: probe of 5-1:1.0 failed with error -71 [ 210.156762][ T4262] usb 5-1: USB disconnect, device number 8 [ 210.298630][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.701725][ T6083] device syzkaller0 entered promiscuous mode [ 211.745388][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 211.781839][ T4316] usb 3-1: USB disconnect, device number 14 [ 214.855408][ T6122] device syzkaller0 entered promiscuous mode [ 214.880085][ T4346] net_ratelimit: 3 callbacks suppressed [ 214.880099][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.106704][ T4343] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 215.114391][ T4316] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 215.989195][ T4343] usb 4-1: config 0 has no interfaces? [ 215.994917][ T4316] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 216.006220][ T4343] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.020423][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.859944][ T4343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.868591][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 216.885278][ T4343] usb 4-1: config 0 descriptor?? [ 216.894858][ T4316] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 216.904688][ T4316] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 216.913405][ T4316] usb 1-1: Manufacturer: syz [ 216.920817][ T4316] usb 1-1: config 0 descriptor?? [ 216.939774][ T4316] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 217.096082][ T4343] usb 4-1: USB disconnect, device number 14 [ 217.306972][ T6147] device syzkaller0 entered promiscuous mode [ 217.374721][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 218.999478][ T4343] usb 1-1: USB disconnect, device number 12 [ 222.356687][ T4316] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 222.450726][ T6120] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.684185][ T6120] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 222.814852][ T6120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.962975][ T6120] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 223.209205][ T6120] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 223.266745][ T6120] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 223.292023][ T6120] usb 1-1: Manufacturer: syz [ 223.380583][ T6120] usb 1-1: config 0 descriptor?? [ 223.428868][ T4316] usb 4-1: config 0 has no interfaces? [ 223.434420][ T4316] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.440321][ T6120] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 223.473965][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.494655][ T4316] usb 4-1: config 0 descriptor?? [ 223.709564][ T4343] usb 4-1: USB disconnect, device number 15 [ 224.166641][ T4316] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 224.368400][ T4316] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 224.382259][ T4316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.413634][ T4316] usb 3-1: config 0 has no interface number 0 [ 224.423779][ T4316] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 224.443212][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.463029][ T4316] usb 3-1: config 0 descriptor?? [ 224.473177][ T4316] hub 3-1:0.4: bad descriptor, ignoring hub [ 224.479840][ T4316] hub: probe of 3-1:0.4 failed with error -5 [ 224.487485][ T4316] sierra 3-1:0.4: Sierra USB modem converter detected [ 224.682263][ T4316] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 224.767671][ T4316] usb 3-1: USB disconnect, device number 15 [ 224.792348][ T4316] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 224.865296][ T4316] sierra 3-1:0.4: device disconnected [ 225.420432][ T6120] usb 1-1: USB disconnect, device number 13 [ 225.460678][ T6218] netlink: 64 bytes leftover after parsing attributes in process `syz.2.605'. [ 228.716626][ T4346] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 228.919232][ T4346] usb 2-1: config 0 has no interfaces? [ 228.924794][ T4346] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.981047][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.025683][ T4346] usb 2-1: config 0 descriptor?? [ 229.257833][ T4343] usb 2-1: USB disconnect, device number 20 [ 229.352894][ T6259] netlink: 64 bytes leftover after parsing attributes in process `syz.2.618'. [ 229.586585][ T4322] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 229.723832][ T6191] Set syz1 is full, maxelem 65536 reached [ 229.798205][ T4322] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 230.610306][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.621009][ T4322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 230.648025][ T4322] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 230.657269][ T4322] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 230.666075][ T4322] usb 4-1: Manufacturer: syz [ 230.697611][ T4322] usb 4-1: config 0 descriptor?? [ 230.718520][ T4322] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 232.312951][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 232.447915][ T6295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.629'. [ 233.141511][ T4316] usb 4-1: USB disconnect, device number 16 [ 234.776723][ T6120] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 235.410322][ T6120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.436223][ T6120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.551528][ T6120] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.592788][ T6120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.614710][ T6120] usb 2-1: SerialNumber: syz [ 235.676353][ T6326] fuse: Bad value for 'group_id' [ 235.691857][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 235.838754][ T6120] usb 2-1: 0:2 : does not exist [ 235.931212][ T6120] usb 2-1: USB disconnect, device number 21 [ 236.608168][ T6335] netlink: 72 bytes leftover after parsing attributes in process `syz.4.641'. [ 237.944960][ T6346] fuse: Unknown parameter 'grou00000000000000000000' [ 238.096613][ T6120] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.109954][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 239.881038][ T6120] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 239.902502][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.934677][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.965158][ T6120] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 240.011372][ T6120] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 240.036231][ T6120] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 240.045312][ T6120] usb 4-1: Manufacturer: syz [ 240.054190][ T6120] usb 4-1: config 0 descriptor?? [ 240.475377][ T6120] usbhid 4-1:0.0: can't add hid device: -71 [ 240.484038][ T6120] usbhid: probe of 4-1:0.0 failed with error -71 [ 240.517544][ T6120] usb 4-1: USB disconnect, device number 17 [ 241.222703][ T6374] netlink: 72 bytes leftover after parsing attributes in process `syz.2.655'. [ 241.342488][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 241.875298][ T6386] fuse: Bad value for 'group_id' [ 245.596647][ T4343] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 245.637139][ T6413] netlink: 72 bytes leftover after parsing attributes in process `syz.0.666'. [ 245.707539][ T6415] fuse: Unknown parameter 'grou00000000000000000000' [ 245.791957][ T4343] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 245.813314][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.843212][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.859911][ T4343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 246.731114][ T4343] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 246.830910][ T4343] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 246.882025][ T4343] usb 3-1: Manufacturer: syz [ 246.918703][ T4343] usb 3-1: config 0 descriptor?? [ 247.367539][ T4343] usbhid 3-1:0.0: can't add hid device: -71 [ 247.380507][ T4343] usbhid: probe of 3-1:0.0 failed with error -71 [ 247.547503][ T4343] usb 3-1: USB disconnect, device number 16 [ 249.347815][ T6442] fuse: Bad value for 'group_id' [ 249.569451][ T6448] netlink: 72 bytes leftover after parsing attributes in process `syz.4.678'. [ 251.201731][ T6461] bond1: (slave veth0_to_bond): Releasing active interface [ 252.016576][ T4318] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 252.208796][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.252390][ T4318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.353058][ T4318] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 253.256652][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.275270][ T4318] usb 5-1: config 0 descriptor?? [ 253.625079][ T4318] usbhid 5-1:0.0: can't add hid device: -71 [ 253.634626][ T4318] usbhid: probe of 5-1:0.0 failed with error -71 [ 253.657950][ T4318] usb 5-1: USB disconnect, device number 9 [ 253.712475][ T6482] fuse: Unknown parameter 'grou00000000000000000000' [ 254.477725][ T14] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 254.668500][ T6492] netlink: 72 bytes leftover after parsing attributes in process `syz.3.691'. [ 254.679815][ T14] usb 2-1: config 0 has no interfaces? [ 254.685530][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.706338][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.732506][ T14] usb 2-1: config 0 descriptor?? [ 254.835213][ T6498] tipc: Enabling of bearer rejected, failed to enable media [ 254.997340][ T14] usb 2-1: USB disconnect, device number 22 [ 255.569237][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.575663][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.699403][ T6500] vivid-000: kernel_thread() failed [ 256.970993][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 258.256660][ T14] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 258.478527][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.491010][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.504503][ T14] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 258.517177][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.534773][ T14] usb 5-1: config 0 descriptor?? [ 258.570580][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 258.761594][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 258.778114][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 258.810102][ T14] usb 5-1: USB disconnect, device number 10 [ 259.102612][ T6557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.708'. [ 259.114481][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.122870][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.236705][ T22] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 259.262887][ T6561] fuse: Unknown parameter 'group_i00000000000000000000' [ 259.269639][ T6559] gadgetfs: bound to dummy_udc driver [ 259.448446][ T22] usb 1-1: config 0 has no interfaces? [ 259.456358][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.496248][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.544272][ T22] usb 1-1: config 0 descriptor?? [ 259.586617][ T4318] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 259.984974][ T22] usb 1-1: USB disconnect, device number 14 [ 260.402483][ C0] gadgetfs: connected [ 260.415962][ T4318] gadgetfs: disconnected [ 260.634041][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 266.056575][ T4316] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 267.078510][ T4316] usb 5-1: config 0 has no interfaces? [ 267.084158][ T4316] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.128532][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.217771][ T4316] usb 5-1: config 0 descriptor?? [ 267.281650][ T6622] fuse: Unknown parameter 'group_i00000000000000000000' [ 267.429029][ T22] usb 5-1: USB disconnect, device number 11 [ 267.576835][ T4316] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 267.957579][ T4316] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 267.984401][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.008696][ T4316] usb 2-1: Product: syz [ 268.031009][ T4316] usb 2-1: Manufacturer: syz [ 268.560979][ T4316] usb 2-1: SerialNumber: syz [ 269.494100][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 269.536663][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 270.047682][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 270.065494][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 270.075601][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 270.100416][ T4316] lan78xx: probe of 2-1:1.0 failed with error -32 [ 270.141952][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 271.132712][ T4318] usb 2-1: USB disconnect, device number 24 [ 271.482994][ T6668] fuse: Bad value for 'group_id' [ 271.776582][ T4318] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 273.961139][ T4318] usb 2-1: config 0 has no interfaces? [ 273.970439][ T4318] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 273.981316][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.003503][ T4318] usb 2-1: config 0 descriptor?? [ 274.224852][ T6120] usb 2-1: USB disconnect, device number 25 [ 274.543186][ T6688] fuse: Unknown parameter 'group_i00000000000000000000' [ 274.884439][ T955] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 275.090508][ T955] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 275.104778][ T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.120325][ T955] usb 4-1: Product: syz [ 275.128540][ T955] usb 4-1: Manufacturer: syz [ 275.137879][ T955] usb 4-1: SerialNumber: syz [ 275.911048][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 276.142796][ T955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 276.169854][ T955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 276.343057][ T33] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 276.590043][ T955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 277.366597][ T955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 277.376598][ T955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 277.398019][ T955] lan78xx: probe of 4-1:1.0 failed with error -32 [ 277.708488][ T6120] usb 4-1: USB disconnect, device number 18 [ 278.046889][ T4321] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 278.257639][ T4321] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 278.304896][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.347030][ T6120] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 278.400606][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.473940][ T4321] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 278.579203][ T4321] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 278.653826][ T6120] usb 4-1: config 0 has no interfaces? [ 278.662373][ T4321] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 278.662760][ T6120] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.684542][ T6120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.802403][ T6120] usb 4-1: config 0 descriptor?? [ 278.842806][ T4321] usb 5-1: Manufacturer: syz [ 278.880024][ T4321] usb 5-1: config 0 descriptor?? [ 279.055184][ T22] usb 4-1: USB disconnect, device number 19 [ 279.169420][ T4326] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 279.303477][ T4321] usbhid 5-1:0.0: can't add hid device: -71 [ 279.362046][ T4321] usbhid: probe of 5-1:0.0 failed with error -71 [ 279.398361][ T4321] usb 5-1: USB disconnect, device number 12 [ 281.063061][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 281.109661][ T6761] netlink: 44 bytes leftover after parsing attributes in process `syz.4.779'. [ 281.314710][ T6770] fuse: Bad value for 'group_id' [ 281.392300][ T4378] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 281.860185][ T6120] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 282.156648][ T4321] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 282.193725][ T6120] usb 5-1: config 0 has no interfaces? [ 282.199553][ T6120] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.219305][ T6120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.244479][ T6120] usb 5-1: config 0 descriptor?? [ 282.266113][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'. [ 282.276049][ T6787] device syzkaller0 entered promiscuous mode [ 282.290608][ T955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.348540][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.366709][ T4321] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.395267][ T4321] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 282.412981][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.436126][ T4321] usb 2-1: config 0 descriptor?? [ 282.457293][ T6120] usb 5-1: USB disconnect, device number 13 [ 282.818586][ T4321] usbhid 2-1:0.0: can't add hid device: -71 [ 282.824641][ T4321] usbhid: probe of 2-1:0.0 failed with error -71 [ 283.065696][ T4321] usb 2-1: USB disconnect, device number 26 [ 284.634700][ T6818] sctp: failed to load transform for md5: -2 [ 285.134023][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 286.309845][ T6842] device syzkaller0 entered promiscuous mode [ 286.716634][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 286.966839][ T4320] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 287.148064][ T6856] batman_adv: batadv0: Adding interface: dummy0 [ 287.154383][ T6856] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.181693][ T4320] usb 4-1: config 0 has no interfaces? [ 287.220950][ T4320] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.274984][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.306698][ T6856] batman_adv: batadv0: Interface activated: dummy0 [ 287.345276][ T4320] usb 4-1: config 0 descriptor?? [ 287.365148][ T6856] batadv0: mtu less than device minimum [ 287.393828][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.406621][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.418978][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.431296][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.443618][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.455956][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.468326][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.480655][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.493009][ T6856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.639914][ T4322] usb 4-1: USB disconnect, device number 20 [ 288.640664][ T4320] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 288.913577][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.993952][ T4320] usb 2-1: not running at top speed; connect to a high speed hub [ 289.004199][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 289.041406][ T4320] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 289.091581][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.167716][ T4320] usb 2-1: Product: syz [ 289.189459][ T4320] usb 2-1: Manufacturer: syz [ 289.224781][ T4320] usb 2-1: SerialNumber: syz [ 289.492204][ T4320] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 289.727397][ T6900] device syzkaller0 entered promiscuous mode [ 290.913182][ T4320] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 291.116796][ T4320] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 291.408669][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 291.899311][ T22] usb 2-1: USB disconnect, device number 27 [ 294.356709][ T4320] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 294.548366][ T4320] usb 5-1: config 0 has no interfaces? [ 294.553926][ T4320] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.586711][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.623427][ T4320] usb 5-1: config 0 descriptor?? [ 294.629203][ T6940] bond8: (slave veth11): Enslaving as an active interface with an up link [ 294.710986][ T6933] bond4: (slave veth0_to_bond): Releasing active interface [ 294.753064][ T6933] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 294.850994][ T4320] usb 5-1: USB disconnect, device number 14 [ 294.961979][ T6946] device syzkaller0 entered promiscuous mode [ 297.456929][ C1] sched: RT throttling activated [ 299.965624][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 304.829340][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 304.870952][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 306.418480][ T7045] device syzkaller0 entered promiscuous mode [ 306.606589][ T4343] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 306.791603][ T4343] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 306.801352][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.810234][ T4343] usb 5-1: Product: syz [ 306.814601][ T4343] usb 5-1: Manufacturer: syz [ 306.821072][ T4343] usb 5-1: SerialNumber: syz [ 306.829514][ T4343] usb 5-1: config 0 descriptor?? [ 308.501248][ T7083] device syzkaller0 entered promiscuous mode [ 308.696709][ T4318] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 308.727085][ T4320] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 308.909265][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.930738][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.869'. [ 308.948708][ T4318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.960070][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.004868][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.020854][ T4318] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.039511][ T4320] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 309.065213][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.082456][ T4320] usb 2-1: can't read configurations, error -71 [ 309.141845][ T4318] usb 3-1: SerialNumber: syz [ 309.381648][ T4318] usb 3-1: 0:2 : does not exist [ 309.446401][ T4318] usb 3-1: USB disconnect, device number 17 [ 309.491001][ T4322] usb 5-1: USB disconnect, device number 15 [ 312.371227][ T7119] device syzkaller0 entered promiscuous mode [ 315.555384][ T7153] fuse: Bad value for 'group_id' [ 315.905258][ T7159] device syzkaller0 entered promiscuous mode [ 316.029943][ T7166] device syzkaller0 entered promiscuous mode [ 316.108434][ T7166] tipc: Started in network mode [ 316.115902][ T7166] tipc: Node identity beac4e2c66b, cluster identity 4711 [ 316.131831][ T7166] tipc: Enabled bearer , priority 0 [ 316.187404][ T7165] tipc: Resetting bearer [ 316.409968][ T7165] tipc: Disabling bearer [ 317.011572][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.018661][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.556709][ T4343] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 317.576891][ T4318] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 317.790444][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.810967][ T4343] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 317.811559][ T4318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.861104][ T4343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.869746][ T4318] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.872878][ T4343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.896332][ T4343] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 317.918656][ T4343] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 317.928025][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.942614][ T4343] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 317.951136][ T4343] usb 1-1: Manufacturer: syz [ 317.965321][ T4343] usb 1-1: config 0 descriptor?? [ 317.966591][ T4318] usb 4-1: SerialNumber: syz [ 318.021221][ T7203] fuse: Bad value for 'group_id' [ 318.222179][ T4318] usb 4-1: 0:2 : does not exist [ 318.303637][ T4318] usb 4-1: USB disconnect, device number 21 [ 318.595474][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.601135][ T4343] usbhid 1-1:0.0: can't add hid device: -71 [ 318.661798][ T4343] usbhid: probe of 1-1:0.0 failed with error -71 [ 318.670399][ T4343] usb 1-1: USB disconnect, device number 15 [ 318.750899][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 319.286006][ T7214] device syzkaller0 entered promiscuous mode [ 319.652250][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 319.901239][ T4343] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 320.319066][ T4343] usb 1-1: config 0 has no interfaces? [ 320.328146][ T4343] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.628968][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.660876][ T4343] usb 1-1: config 0 descriptor?? [ 322.480773][ T4343] usb 1-1: USB disconnect, device number 16 [ 322.602924][ T7247] fuse: Bad value for 'group_id' [ 323.784533][ T4343] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 323.842096][ T7266] device syzkaller0 entered promiscuous mode [ 324.148361][ T4343] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 324.167800][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.229599][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.297222][ T4343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 324.342401][ T4343] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 324.410754][ T4343] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 324.459584][ T4343] usb 3-1: Manufacturer: syz [ 324.538005][ T4343] usb 3-1: config 0 descriptor?? [ 325.018705][ T4343] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 325.038236][ T4343] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 325.069429][ T4343] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 325.596609][ T4343] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 326.795800][ T4317] usb 3-1: USB disconnect, device number 18 [ 326.917959][ T4343] usb 1-1: config 0 has no interfaces? [ 326.923690][ T4343] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.065481][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.214575][ T4343] usb 1-1: config 0 descriptor?? [ 327.567337][ T27] usb 1-1: USB disconnect, device number 17 [ 329.557620][ T7366] device syzkaller0 entered promiscuous mode [ 330.822709][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 331.101550][ T4317] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 331.222895][ T7384] fuse: Bad value for 'fd' [ 331.325535][ T4317] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 331.356058][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.399251][ T4317] usb 3-1: Product: syz [ 331.416181][ T4317] usb 3-1: Manufacturer: syz [ 331.421979][ T4317] usb 3-1: SerialNumber: syz [ 331.652173][ T4317] net_ratelimit: 10 callbacks suppressed [ 331.652190][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 331.698303][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 332.246544][ T4343] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 332.439948][ T4343] usb 5-1: config 0 has no interfaces? [ 332.456035][ T4343] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.493893][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.542294][ T4343] usb 5-1: config 0 descriptor?? [ 332.722621][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 332.746861][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 332.758671][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 332.769257][ T22] usb 5-1: USB disconnect, device number 16 [ 332.817754][ T4317] lan78xx: probe of 3-1:1.0 failed with error -32 [ 334.814389][ T7424] device syzkaller0 entered promiscuous mode [ 334.828769][ T4343] usb 3-1: USB disconnect, device number 19 [ 335.039360][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 336.765473][ T7450] netlink: 256 bytes leftover after parsing attributes in process `syz.4.963'. [ 336.800110][ T7450] netlink: 72 bytes leftover after parsing attributes in process `syz.4.963'. [ 336.935241][ T7454] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 337.593127][ T4321] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 337.722862][ T7463] bond2: (slave veth0_to_bond): Releasing active interface [ 337.781168][ T7463] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 337.810162][ T4321] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 337.907533][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.939086][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.972136][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 338.013041][ T4321] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 338.036301][ T4321] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 338.054752][ T4321] usb 1-1: Manufacturer: syz [ 338.090845][ T4321] usb 1-1: config 0 descriptor?? [ 338.217235][ T7475] fuse: Unknown parameter 'group_i00000000000000000000' [ 338.262299][ T4317] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 338.469938][ T4317] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 338.492760][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.505378][ T4321] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 338.521923][ T4321] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 338.535516][ T4317] usb 3-1: Product: syz [ 338.544588][ T4317] usb 3-1: Manufacturer: syz [ 338.553073][ T4317] usb 3-1: SerialNumber: syz [ 338.560333][ T4321] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 338.812633][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 338.835253][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 339.778031][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 340.011960][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 340.035686][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 340.045991][ T4317] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 340.075884][ T4317] lan78xx: probe of 3-1:1.0 failed with error -32 [ 340.817958][ T4343] usb 1-1: USB disconnect, device number 18 [ 341.050382][ T7507] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 341.113147][ T4317] usb 3-1: USB disconnect, device number 20 [ 341.309688][ T7510] bond7: (slave veth17): Enslaving as an active interface with an up link [ 341.443518][ T7511] bond5: (slave veth0_to_bond): Releasing active interface [ 341.527234][ T7511] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 342.742122][ T7529] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 342.836770][ T4343] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 343.007008][ T4343] usb 5-1: device descriptor read/64, error -71 [ 343.042646][ T7532] bond3: (slave veth7): Enslaving as an active interface with an up link [ 343.123350][ T7533] bond2: (slave veth0_to_bond): Releasing active interface [ 343.168615][ T7533] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 343.223444][ T7534] device macvlan2 entered promiscuous mode [ 343.238373][ T7534] device bond3 entered promiscuous mode [ 343.254298][ T7534] device veth7 entered promiscuous mode [ 343.260336][ T7534] device veth0_to_bond entered promiscuous mode [ 343.277033][ T4343] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 343.278080][ T7534] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 343.325983][ T7534] device bond3 left promiscuous mode [ 343.335699][ T7534] device veth7 left promiscuous mode [ 343.352223][ T7534] device veth0_to_bond left promiscuous mode [ 343.436602][ T27] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 343.444350][ T4343] usb 5-1: device descriptor read/64, error -71 [ 343.460014][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 343.567116][ T4343] usb usb5-port1: attempt power cycle [ 343.654097][ T27] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 343.679863][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.705152][ T27] usb 4-1: Product: syz [ 343.715927][ T27] usb 4-1: Manufacturer: syz [ 343.726949][ T27] usb 4-1: SerialNumber: syz [ 343.976552][ T4343] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 345.716341][ T27] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 345.759951][ T27] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 345.975174][ T4343] usb 5-1: device descriptor read/8, error -71 [ 346.746893][ T27] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 347.107537][ T27] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 347.109527][ T7563] device syzkaller0 entered promiscuous mode [ 347.118872][ T27] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 347.134545][ T27] lan78xx: probe of 4-1:1.0 failed with error -32 [ 347.163761][ T7563] tipc: Enabled bearer , priority 0 [ 347.273094][ T7561] tipc: Resetting bearer [ 347.370581][ T7561] tipc: Disabling bearer [ 348.414574][ T4343] usb 4-1: USB disconnect, device number 22 [ 349.584236][ T7591] mmap: syz.1.1002 (7591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 349.596602][ T7591] [ 349.598968][ T7591] ====================================================== [ 349.606015][ T7591] WARNING: possible circular locking dependency detected [ 349.613075][ T7591] syzkaller #0 Not tainted [ 349.617536][ T7591] ------------------------------------------------------ [ 349.624589][ T7591] syz.1.1002/7591 is trying to acquire lock: [ 349.630671][ T7591] ffff888051db8f30 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 349.641712][ T7591] [ 349.641712][ T7591] but task is already holding lock: [ 349.649117][ T7591] ffff88807c41f958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 349.659320][ T7591] [ 349.659320][ T7591] which lock already depends on the new lock. [ 349.659320][ T7591] [ 349.669760][ T7591] [ 349.669760][ T7591] the existing dependency chain (in reverse order) is: [ 349.678833][ T7591] [ 349.678833][ T7591] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 349.686440][ T7591] down_read_killable+0x4c/0x340 [ 349.692046][ T7591] mmap_read_lock_killable+0x1d/0x60 [ 349.697882][ T7591] lock_mm_and_find_vma+0x2b1/0x2f0 [ 349.703631][ T7591] do_user_addr_fault+0x2e8/0xb20 [ 349.709235][ T7591] exc_page_fault+0x60/0x100 [ 349.714415][ T7591] asm_exc_page_fault+0x22/0x30 [ 349.719908][ T7591] fault_in_readable+0xf3/0x1f0 [ 349.725374][ T7591] fault_in_iov_iter_readable+0xbf/0x2f0 [ 349.731633][ T7591] generic_perform_write+0x3f8/0x5c0 [ 349.737528][ T7591] __generic_file_write_iter+0x148/0x2a0 [ 349.743728][ T7591] generic_file_write_iter+0xab/0x2e0 [ 349.749678][ T7591] vfs_write+0x482/0x9a0 [ 349.754550][ T7591] ksys_write+0x14d/0x260 [ 349.759451][ T7591] do_syscall_64+0x4c/0xa0 [ 349.764443][ T7591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.770899][ T7591] [ 349.770899][ T7591] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 349.779640][ T7591] __lock_acquire+0x2d18/0x7c40 [ 349.785073][ T7591] lock_acquire+0x1bb/0x4a0 [ 349.790133][ T7591] down_write+0x36/0x60 [ 349.794841][ T7591] process_measurement+0x3af/0x1c40 [ 349.800602][ T7591] ima_file_mmap+0xe9/0x140 [ 349.805757][ T7591] __se_sys_remap_file_pages+0x55a/0x7b0 [ 349.811965][ T7591] do_syscall_64+0x4c/0xa0 [ 349.816957][ T7591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.823417][ T7591] [ 349.823417][ T7591] other info that might help us debug this: [ 349.823417][ T7591] [ 349.833670][ T7591] Possible unsafe locking scenario: [ 349.833670][ T7591] [ 349.841148][ T7591] CPU0 CPU1 [ 349.846559][ T7591] ---- ---- [ 349.851975][ T7591] lock(&mm->mmap_lock); [ 349.856346][ T7591] lock(&sb->s_type->i_mutex_key#13); [ 349.864368][ T7591] lock(&mm->mmap_lock); [ 349.871251][ T7591] lock(&sb->s_type->i_mutex_key#13); [ 349.876756][ T7591] [ 349.876756][ T7591] *** DEADLOCK *** [ 349.876756][ T7591] [ 349.884926][ T7591] 1 lock held by syz.1.1002/7591: [ 349.889997][ T7591] #0: ffff88807c41f958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 349.900519][ T7591] [ 349.900519][ T7591] stack backtrace: [ 349.906485][ T7591] CPU: 0 PID: 7591 Comm: syz.1.1002 Not tainted syzkaller #0 [ 349.913891][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.924008][ T7591] Call Trace: [ 349.927406][ T7591] [ 349.930426][ T7591] dump_stack_lvl+0x188/0x24e [ 349.935225][ T7591] ? load_image+0x410/0x410 [ 349.939780][ T7591] ? show_regs_print_info+0x12/0x12 [ 349.945025][ T7591] ? print_circular_bug+0x12b/0x1a0 [ 349.950292][ T7591] check_noncircular+0x296/0x330 [ 349.955272][ T7591] ? look_up_lock_class+0x75/0x140 [ 349.960417][ T7591] ? add_chain_block+0x9b0/0x9b0 [ 349.965397][ T7591] ? lockdep_lock+0xf1/0x1f0 [ 349.970029][ T7591] ? _find_first_zero_bit+0xd2/0x100 [ 349.975372][ T7591] __lock_acquire+0x2d18/0x7c40 [ 349.980269][ T7591] ? ima_match_policy+0x10d/0x21b0 [ 349.985448][ T7591] ? __lock_acquire+0x7c40/0x7c40 [ 349.990514][ T7591] ? verify_lock_unused+0x140/0x140 [ 349.995845][ T7591] ? ima_match_policy+0x10d/0x21b0 [ 350.001004][ T7591] ? ima_match_policy+0x211c/0x21b0 [ 350.006280][ T7591] lock_acquire+0x1bb/0x4a0 [ 350.010943][ T7591] ? process_measurement+0x3af/0x1c40 [ 350.016379][ T7591] ? __might_sleep+0xd0/0xd0 [ 350.021061][ T7591] ? read_lock_is_recursive+0x10/0x10 [ 350.026497][ T7591] ? ima_get_action+0x71/0xa0 [ 350.031229][ T7591] down_write+0x36/0x60 [ 350.035439][ T7591] ? process_measurement+0x3af/0x1c40 [ 350.040861][ T7591] process_measurement+0x3af/0x1c40 [ 350.046109][ T7591] ? ima_file_mmap+0x140/0x140 [ 350.050922][ T7591] ? aa_file_perm+0x112/0xf00 [ 350.055715][ T7591] ? mtree_load+0x100/0xa70 [ 350.060290][ T7591] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 350.066501][ T7591] ima_file_mmap+0xe9/0x140 [ 350.071090][ T7591] ? ima_file_free+0x3e0/0x3e0 [ 350.075902][ T7591] ? common_file_perm+0x171/0x1c0 [ 350.080978][ T7591] ? bpf_lsm_mmap_file+0x5/0x10 [ 350.085956][ T7591] ? security_mmap_file+0x11b/0x180 [ 350.091242][ T7591] __se_sys_remap_file_pages+0x55a/0x7b0 [ 350.096945][ T7591] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 350.102728][ T7591] ? lock_chain_count+0x20/0x20 [ 350.107629][ T7591] ? lockdep_hardirqs_on+0x94/0x140 [ 350.112873][ T7591] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 350.118659][ T7591] do_syscall_64+0x4c/0xa0 [ 350.123138][ T7591] ? clear_bhb_loop+0x60/0xb0 [ 350.127855][ T7591] ? clear_bhb_loop+0x60/0xb0 [ 350.132567][ T7591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.138768][ T7591] RIP: 0033:0x7fbb0b39e019 [ 350.143291][ T7591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.162983][ T7591] RSP: 002b:00007fbb0c19c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 350.171517][ T7591] RAX: ffffffffffffffda RBX: 00007fbb0b626180 RCX: 00007fbb0b39e019 [ 350.179493][ T7591] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 350.187601][ T7591] RBP: 00007fbb0b43500c R08: 0000000000000010 R09: 0000000000000000 [ 350.195586][ T7591] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 350.203646][ T7591] R13: 00007fbb0b626218 R14: 00007fbb0b626180 R15: 00007ffc9c799588 [ 350.211632][ T7591] [ 350.256570][ T27] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 350.437055][ T27] usb 3-1: device descriptor read/64, error -71 [ 350.726590][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 350.886506][ T27] usb 3-1: device descriptor read/64, error -71 [ 351.007375][ T27] usb usb3-port1: attempt power cycle [ 351.426609][ T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 351.456938][ T27] usb 3-1: device descriptor read/8, error -71 [ 351.726560][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 351.756994][ T27] usb 3-1: device descriptor read/8, error -71 [ 351.877365][ T27] usb usb3-port1: unable to enumerate USB device