last executing test programs: 10m6.971737978s ago: executing program 32 (id=3900): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 9m1.565474358s ago: executing program 33 (id=4298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x909401, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000008}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}}, 0x20000880) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 8m46.308943061s ago: executing program 34 (id=4402): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d070040040000000240012800c0001006d6163766c616e0014000280080009000000000500000700000000e0140035006d6163766c616e30"], 0x58}}, 0x8000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7m13.663190655s ago: executing program 35 (id=5016): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x200000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_setup(0x7, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m44.003857328s ago: executing program 5 (id=6012): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) listen(r0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{&(0x7f0000000340)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000001d40)=""/254, 0xfe}, {&(0x7f0000000080)}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=""/116, 0x74}, 0x467}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000580)=@pppoe, 0x80, &(0x7f0000001900)=[{&(0x7f0000001780)=""/179, 0xb3}, {&(0x7f0000001840)=""/185, 0xb9}, {&(0x7f0000000400)=""/28, 0x1c}], 0x3, &(0x7f0000001940)=""/53, 0x35}, 0x9}, {{&(0x7f0000001980)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/129, 0x81}, {&(0x7f0000001b40)=""/3, 0x3}], 0x3, &(0x7f0000002380)=""/4096, 0x1000}, 0x3ff}], 0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESHEX], 0x48) r3 = io_uring_setup(0x549c, &(0x7f0000000500)={0x0, 0x70e9, 0x40, 0x0, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000080)=[0xe758, 0xf8de], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="f57220bd8acb83e6e218c10000a88c43c226f05ea20f625eeae7079108119cf5461d8d6d9d6b56488fd491ac0df3bfb25c4778dc3e7c004aef32703a7ddda509e2b0daaa32d7a5", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000000e8ff020000060400000005000000000000000400000000000000000000002e5f00"], 0x0, 0x3b, 0x0, 0x0, 0x0, 0x42fcfa7039e6f6b8}, 0x28) ioctl$BLKRRPART(r4, 0x125f, 0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$dsp1(0xffffff9c, 0x0, 0x840, 0x0) madvise(&(0x7f0000177000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa) 4m43.060733537s ago: executing program 5 (id=6022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 4m43.060585116s ago: executing program 5 (id=6023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) (fail_nth: 1) 4m42.973515291s ago: executing program 5 (id=6025): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m42.351266904s ago: executing program 5 (id=6031): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x82042, 0x195) (fail_nth: 1) 4m41.606564612s ago: executing program 5 (id=6032): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, &(0x7f0000000080)) ioctl$TIOCGPKT(r2, 0x40045431, &(0x7f0000000000)) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x1a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/134, 0x86}], 0x1}, 0x401}], 0x1, 0x63, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x82042, 0x195) 4m41.415818731s ago: executing program 36 (id=6032): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, &(0x7f0000000080)) ioctl$TIOCGPKT(r2, 0x40045431, &(0x7f0000000000)) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x1a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/134, 0x86}], 0x1}, 0x401}], 0x1, 0x63, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x82042, 0x195) 4m22.85359409s ago: executing program 0 (id=6147): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) r1 = fsopen(&(0x7f0000000280)='hostfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1895000000000000000000000000000000000000000000004a7ccee4f9f9e7863dd5dd39a2e825e550eec07ece1f3c86d8cc4a4f52c68486ec5b8612a4d89df4a77c2ceba9ee2db9ed702443af00301cbcfc1c45a9a60f104890f2f12e6dc09e1e6d16bcededa17c403d2de7d7717f79194b5e8a456a3ab8d535c6e4c4b60e3279a60985b1e44f030f8773e3c029842ac6466bbdb2446510b4235c347bfc614f1d5746998304c46fc87ef8b8fb5319887e4532e0454dc84d2b146a6e78fdb2dff0f6b1fd2fb5e2f46f938bef554aca182b3ab337dc4961bd69830f3d5708d74ccb85c375568e72727dae7510410e6d18ebdcf6a089f3a81f93798ce27795cc588d902a9dff8308f2ba89ded08d867d79fcc1a502be79"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000140)=ANY=[], 0x13) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$security_ima(r8, &(0x7f00000002c0), &(0x7f0000000440)=ANY=[@ANYBLOB="02f31965d3db66562d84e5d6cf444a9280dad1242d19ee44d80aa5e5e4cead51529074a592ec34292fda04ad09f82361d406089ca7e8bd6a390c62e349fe10e4bf70f8c0bc"], 0x1, 0x2) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0xa) r10 = gettid() r11 = syz_open_procfs(r10, &(0x7f0000000040)='timerslack_ns\x00') ioctl$TCGETS(r11, 0x5401, &(0x7f0000000140)) write$binfmt_format(r11, &(0x7f0000000180)='0\x00', 0x2) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r9, &(0x7f0000000400)={r11, r3, 0x5}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000140)=[0x0, 0x5, 0x0, 0x5, 0x5], 0x0, 0x1}}, 0x3c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 4m22.783895521s ago: executing program 0 (id=6148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$kcm(0x11, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6e8, 0xfffffffc}]}}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r6, 0x0, r5, 0x0, 0x7, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="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", @ANYRESHEX, @ANYRES64=r3], 0x0) 4m21.893794768s ago: executing program 0 (id=6159): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x200440c4) 4m21.743237783s ago: executing program 0 (id=6160): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 4m21.33260726s ago: executing program 0 (id=6161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000080), 0x101c00, 0x0) lseek(r1, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r4 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000000)={@loopback, @local}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005400000228bd7000fedbdf25070700009f59b095fa614336d7f6cfd272267266ef2c668e31c578acd292bd752e25dde84fed2e9d62c647f07049e908b4cacfd8dc36fd9664bfe8ae21cb21c833d33c7ef2566ad2dcfbbd9843262deb30007509f2f978c6de8d354a997ca3d98f2470e1c804ec6480cbd2a903eaf9ce5d38bb349f136614e49001cbbc02766e1279d74c85a2c2a959dc1b", @ANYRES32=r3], 0x18}, 0x1, 0x0, 0x0, 0x2404c804}, 0x800) truncate(&(0x7f0000000000)='./file0\x00', 0x96f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x200000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8001, 0x11e41e78, 0x20000000, 0x40000000, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x44080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000003600)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)="c8c2cd6601bf0942907deb6195d2aef179352c0a5c2ec780bc93905fdd4633e61c90b4220c6dedd926b724145a0601a574ea842f8ec876b6e09e292d1014f3e25570b23778a56eb4fde76d4a030ae9c2a3936238282b576e63668485086a1a5541e783318bc2a2d176cd0f3d3526ef4b1886608c4e783e55fa9b6406f83e4afa565eee1b7db82a1345f9697bc8acc45f4b451b0cd3a5586e482429c54aa9e975e1086bf1c2ade9984438b4f13c60db4559d85e6764b307b16a40b68f644f536034", 0xc1}, {&(0x7f0000000380)="b1d1bb3981a2b415c88710a90c77a7de4fa14b11e38a3ff3b8f4d84386fb0ef5e52da3bb54c9558649a12b02", 0x2c}, {&(0x7f00000006c0)="cc52b252d513a22e041a18b5b20d20e34e732643f58d74edb1cc7aa57deabd622c5ec77c311813d19dd2e984f6459b9ba2eba71e0d8931d6b31d5079b407e6cfd573d6bd712c3c04c46e0a9cfc06b8215b255d9be9dc5305195976a324a8ce1c84c9361a9cdadbcfbd3731a84b89eb83d38111330b39323f61bc06007f152995a5fcad8ad5a4b24b0193a0f8cb46d51fa3b37c636f556fa45700710529878c", 0x9f}, {&(0x7f0000000780)="2191b938b6db327fb510452b353eea690c608d0d5c8b3ea9dbabb431e37fda033c85351ee7fb5d4a197b7eb5fa39f85a984c89033ceab965fefb820b6f0d83a95fb8455dff286941d54d2841e6bf44274200e1a62833ad91b114ca6e5d605ef76b14235c50d002ae765b80aa1f5e6401145b453fb09e77a36cf3cfe6d6e7f1da11927194bbcd62e6d0f5cb17de4128496c3ca9612099b9", 0x97}], 0x4, &(0x7f00000009c0)=[@cred={{0x18, 0x1, 0x2, {r5}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, r2, r0, r6, r6]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r6, 0xffffffffffffffff, r7]}}, @rights={{0x14, 0x1, 0x1, [r7, r1]}}, @cred={{0x18, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff, r0]}}], 0xa4, 0x4081}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="d058d167b66534cc0fceac67456d870470e0997ffa862c37db5911e69d6ee1618bb6109af3165b6581c731915fe007433802fa9b4a6312647e1c780b72fc6293efeb07", 0x43}], 0x1, &(0x7f0000000b80)=[@rights={{0x24, 0x1, 0x1, [r6, r4, 0xffffffffffffffff, r7, r0, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r5}}}, @cred={{0x18, 0x1, 0x2, {r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r2, r4, r2, 0xffffffffffffffff]}}], 0x78, 0x4}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000c00)="06dc54566c693d42fe192f21ec421ea494f27d53213d8ae6d6826690734d7af4281cc05394a7d811f26caefcce674a5e701ba963bf7474735b7a9ca284b4d7dd65482613d49ada7f2148a3b313409bdd63b1ddcd67af99381f13d9efdcb26171", 0x60}, {&(0x7f0000000c80)="5325f047e90da596bcb477a02e6153319426b754419cc2257f632f04044cf077d764fa30237931f37a5a07b187162395b5cf4bb07dee042273ec2639ce97f74045af7feb5491cd63be589f8d44fefa6f48bfcee22cd8b47d57ae3a5d0ba9e7e470543eb0e82a71789613054779b8b258", 0x70}, {&(0x7f0000002e40)="170394a8e565d4ec8d103a3e2e01640c9686e397d91350b7a174272c41f9f3c9d842fff70d7a3b003a5fc014d0", 0x2d}, {&(0x7f0000002e80)="523889192ab4ec2a3d9d96801bdba1fcb491cf2d73877e405029524a6537807b4d9f8c1f97b05c9d7a6c06076917cc042971673917e33e2f0dd4819bcf0432827b", 0x41}, {&(0x7f0000002f00)="be6cfa561b8e42991536e180021feca94c1394acbf96638fe8b827789637a7017564a5ec4c548839bdf21a5682a7c914e9cfbeaf12eb9174b8afb09fc2c73dfe56146a6a91ff40be3a951cbaec5016e9b3f01f08ed653c0a03a746169484941551d262ecfb40ff52d226ca5d3ddc20cf21a48560cd9a15849fde85ca9426b3a0b28f92507479e2269cb3771c0c62f82e3412903f949b03e8070e54b5d91c9e6c5edbf0ef3d7326972338260894b8450332f8077b27e06b551b5b195306ca6fd5cc71e6b9df79c65c9cc4fea8ea4c3d9b", 0xd0}, {&(0x7f0000000880)="8a2bdb5b842fc23737e6dfeb1677b53a56200b", 0x13}, {&(0x7f0000003040)="7a66328954eec69074450a72952dd0e8af341aa412320690c4282352d2e248f6ea981d4ecf0cdc96394e4f74dfb06a8fa64be32e9ab6226a96f0819f1fc301391cca3855b3515489e1e20af6b25f6db90d92e8b220e07571488d5299f26874147811b836080d83063bd777", 0x6b}, {&(0x7f00000030c0)="1e41d99d", 0x4}], 0x8, &(0x7f0000003140), 0x0, 0x4000000}}, {{&(0x7f0000003180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003200)="a6f71712464b82b78bd61b268e2fed4718c695da0b31e9d91f15be9755c0695afd00ada83f8594eca88f1941c6abbf989dd7590533c820c0e04b022abdd56a67dcd2b7125d2685a8c28b9795c026dbda9eda29fc80de7eed2c7bab43c58861abccf003af9115beb6314b175104e48e", 0x6f}, {&(0x7f0000003280)="f08c", 0x2}], 0x2, &(0x7f0000003340)=[@cred={{0x18, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54, 0x20000001}}, {{&(0x7f00000033c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003440)="6658a1492f3fed8a804f96957fa4ef1abb9af8556f48dcc89807a602b5c240e3eded8ac8de71934237fe6bbc283c8da730f5ef7ef5a74d48eb652fd5aa7ab923a5be22337e317cbfcb20bca8aefd5e440c0f118944f3c8c18aacec07cc95c2fdb8c9a884cdf32cd1295d8a8cc028f79db2aac0601499bacb00f926f2af4e2dd76ff3f584b60c744b8dfd03f5288d2b98097b1355d4bccc64c23a4894d5d348e6754a401c0e94e02c9d686c6c18e3f88af8b213399bc16b6301b8341caba5fdb22b390b5aba4648ab1e", 0xc9}, {&(0x7f0000003540)="c96d26b5e9ab0a2dcf3ae37436e8063b2081de3dd352345143821d22e4c545da2bc209c8b1425bd00448f685cbfa47892ea0a8fcb3b50ece887123bd5294b1185c7a1d1bef7976e222d11ab6cdc846defd52b22011f5a8910e0c0f0d837e57bd1b8d2e97c33ca22237e39f190695d8042cce33a4", 0x74}], 0x2, 0x0, 0x0, 0x4000000}}], 0x5, 0xe2) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r8, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r8, 0x80089203, 0x0) 4m21.183506124s ago: executing program 0 (id=6162): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) 4m21.131031837s ago: executing program 37 (id=6162): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) 4m0.22047403s ago: executing program 8 (id=6294): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = accept4$inet(r0, 0x0, &(0x7f0000000240), 0x800) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000000300000050000000080576657468305f746f5f6873720000000076657468315f766c616e00000000000069705f7674693000000000000000000070696d36726567300000000000000000000000000000ff00000000ffaaaaaaaaaa3affff8000ff006e0000006e000000b20000004552524f5200000000000000000000000000000000000000000000000000000020000000755d5da2b8f9058f58effc00914f4c85386f28782b8d53fc45bb3a634453000000000000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff00"/322]}, 0x192) r2 = socket(0x10, 0x3, 0x0) getrlimit(0x6, &(0x7f0000000200)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x1}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000002, 0x0, 0xffffffffffffffff}]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4m0.089321098s ago: executing program 8 (id=6297): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4c8800, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4) write$cgroup_int(r2, &(0x7f0000000200)=0x2, 0x12) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x8c080, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x9, 0xc, 0x1f4, &(0x7f0000000b00)="03acbc5b18a6a8b735130e3c4f7681f1d2b0407be354d1f62a7f0a63cbdbe71fd6a03c0e456aefc7cd74ecbe9a6e67a590d333c0a297a01a02c3e74bf953624df46ba09c1ee7f3a994fe61aa913b2aeac354975fc1d0815038ab15d815f0c33700c0f676ce148af5682aaaa355d0fb5d79675888f8c956d2a490c5beb4ec084cddad48328488bab281b54c9f5c0ce8edaa6128c68ef4972829bc742b8cabd7a7ae786c0c2208254a3e7e7fc621f812a90f8901c8e5256f146a887858c14faa123047ce783cc5be01030672f9ad7a9f47d559d57e8190b3e94a9a74ffd5243e0f04e19513cfa1d32a9ba8c9c011641c013be35fff4128409469fbd4aa61addfd5d5ed64178c856712b6cd8d0bd79313fb66e9ad3181e63c26ed7275397d45fc263724d3797d7f9e0c0d6f5969f0a49dc073d94335c56991893e008b86a8fbcacd856c0adaf0729efaba506a6ac81b6fdbd14953434676fb93162d474d5293dc9164b5ea71617a6c0bae821f9ae780f5143ff6d02786598b28b80c46fcc7b916c74d81c55c0c7f48d217c7988a3155fe1ae820e0bc445cafca11fb95b6cf46bff9a6cf94f56992e9ef6c8e3e180a27d9e1a6e345e616867ea5450ce90243e7a65b4936d9b0e1e09546843629549ff0971613d9a82d0d86337ffb5363230a452b881a92de5ee1737e670adf248f058b6b705c6d9cd50365174b4d07c25c096349b355be97665ddfab0f1842857d7f61d8bf9dc703b1aa4fa9c2b6a901cca7090ce0ddc2c14dd0063ac828b223eb9fed309c19ea7cfa23cf302da90f49838e04d5e61ca5dfc54abac1aaff1ae20b8a65d9103556668123fc3f4d6b89ce04984ea572888ea56ceaee2d31a7246996c3d384ae41a531cdc53271968ab9e6ea75cea0cbb57b0415917621589da4cae06b2e5fa69b814168f4ad994b95ff1392dd94a3f38689bdffa4380544c872a527f2f931834d3d2e56c6eae2229b81665308cd5edaa29c5913faa17be7d0f0b03fd33e4520c2a2bfd17937b33ad74af5dd41a73c74c35b0c2cb6c739b43547f3bf2ff232d5e943586d53789ba7237e0ab13add3319e9c87abfdd28b055c9cdcde4541c0d593d57867d8ccdf41597919a47cc297309066b4040776851acc928a2ae474651e23ab24142dd84ef84639cb1f810ddfd357eaffd4b9bf6faccd572cf5ae8ab0611ca7ca420ed8a4f2aa5d4c543b96a3baefe9a6df2068a0ff61bf995a698ab490b5b36bf275326151ba31c5ee7dcc0fabcd3151eaf4c643e7e06e323d68f128f13a5f8b1ca7f23ff5f59282a72dc35fbe413a65c32da92a8539c0069dbae4c6f743ddacc03759fcc1b7110bff8bace8a963937af90d132f591a4ba1b4dd4fde29dd073c4e06d85c933f316ec78f8e90693a188ffcc51c209ca026fd4263240c22595a418508965924aafcbfec206efebd8"}) setrlimit(0x0, &(0x7f0000000180)={0x8}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m0.043203488s ago: executing program 8 (id=6299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0xc00000, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x9, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0xdd, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) (fail_nth: 1) 3m59.823014761s ago: executing program 8 (id=6301): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m59.807331122s ago: executing program 7 (id=6302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="d4000000100c0000140035007465616d5f736c6176655f310000000014001680100001800c00050000ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x40e4c}, 0x24044840) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000380007012cbd7000fedbdf25157c00000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioperm(0x0, 0x2, 0x7e) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x14, 0x0, @thr={&(0x7f0000000440)="0cc1d1b1d4583cf5af78b704b47cd2cec59afa7174719b2d6e7c0aa73515327fe6c6e4d239ee96271120621b3e9c59e5a7d005b2049ca2bafbf62e68000201c63683402c850430101f8e", &(0x7f00000004c0)="89cb7b226443217b537ced083597f2b27391617247f67f7a7a0de8241f2cf11341ec43bdbdf7ebe260b7a2671153ae96d63e9601615f427b00502b0c8a70bf36a7efe6560774ebd55c1194d53855b545a3fc04c508baa035a448115ec51d51fb8ba704b1965b3e785f1ea4db0c515f110e6e51d2b70b8df28a451c6629622dceb08909bc4eefa85def29625e3ff4ffb733e1a87387081855534596abf1914fbd4a05662faf5b4cfdcaffbd6bc1521d07f49847c7afc05a05c835dd94d1f06c1262659e5f65e44e6ec2c0d974e9a3ff44767a9412271a5c2e4b0c065d24cbca732f8f2f2f37bad8a795f911377ab9162b28ce782ec6cb9e"}}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000400)={{r6, r7+10000000}, {0x0, 0x3938700}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x3) acct(&(0x7f0000000140)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 3m58.80528453s ago: executing program 7 (id=6307): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4c8800, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4) write$cgroup_int(r2, &(0x7f0000000200)=0x2, 0x12) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x8c080, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x9, 0xc, 0x1f4, &(0x7f0000000b00)="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"}) setrlimit(0x0, &(0x7f0000000180)={0x8}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m58.804976019s ago: executing program 7 (id=6308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000"], 0x6c}}, 0x0) 3m58.593597255s ago: executing program 8 (id=6310): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r1, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0406030c", @ANYBLOB="256ac4"], 0x7) 3m58.541347448s ago: executing program 7 (id=6311): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m58.376845641s ago: executing program 7 (id=6314): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r4) socket(0x5, 0x2, 0x327f0000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x8000, 0x0) 3m58.133563077s ago: executing program 8 (id=6318): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) syz_clone3(&(0x7f0000000580)={0x200010080, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000280), {0x17}, &(0x7f00000002c0)=""/207, 0xcf, &(0x7f0000000440)=""/213, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) ptrace(0x11, r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r3, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m57.944000613s ago: executing program 38 (id=6318): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) syz_clone3(&(0x7f0000000580)={0x200010080, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000280), {0x17}, &(0x7f00000002c0)=""/207, 0xcf, &(0x7f0000000440)=""/213, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) ptrace(0x11, r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r3, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m57.902458285s ago: executing program 7 (id=6321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x2, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb175, 0x2000, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400)) (async) r3 = syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb175, 0x2000, 0x3, 0xce}, &(0x7f0000000100)=0x0, &(0x7f0000000400)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x26) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r6, 0x4100}], 0x1, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000140)=""/191, 0xbf, 0xffffffff, 0x0) (async) mq_timedreceive(r6, &(0x7f0000000140)=""/191, 0xbf, 0xffffffff, 0x0) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000000)={{r3}, {@void, @max}}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, 0x0, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, 0x0, 0x0, 0x4) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) 3m57.789927286s ago: executing program 39 (id=6321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x2, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb175, 0x2000, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400)) (async) r3 = syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb175, 0x2000, 0x3, 0xce}, &(0x7f0000000100)=0x0, &(0x7f0000000400)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x26) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r6, 0x4100}], 0x1, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000140)=""/191, 0xbf, 0xffffffff, 0x0) (async) mq_timedreceive(r6, &(0x7f0000000140)=""/191, 0xbf, 0xffffffff, 0x0) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000000)={{r3}, {@void, @max}}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, 0x0, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, 0x0, 0x0, 0x4) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) 3m41.216607316s ago: executing program 4 (id=6342): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc", @ANYRES8], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43) 3m39.942202735s ago: executing program 4 (id=6346): open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x1, &(0x7f0000000180)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32, @ANYRESHEX=r3, @ANYBLOB="86b0ccd052b46bbcf580ca3397ed23a8caed3f96e4a59c213827e2f43252f02b7885fce352b6b0369e3c7b3bcd7a00f713ab1526276f0afc9528ca3c099f8e3a3d13fa810abef9dd9947f3a1e403df693db5f44e06967ed0c2c2122c165a62a37ebb31ce4f47cb03d0"], 0x48) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000000)=0x31) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4211, r5, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 3m38.343781446s ago: executing program 4 (id=6350): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x0, 0x40}) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 3m38.26119937s ago: executing program 4 (id=6351): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m37.837247118s ago: executing program 4 (id=6354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x1249, 0x40000) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) sendto$inet(r0, &(0x7f0000000040)="9879ffa09bed9e22a51e36bbf10829f06cd1fbbcb3d3845f9ab5318c0860f2e177f5c64adc199457683f7d56c047b241269ea29cf3c9905936bf2c3fae01cf", 0xfffffdfb, 0x201, 0x0, 0x0) ppoll(&(0x7f0000000540)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) 3m37.234702167s ago: executing program 4 (id=6360): unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r3 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0xd00d, 0x0, 0xffffffff, 0x25e}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 3m37.047433435s ago: executing program 40 (id=6360): unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r3 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0xd00d, 0x0, 0xffffffff, 0x25e}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 21.821253579s ago: executing program 2 (id=9064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @mss={0x2, 0x40}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @timestamp], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) recvmsg$unix(r1, 0x0, 0x10140) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 21.752410848s ago: executing program 2 (id=9066): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 21.742047231s ago: executing program 2 (id=9067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x9, 0x4, 0xfffff790, 0x8, 0x1}}]}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 21.565523808s ago: executing program 2 (id=9068): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 21.565256758s ago: executing program 2 (id=9069): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r1], &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[r2, r2], &(0x7f0000000180), 0x0, 0xff}) 21.21163203s ago: executing program 2 (id=9079): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 21.164046669s ago: executing program 41 (id=9079): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 2.041564134s ago: executing program 1 (id=9248): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/179, 0xb3}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xa) 1.911208968s ago: executing program 1 (id=9249): fanotify_mark(0xffffffffffffffff, 0x455, 0x40000008, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4) mount$afs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[@ANYBLOB="981300002c0007012bbd7000ffdbdf25067c"], 0x1398}}, 0x20008014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 1.290456394s ago: executing program 9 (id=9259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1.181601966s ago: executing program 9 (id=9260): open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x220302, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.149490369s ago: executing program 9 (id=9261): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) 1.021360212s ago: executing program 1 (id=9262): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, 0x0) 1.017731554s ago: executing program 1 (id=9263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x168, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x154, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xbc, 0x3, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x168}}, 0x0) 972.973213ms ago: executing program 9 (id=9264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r3, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) 971.26241ms ago: executing program 1 (id=9265): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0xc222, 0x5, 0xfffffff8}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 810.339261ms ago: executing program 1 (id=9266): socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x11, 0x200, &(0x7f0000000d80)="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"}) 610.61601ms ago: executing program 3 (id=9268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) 541.045794ms ago: executing program 3 (id=9269): open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x220302, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 540.658864ms ago: executing program 3 (id=9271): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r0, &(0x7f0000000100)=""/83, 0x53, 0x100) 470.747461ms ago: executing program 3 (id=9272): close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x25b3, &(0x7f0000000480)={0x0, 0x8a73, 0x80, 0x2, 0x376}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x4, 0x1}) io_uring_enter(r2, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 470.623816ms ago: executing program 3 (id=9273): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) 401.094923ms ago: executing program 6 (id=9274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x168, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x154, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xbc, 0x3, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x168}}, 0x0) 400.707464ms ago: executing program 6 (id=9275): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0xc222, 0x5, 0xfffffff8}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 305.825694ms ago: executing program 3 (id=9276): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 248.807801ms ago: executing program 6 (id=9277): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={0x0, &(0x7f0000000280), 0x0, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000180), 0x0, 0xff}) 201.093768ms ago: executing program 6 (id=9278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) 200.593837ms ago: executing program 6 (id=9279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040)="c4", 0x1, 0x40850, 0x0, 0x0) 111.180256ms ago: executing program 6 (id=9280): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r2 = syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0xd070, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 277.757µs ago: executing program 9 (id=9281): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r0, &(0x7f0000000100)=""/83, 0x53, 0x100) 0s ago: executing program 9 (id=9282): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_emit_vhci(0x0, 0x7) kernel console output (not intermixed with test programs): xp 2 for type 15 [ 1550.553590][ T794] overlayfs: failed to resolve './file1': -2 [ 1550.586330][ T796] binder: 795:796 unknown command 0 [ 1550.588407][ T796] binder: 795:796 ioctl c0306201 80000080 returned -22 [ 1550.679787][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.695216][ T811] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1550.926567][ T827] binder: 826:827 unknown command 0 [ 1550.930937][ T827] binder: 826:827 ioctl c0306201 80000080 returned -22 [ 1551.087636][T12765] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1551.237568][T12765] usb 7-1: Using ep0 maxpacket: 8 [ 1551.258177][T12765] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.261399][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1551.264855][T12765] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1551.269745][T12765] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.273527][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1551.277081][T12765] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1551.291112][T12765] usb 7-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.299141][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1551.303111][T12765] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1551.335824][T12765] usb 7-1: string descriptor 0 read error: -22 [ 1551.337928][T12765] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1551.340737][T12765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.348723][T12765] adutux 7-1:168.0: interrupt endpoints not found [ 1551.551938][T12765] usb 7-1: USB disconnect, device number 117 [ 1551.990918][ T819] tipc: Started in network mode [ 1551.992536][ T819] tipc: Node identity 4, cluster identity 4711 [ 1551.994477][ T819] tipc: Node number set to 4 [ 1552.032772][ T834] __nla_validate_parse: 1 callbacks suppressed [ 1552.032785][ T834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7925'. [ 1552.073216][ T836] overlayfs: failed to resolve './file1': -2 [ 1552.083618][ T841] fuse: Unknown parameter 'grou00000000000000000000' [ 1552.129392][ T849] binder: 848:849 unknown command 0 [ 1552.131180][ T849] binder: 848:849 ioctl c0306201 80000080 returned -22 [ 1552.181842][ T858] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7937'. [ 1552.220642][ T864] fuse: Unknown parameter 'grou00000000000000000000' [ 1552.319281][ T868] overlayfs: failed to resolve './file1': -2 [ 1552.417541][T14410] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1552.567497][T14410] usb 7-1: Using ep0 maxpacket: 8 [ 1552.570485][T14410] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1552.574129][T14410] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1552.577916][T14410] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1552.583132][T14410] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1552.586526][T14410] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1552.590362][T14410] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1552.605401][T14410] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1552.608975][T14410] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1552.612659][T14410] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1552.619417][T14410] usb 7-1: string descriptor 0 read error: -22 [ 1552.621997][T14410] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1552.625145][T14410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.632487][T14410] adutux 7-1:168.0: interrupt endpoints not found [ 1552.837979][T28274] usb 7-1: USB disconnect, device number 118 [ 1553.688032][ T878] fuse: Unknown parameter 'grou00000000000000000000' [ 1553.690588][ T880] binder: 879:880 unknown command 0 [ 1553.692288][ T880] binder: 879:880 ioctl c0306201 80000080 returned -22 [ 1553.701783][ T882] tipc: Started in network mode [ 1553.703890][ T882] tipc: Node identity 4, cluster identity 4711 [ 1553.706349][ T882] tipc: Node number set to 4 [ 1553.732577][ T886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7952'. [ 1553.767348][ T889] No control pipe specified [ 1553.776568][ T891] overlayfs: failed to resolve './file1': -2 [ 1553.836133][ T900] fuse: Unknown parameter 'group_i00000000000000000000' [ 1553.869831][ T905] binder: 903:905 unknown command 0 [ 1553.871529][ T905] binder: 903:905 ioctl c0306201 80000080 returned -22 [ 1553.897868][ T908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7963'. [ 1553.928054][ T912] No control pipe specified [ 1553.957293][ T914] overlayfs: failed to resolve './file1': -2 [ 1554.057576][T28274] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1554.135747][ T923] fuse: Unknown parameter 'group_i00000000000000000000' [ 1554.190751][ T927] binder: 926:927 unknown command 0 [ 1554.192459][ T927] binder: 926:927 ioctl c0306201 80000080 returned -22 [ 1554.217622][T28274] usb 6-1: Using ep0 maxpacket: 8 [ 1554.220279][T28274] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1554.222799][ T929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7973'. [ 1554.223236][T28274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.231317][T28274] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1554.238544][T28274] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1554.247515][T28274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.251900][T28274] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1554.258850][T28274] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1554.262977][T28274] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.267371][T28274] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1554.269099][ T931] No control pipe specified [ 1554.275453][T28274] usb 6-1: string descriptor 0 read error: -22 [ 1554.277658][T28274] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1554.281224][T28274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.288118][T28274] adutux 6-1:168.0: interrupt endpoints not found [ 1554.345749][ T937] overlayfs: failed to resolve './file1': -2 [ 1554.487258][ T942] fuse: Unknown parameter 'group_i00000000000000000000' [ 1554.491847][T17306] usb 6-1: USB disconnect, device number 15 [ 1554.540096][ T951] binder: 948:951 ioctl 4018620d 0 returned -22 [ 1554.544003][ T951] binder: 948:951 unknown command 0 [ 1554.546275][ T951] binder: 948:951 ioctl c0306201 80000080 returned -22 [ 1554.587166][ T960] overlayfs: failed to resolve './file0': -2 [ 1554.747638][ T979] fuse: Unknown parameter 'group_id00000000000000000000' [ 1554.779940][ T985] binder: 984:985 ioctl 4018620d 0 returned -22 [ 1554.782553][ T985] binder: 984:985 unknown command 0 [ 1554.784254][ T985] binder: 984:985 ioctl c0306201 80000080 returned -22 [ 1554.804805][ T990] overlayfs: failed to resolve './file0': -2 [ 1554.971182][ T1014] fuse: Unknown parameter 'group_id00000000000000000000' [ 1555.002790][ T1017] binder: 1015:1017 ioctl 4018620d 0 returned -22 [ 1555.005482][ T1017] binder: 1015:1017 unknown command 0 [ 1555.007309][ T1017] binder: 1015:1017 ioctl c0306201 80000080 returned -22 [ 1555.038993][ T1022] overlayfs: failed to resolve './file0': -2 [ 1555.149240][ T1040] fuse: Unknown parameter 'group_id00000000000000000000' [ 1555.176465][ T1044] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.181629][ T1044] binder: 1042:1044 ioctl 4018620d 80000040 returned -16 [ 1555.387524][T16317] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 1555.398175][ T1066] fuse: Bad value for 'user_id' [ 1555.400307][ T1066] fuse: Bad value for 'user_id' [ 1555.405781][ T1068] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.408611][ T1068] binder: 1067:1068 ioctl 4018620d 80000040 returned -16 [ 1555.557678][T16317] usb 8-1: Using ep0 maxpacket: 8 [ 1555.569551][T16317] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1555.573394][T16317] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1555.577289][T16317] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1555.583945][T16317] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1555.587308][T16317] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1555.591296][T16317] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1555.596237][T16317] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1555.600415][T16317] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1555.603922][T16317] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1555.610556][T16317] usb 8-1: string descriptor 0 read error: -22 [ 1555.612646][T16317] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1555.615885][T16317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.622585][T16317] adutux 8-1:168.0: interrupt endpoints not found [ 1555.662994][ T1103] fuse: Bad value for 'user_id' [ 1555.664571][ T1103] fuse: Bad value for 'user_id' [ 1555.683218][ T1105] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.685586][ T1105] binder: 1104:1105 ioctl 4018620d 80000040 returned -16 [ 1555.837986][T12765] usb 8-1: USB disconnect, device number 119 [ 1555.850908][ T1143] fuse: Bad value for 'user_id' [ 1555.852930][ T1143] fuse: Bad value for 'user_id' [ 1555.886012][ T1146] binder: 1145:1146 ioctl c0306201 0 returned -14 [ 1555.962426][ T1153] No control pipe specified [ 1556.092437][ T1169] fuse: Bad value for 'fd' [ 1556.217085][ T1183] binder: 1182:1183 ioctl c0306201 0 returned -14 [ 1556.234725][ T1185] No control pipe specified [ 1556.330158][ T1197] fuse: Bad value for 'fd' [ 1556.414301][ T1208] binder: 1207:1208 ioctl c0306201 0 returned -14 [ 1556.452784][ T1212] No control pipe specified [ 1556.584443][ T1231] fuse: Bad value for 'fd' [ 1556.625204][ T1235] autofs: Bad value for 'fd' [ 1556.787617][T29425] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1556.960770][T29425] usb 6-1: Using ep0 maxpacket: 8 [ 1556.963838][T29425] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1556.966289][T29425] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1556.970114][T29425] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1556.975053][T29425] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1556.977703][T29425] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1556.982362][T29425] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1556.989127][T29425] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1556.992337][T29425] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1556.997043][T29425] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1557.019731][T29425] usb 6-1: string descriptor 0 read error: -22 [ 1557.022491][T29425] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1557.027390][T29425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.036534][T29425] adutux 6-1:168.0: interrupt endpoints not found [ 1557.239128][T14410] usb 6-1: USB disconnect, device number 16 [ 1557.776679][ T1260] fuse: Bad value for 'fd' [ 1558.042118][ T1266] autofs: Bad value for 'fd' [ 1558.182805][ T1281] fuse: Bad value for 'fd' [ 1558.232416][ T1287] autofs: Bad value for 'fd' [ 1558.397504][T14410] usb 14-1: new high-speed USB device number 41 using dummy_hcd [ 1558.547485][T14410] usb 14-1: Using ep0 maxpacket: 8 [ 1558.550374][T14410] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1558.552913][T14410] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1558.556408][T14410] usb 14-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1558.561607][T14410] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1558.563990][T14410] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1558.567647][T14410] usb 14-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1558.572392][T14410] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1558.574902][T14410] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1558.578499][T14410] usb 14-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1558.584717][T14410] usb 14-1: string descriptor 0 read error: -22 [ 1558.586764][T14410] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1558.589780][T14410] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.595402][T14410] adutux 14-1:168.0: interrupt endpoints not found [ 1558.669428][ T1309] fuse: Bad value for 'fd' [ 1558.799362][T12765] usb 14-1: USB disconnect, device number 41 [ 1559.347543][ T1316] autofs: Unknown parameter '0x0000000000000000' [ 1559.701583][ T1322] overlayfs: missing 'lowerdir' [ 1559.779675][ T1331] fuse: Invalid rootmode [ 1560.027520][T14410] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 1560.177563][T14410] usb 8-1: Using ep0 maxpacket: 8 [ 1560.180667][T14410] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1560.183060][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1560.186628][T14410] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1560.192341][T14410] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1560.194734][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1560.199274][T14410] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1560.204484][T14410] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1560.206946][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1560.211321][T14410] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1560.218607][T14410] usb 8-1: string descriptor 0 read error: -22 [ 1560.220673][T14410] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1560.223578][T14410] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.231891][T14410] adutux 8-1:168.0: interrupt endpoints not found [ 1560.434274][T12765] usb 8-1: USB disconnect, device number 120 [ 1560.592996][T24421] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 1560.877556][T14410] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1561.051350][T14410] usb 7-1: Using ep0 maxpacket: 16 [ 1561.059088][T14410] usb 7-1: config 0 has an invalid interface number: 248 but max is 0 [ 1561.061735][T14410] usb 7-1: config 0 has no interface number 0 [ 1561.065234][T14410] usb 7-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.e2 [ 1561.068207][T14410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.070866][T14410] usb 7-1: Product: syz [ 1561.072259][T14410] usb 7-1: Manufacturer: syz [ 1561.073732][T14410] usb 7-1: SerialNumber: syz [ 1561.076803][T14410] usb 7-1: config 0 descriptor?? [ 1561.287843][T14410] usb 7-1: Could not find all expected endpoints [ 1561.291594][T14410] usb 7-1: USB disconnect, device number 119 [ 1561.872767][ T1373] fuse: Invalid rootmode [ 1561.935814][ T1379] autofs: Unknown parameter '0x0000000000000000' [ 1562.208520][T12765] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1562.209937][ T1388] overlayfs: missing 'lowerdir' [ 1562.285634][ T1396] fuse: Invalid rootmode [ 1562.303233][ T1398] binder: 1397:1398 unknown command 0 [ 1562.305308][ T1398] binder: 1397:1398 ioctl c0306201 80000080 returned -22 [ 1562.340857][ T1402] autofs: Unknown parameter '0x0000000000000000' [ 1562.357559][T12765] usb 7-1: Using ep0 maxpacket: 8 [ 1562.368595][T12765] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1562.370872][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1562.374216][T12765] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1562.377854][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1562.381582][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1562.385426][T12765] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1562.388063][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1562.391375][T12765] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1562.394924][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1562.398949][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1562.402595][T12765] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1562.405039][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1562.408737][T12765] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1562.414252][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1562.418146][T12765] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1562.422746][T12765] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1562.425515][T12765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.428895][T12765] usb 7-1: Product: syz [ 1562.430211][T12765] usb 7-1: Manufacturer: syz [ 1562.431669][T12765] usb 7-1: SerialNumber: syz [ 1562.650821][T12765] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1562.655932][T12765] usb 7-1: USB disconnect, device number 120 [ 1562.770144][T14360] Bluetooth: hci3: command 0x0419 tx timeout [ 1562.897883][ T1425] overlayfs: missing 'lowerdir' [ 1562.957680][ T1429] fuse: Bad value for 'rootmode' [ 1562.991331][ T1431] binder: 1430:1431 unknown command 0 [ 1562.993086][ T1431] binder: 1430:1431 ioctl c0306201 80000080 returned -22 [ 1563.101195][ T1435] autofs: Unknown parameter '0x0000000000000000' [ 1563.257079][ T1446] overlayfs: missing 'lowerdir' [ 1563.296562][ T1450] fuse: Bad value for 'rootmode' [ 1563.325527][ T1454] binder: 1453:1454 unknown command 0 [ 1563.327336][ T1454] binder: 1453:1454 ioctl c0306201 80000080 returned -22 [ 1563.411130][ T1458] autofs: Unknown parameter '0x0000000000000000' [ 1563.587596][T28274] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 1563.618472][ T1470] overlayfs: missing 'lowerdir' [ 1563.660813][ T1472] fuse: Bad value for 'rootmode' [ 1563.688709][ T1474] binder: 1473:1474 unknown command 0 [ 1563.690711][ T1474] binder: 1473:1474 ioctl c0306201 80000080 returned -22 [ 1563.694129][ T1474] binder: 1473:1474 ioctl 4018620d 0 returned -22 [ 1563.748466][T28274] usb 8-1: Using ep0 maxpacket: 8 [ 1563.761509][T28274] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1563.763764][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1563.767337][T28274] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1563.770914][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1563.774628][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1563.778580][T28274] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1563.780812][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1563.784588][T28274] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1563.789971][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1563.793334][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1563.797095][T28274] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1563.799789][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1563.803207][ T1478] autofs: Unknown parameter '0x0000000000000000' [ 1563.805733][T28274] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1563.809492][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1563.812923][T28274] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1563.817547][T28274] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1563.820907][T28274] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.823462][T28274] usb 8-1: Product: syz [ 1563.824782][T28274] usb 8-1: Manufacturer: syz [ 1563.826298][T28274] usb 8-1: SerialNumber: syz [ 1563.971848][ T1490] overlayfs: missing 'lowerdir' [ 1564.009010][ T1494] fuse: Unknown parameter 'use00000000000000000000' [ 1564.012621][ T1497] binder: 1495:1497 unknown command 0 [ 1564.014865][ T1497] binder: 1495:1497 ioctl c0306201 80000080 returned -22 [ 1564.024032][ T1497] binder: 1495:1497 ioctl 4018620d 0 returned -22 [ 1564.048776][T28274] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1564.060153][T28274] usb 8-1: USB disconnect, device number 121 [ 1564.070729][ T1501] autofs: Unknown parameter 'fd0x0000000000000000' [ 1564.572522][ T1516] fuse: Unknown parameter 'use00000000000000000000' [ 1564.614918][ T1518] overlayfs: missing 'workdir' [ 1564.714184][ T1522] binder: 1521:1522 unknown command 0 [ 1564.715924][ T1522] binder: 1521:1522 ioctl c0306201 80000080 returned -22 [ 1564.720306][ T1522] binder: 1521:1522 ioctl 4018620d 0 returned -22 [ 1564.884672][ T1526] autofs: Unknown parameter 'fd0x0000000000000000' [ 1565.207561][T14410] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 1565.357562][T14410] usb 8-1: Using ep0 maxpacket: 8 [ 1565.361704][T14410] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1565.364972][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1565.369938][T14410] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1565.374649][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1565.379009][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1565.384100][T14410] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1565.387212][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1565.391829][T14410] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1565.395970][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1565.400169][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1565.404133][T14410] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1565.406466][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1565.411075][T14410] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1565.414625][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1565.418158][T14410] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1565.422990][T14410] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1565.425713][T14410] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.428294][T14410] usb 8-1: Product: syz [ 1565.429569][T14410] usb 8-1: Manufacturer: syz [ 1565.431034][T14410] usb 8-1: SerialNumber: syz [ 1565.565362][ T1536] fuse: Unknown parameter 'use00000000000000000000' [ 1565.601820][ T1540] binder: 1539:1540 unknown command 0 [ 1565.603614][ T1540] binder: 1539:1540 ioctl c0306201 80000080 returned -22 [ 1565.607575][ T1540] binder: 1539:1540 ioctl c0306201 0 returned -14 [ 1565.638160][ T1544] overlayfs: missing 'workdir' [ 1565.651115][T14410] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1565.657361][T14410] usb 8-1: USB disconnect, device number 122 [ 1565.675005][ T1549] autofs: Unknown parameter 'fd0x0000000000000000' [ 1565.733133][ T1558] fuse: Unknown parameter 'user_i00000000000000000000' [ 1565.760007][ T1562] binder: 1561:1562 unknown command 0 [ 1565.762060][ T1562] binder: 1561:1562 ioctl c0306201 80000080 returned -22 [ 1565.766821][ T1562] binder: 1561:1562 ioctl c0306201 0 returned -14 [ 1565.973944][ T1578] overlayfs: missing 'workdir' [ 1566.141919][ T1585] fuse: Unknown parameter 'user_i00000000000000000000' [ 1566.181678][ T1587] binder: 1586:1587 unknown command 0 [ 1566.183714][ T1587] binder: 1586:1587 ioctl c0306201 80000080 returned -22 [ 1566.188307][ T1587] binder: 1586:1587 ioctl c0306201 0 returned -14 [ 1566.303765][ T1599] overlayfs: missing 'lowerdir' [ 1566.356701][ T1603] 9p: Bad value for 'wfdno' [ 1566.399448][ T1606] fuse: Unknown parameter 'user_i00000000000000000000' [ 1566.469407][ T1610] binder: 1609:1610 unknown command 0 [ 1566.471150][ T1610] binder: 1609:1610 ioctl c0306201 80000080 returned -22 [ 1566.576190][ T1616] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.8254'. [ 1566.687551][ T6008] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 1566.867545][ T6008] usb 8-1: Using ep0 maxpacket: 8 [ 1566.871218][ T6008] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1566.873778][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1566.877384][ T6008] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1566.882324][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1566.885874][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1566.889951][ T6008] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1566.892294][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1566.895834][ T6008] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1566.899604][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1566.903139][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1566.906976][ T6008] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1566.909512][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1566.913220][ T6008] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1566.916873][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1566.921645][ T6008] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1566.926584][ T6008] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1566.929598][ T6008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.932115][ T6008] usb 8-1: Product: syz [ 1566.933494][ T6008] usb 8-1: Manufacturer: syz [ 1566.935039][ T6008] usb 8-1: SerialNumber: syz [ 1567.154718][ T6008] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1567.158640][ T6008] usb 8-1: USB disconnect, device number 123 [ 1567.337141][ T1622] 9p: Bad value for 'wfdno' [ 1567.367233][ T1624] fuse: Unknown parameter 'user_id00000000000000000000' [ 1567.373224][ T1628] overlayfs: missing 'lowerdir' [ 1567.407273][ T1633] binder: 1632:1633 unknown command 0 [ 1567.409760][ T1633] binder: 1632:1633 ioctl c0306201 80000080 returned -22 [ 1567.470017][ T1639] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.8264'. [ 1567.518583][ T1647] 9p: Bad value for 'wfdno' [ 1567.545736][ T1649] fuse: Unknown parameter 'user_id00000000000000000000' [ 1567.574883][ T1651] binder: 1650:1651 unknown command 0 [ 1567.576652][ T1651] binder: 1650:1651 ioctl c0306201 80000080 returned -22 [ 1567.669726][ T1656] overlayfs: missing 'lowerdir' [ 1568.990998][ T1672] fuse: Unknown parameter 'user_id00000000000000000000' [ 1568.995376][ T1674] 9p: Bad value for 'rfdno' [ 1569.044176][ T1678] binder: 1677:1678 unknown command 0 [ 1569.045912][ T1678] binder: 1677:1678 ioctl c0306201 80000080 returned -22 [ 1569.127361][ T1689] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1569.130315][ T1689] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1569.150072][ T1691] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8288'. [ 1569.176939][ T1695] fuse: Bad value for 'fd' [ 1569.193997][ T1697] 9p: Bad value for 'rfdno' [ 1569.236124][ T1701] binder: 1700:1701 unknown command 0 [ 1569.237798][ T1701] binder: 1700:1701 ioctl c0306201 80000080 returned -22 [ 1569.307637][ T1335] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1569.487545][ T1335] usb 7-1: Using ep0 maxpacket: 8 [ 1569.491851][ T1335] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1569.494505][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1569.498288][ T1335] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1569.502417][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1569.506415][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1569.510631][ T1335] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1569.513279][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1569.516975][ T1335] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1569.520813][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1569.524733][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1569.529409][ T1335] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1569.532206][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1569.536427][ T1335] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1569.541268][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1569.545366][ T1335] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1569.550936][ T1335] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1569.554981][ T1335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.557589][ T1335] usb 7-1: Product: syz [ 1569.558998][ T1335] usb 7-1: Manufacturer: syz [ 1569.560608][ T1335] usb 7-1: SerialNumber: syz [ 1569.783651][ T1335] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1569.792887][ T1335] usb 7-1: USB disconnect, device number 121 [ 1570.086878][ T1716] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1570.089889][ T1716] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1570.158464][ T1720] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.8300'. [ 1570.320272][ T1722] fuse: Bad value for 'fd' [ 1570.350544][ T1724] 9p: Bad value for 'rfdno' [ 1570.384815][ T1726] binder: 1725:1726 unknown command 0 [ 1570.387173][ T1726] binder: 1725:1726 ioctl c0306201 80000080 returned -22 [ 1570.743445][ T1734] No control pipe specified [ 1570.776729][ T1739] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1570.783968][ T1739] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1570.785272][ T1742] fuse: Bad value for 'fd' [ 1570.814883][ T1745] 9p: Bad value for 'rfdno' [ 1570.816263][ T1746] binder: 1744:1746 unknown command 0 [ 1570.818559][ T1746] binder: 1744:1746 ioctl c0306201 80000080 returned -22 [ 1570.823832][ T1746] binder: 1744:1746 ioctl c0306201 0 returned -14 [ 1570.857326][ T1748] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1571.029715][ T6012] usb 14-1: new high-speed USB device number 42 using dummy_hcd [ 1571.177609][ T6012] usb 14-1: Using ep0 maxpacket: 8 [ 1571.181453][ T6012] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1571.184887][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1571.190292][ T6012] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1571.195377][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1571.200378][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1571.205784][ T6012] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1571.209210][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1571.214020][ T6012] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1571.219351][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1571.224020][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1571.230072][ T6012] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1571.233259][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1571.238328][ T6012] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1571.243276][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1571.248236][ T6012] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1571.252913][ T6012] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1571.255858][ T6012] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.258796][ T6012] usb 14-1: Product: syz [ 1571.260166][ T6012] usb 14-1: Manufacturer: syz [ 1571.261704][ T6012] usb 14-1: SerialNumber: syz [ 1571.336047][ T1760] No control pipe specified [ 1571.384466][ T1762] fuse: Unknown parameter '0x0000000000000003' [ 1571.472738][ T6012] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1571.477088][ T6012] usb 14-1: USB disconnect, device number 42 [ 1571.526871][ T1768] 9p: Bad value for 'rfdno' [ 1571.564406][ T1770] binder: 1769:1770 unknown command 0 [ 1571.566545][ T1770] binder: 1769:1770 ioctl c0306201 80000080 returned -22 [ 1571.574493][ T1770] binder: 1769:1770 ioctl c0306201 0 returned -14 [ 1572.012925][ T1778] No control pipe specified [ 1572.051096][ T1780] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.8329'. [ 1572.326336][ T1782] fuse: Unknown parameter '0x0000000000000003' [ 1572.381860][ T1788] 9p: Bad value for 'rfdno' [ 1572.408799][ T1790] binder: 1789:1790 unknown command 0 [ 1572.410515][ T1790] binder: 1789:1790 ioctl c0306201 80000080 returned -22 [ 1572.418750][ T1790] binder: 1789:1790 ioctl c0306201 0 returned -14 [ 1572.551545][ T1803] fuse: Unknown parameter '0x0000000000000003' [ 1572.582199][ T1808] 9pnet_fd: Insufficient options for proto=fd [ 1572.687520][ T6008] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1572.779299][ T1817] binder: 1816:1817 unknown command 0 [ 1572.781056][ T1817] binder: 1816:1817 ioctl c0306201 80000080 returned -22 [ 1572.867527][ T6008] usb 6-1: Using ep0 maxpacket: 8 [ 1572.870602][ T6008] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.872985][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.876654][ T6008] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.880686][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1572.884276][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1572.898322][ T6008] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.900969][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.904571][ T6008] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.908392][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1572.911826][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1572.915646][ T6008] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.921954][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.925502][ T6008] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.929372][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1572.932975][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1572.938426][ T6008] usb 6-1: string descriptor 0 read error: -22 [ 1572.940580][ T6008] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1572.943428][ T6008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.951311][ T6008] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1573.154874][ T6721] usb 6-1: USB disconnect, device number 17 [ 1573.693598][ T1829] fuse: Unknown parameter '0x0000000000000003' [ 1573.724142][ T1831] 9pnet_fd: Insufficient options for proto=fd [ 1574.063855][ T1843] binder: 1842:1843 unknown command 0 [ 1574.065622][ T1843] binder: 1842:1843 ioctl c0306201 80000080 returned -22 [ 1574.186438][ T1853] fuse: Unknown parameter '0x0000000000000003' [ 1574.222477][ T1855] 9pnet_fd: Insufficient options for proto=fd [ 1574.256481][ T1857] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1574.417565][ T6721] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1574.587565][ T6721] usb 6-1: Using ep0 maxpacket: 8 [ 1574.590896][ T6721] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.593324][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1574.596684][ T6721] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.600466][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1574.604030][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1574.608438][ T6721] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.610925][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1574.614559][ T6721] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.618441][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1574.622047][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1574.625803][ T6721] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.628720][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1574.632302][ T6721] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.636309][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1574.639704][ T6721] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1574.644946][ T6721] usb 6-1: string descriptor 0 read error: -22 [ 1574.646972][ T6721] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1574.650046][ T6721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.659367][ T6721] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1574.705405][ T1867] binder: 1866:1867 unknown command 0 [ 1574.708130][ T1867] binder: 1866:1867 ioctl c0306201 80000080 returned -22 [ 1574.858410][ T6721] usb 6-1: USB disconnect, device number 18 [ 1574.996348][ T1877] fuse: Unknown parameter '0x0000000000000003' [ 1575.068621][ T1881] 9pnet_fd: Insufficient options for proto=fd [ 1575.107778][ T1883] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1576.186916][ T1893] binder: 1892:1893 unknown command 0 [ 1576.188869][ T1893] binder: 1892:1893 ioctl c0306201 80000080 returned -22 [ 1576.222454][ T1895] fuse: Unknown parameter 'fd0x0000000000000003' [ 1576.260027][ T1899] 9pnet_fd: Insufficient options for proto=fd [ 1576.273572][ T1903] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.8385'. [ 1576.426247][ T1914] binder: 1913:1914 unknown command 0 [ 1576.428543][ T1914] binder: 1913:1914 ioctl c0306201 80000080 returned -22 [ 1576.517551][T17306] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1576.670017][T17306] usb 7-1: Using ep0 maxpacket: 8 [ 1576.694115][T17306] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1576.697117][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.701907][T17306] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.706120][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1576.710652][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1576.715007][T17306] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1576.718429][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.722610][T17306] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.727195][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1576.731812][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1576.736956][T17306] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1576.740178][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.744559][T17306] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.749279][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1576.753598][T17306] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1576.760477][T17306] usb 7-1: string descriptor 0 read error: -22 [ 1576.763054][T17306] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1576.766574][T17306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.776373][T17306] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1576.980610][T17306] usb 7-1: USB disconnect, device number 122 [ 1577.063858][ T1924] fuse: Unknown parameter 'fd0x0000000000000003' [ 1577.532000][ T1928] 9pnet_fd: Insufficient options for proto=fd [ 1577.621041][ T1932] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8397'. [ 1577.890418][ T1936] binder: 1935:1936 unknown command 0 [ 1577.892178][ T1936] binder: 1935:1936 ioctl c0306201 80000080 returned -22 [ 1577.951387][ T1942] fuse: Unknown parameter 'fd0x0000000000000003' [ 1577.982604][ T1948] 9p: Bad value for 'rfdno' [ 1577.995168][ T1950] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1578.075409][ T1958] binder: 1957:1958 unknown command 0 [ 1578.077074][ T1958] binder: 1957:1958 ioctl c0306201 80000080 returned -22 [ 1578.207544][ T6721] usb 14-1: new high-speed USB device number 43 using dummy_hcd [ 1578.377615][ T6721] usb 14-1: Using ep0 maxpacket: 8 [ 1578.381670][ T6721] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1578.384092][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1578.387653][ T6721] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1578.391373][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1578.394680][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1578.409212][ T6721] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1578.411578][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1578.415174][ T6721] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1578.419722][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1578.423572][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1578.431089][ T6721] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1578.434442][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1578.439261][ T6721] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1578.444253][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1578.448881][ T6721] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1578.455821][ T6721] usb 14-1: string descriptor 0 read error: -22 [ 1578.458762][ T6721] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1578.462502][ T6721] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.479129][ T6721] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1578.677861][ T6012] usb 14-1: USB disconnect, device number 43 [ 1579.685006][ T1976] 9p: Bad value for 'rfdno' [ 1579.699731][ T1978] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8417'. [ 1579.765428][ T1988] binder: 1986:1988 unknown command 0 [ 1579.768576][ T1988] binder: 1986:1988 ioctl c0306201 80000080 returned -22 [ 1580.001750][ T6721] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 1580.167559][ T6721] usb 8-1: Using ep0 maxpacket: 8 [ 1580.172245][ T6721] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1580.175287][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1580.180482][ T6721] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1580.185298][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1580.190033][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1580.195287][ T6721] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1580.198891][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1580.203456][ T6721] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1580.208401][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1580.212782][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1580.218209][ T6721] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1580.221348][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1580.225990][ T6721] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1580.231344][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1580.235788][ T6721] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1580.242793][ T6721] usb 8-1: string descriptor 0 read error: -22 [ 1580.245454][ T6721] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1580.249177][ T6721] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.259765][ T6721] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1580.460521][ T6721] usb 8-1: USB disconnect, device number 124 [ 1581.443710][ T2009] 9p: Bad value for 'rfdno' [ 1581.520019][ T2016] binder: 2015:2016 unknown command 0 [ 1581.522337][ T2016] binder: 2015:2016 ioctl c0306201 80000080 returned -22 [ 1581.767581][T12765] usb 14-1: new high-speed USB device number 44 using dummy_hcd [ 1581.932485][T12765] usb 14-1: Using ep0 maxpacket: 8 [ 1581.945992][T12765] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1581.953943][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1581.957394][T12765] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1581.967961][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1581.971320][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1581.981785][T12765] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1581.984370][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1581.987848][T12765] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1581.993493][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1581.996887][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1582.000722][T12765] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 1582.003077][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1582.006923][T12765] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1582.010538][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1582.015287][T12765] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1582.020590][T12765] usb 14-1: string descriptor 0 read error: -22 [ 1582.023068][T12765] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1582.025930][T12765] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.037238][T12765] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1582.243524][T29425] usb 14-1: USB disconnect, device number 44 [ 1582.795362][ T2042] binder: 2041:2042 unknown command 0 [ 1582.797124][ T2042] binder: 2041:2042 ioctl c0306201 80000080 returned -22 [ 1583.411285][ T2062] binder: 2061:2062 unknown command 0 [ 1583.413028][ T2062] binder: 2061:2062 ioctl c0306201 80000080 returned -22 [ 1583.820000][ T2085] binder: 2084:2085 unknown command 0 [ 1583.822177][ T2085] binder: 2084:2085 ioctl c0306201 80000080 returned -22 [ 1584.245229][ T2116] random: crng reseeded on system resumption [ 1584.377089][ T2126] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.8491'. [ 1584.588498][ T6008] usb 8-1: new full-speed USB device number 125 using dummy_hcd [ 1584.749394][ T6008] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1584.757699][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.770099][ T6008] usb 8-1: config 0 descriptor?? [ 1584.786076][ T2148] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.8494'. [ 1584.980050][ T6008] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1585.199914][ T6008] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 3 [ 1585.202849][ T6008] [drm] Initialized udl on minor 3 [ 1585.518717][ T2168] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.8503'. [ 1585.586667][ T6008] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1585.591711][ T6008] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1585.595907][ T6008] usb 8-1: USB disconnect, device number 125 [ 1585.601539][T29425] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1586.179167][ T2177] 9p: Could not find request transport: fd0x0000000000000003 [ 1586.695620][ T2206] 9p: Could not find request transport: fd0x0000000000000003 [ 1586.814437][ T2219] 9p: Could not find request transport: fd0x0000000000000003 [ 1586.888009][ T6008] usb 14-1: new full-speed USB device number 45 using dummy_hcd [ 1587.038714][ T6008] usb 14-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1587.041637][ T6008] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.045371][ T6008] usb 14-1: config 0 descriptor?? [ 1587.073466][ T2224] 9pnet_fd: Insufficient options for proto=fd [ 1587.271989][ T6008] udl 14-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1587.481742][ T6008] [drm] Initialized udl 0.0.1 for 14-1:0.0 on minor 3 [ 1587.483974][ T6008] [drm] Initialized udl on minor 3 [ 1587.675333][ T6008] udl 14-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1587.678465][ T6008] udl 14-1:0.0: [drm] Cannot find any crtc or sizes [ 1587.875993][ T6008] udl 14-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1587.879107][ T6721] usb 14-1: USB disconnect, device number 45 [ 1587.887525][ T6008] udl 14-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1587.890126][ T6008] udl 14-1:0.0: [drm] Cannot find any crtc or sizes [ 1588.424410][ T2245] 9pnet_fd: Insufficient options for proto=fd [ 1589.512532][ T2274] 9pnet_fd: Insufficient options for proto=fd [ 1590.128519][ T2295] 9pnet_fd: Insufficient options for proto=fd [ 1590.489926][ T2311] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.8566'. [ 1590.531327][ T2314] 9pnet_fd: Insufficient options for proto=fd [ 1590.755088][ T2334] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.8577'. [ 1590.788831][T14410] usb 14-1: new high-speed USB device number 46 using dummy_hcd [ 1590.801775][ T2338] 9pnet_fd: Insufficient options for proto=fd [ 1590.947604][T14410] usb 14-1: Using ep0 maxpacket: 8 [ 1590.950689][T14410] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1590.953397][T14410] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1590.956838][T14410] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1590.960702][T14410] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1590.963878][T14410] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1590.971066][T14410] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1590.974065][T14410] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.036061][ T2358] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.8589'. [ 1591.188030][T14410] usb 14-1: GET_CAPABILITIES returned 0 [ 1591.189948][T14410] usbtmc 14-1:16.0: can't read capabilities [ 1592.269352][ T2409] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.8613'. [ 1592.774431][ T2428] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.8622'. [ 1593.107954][ T2447] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.8631'. [ 1593.612536][ T2471] netlink: 'syz.1.8642': attribute type 72 has an invalid length. [ 1594.080739][ T2490] netlink: 'syz.3.8651': attribute type 72 has an invalid length. [ 1594.368111][ T2512] netlink: 'syz.3.8661': attribute type 72 has an invalid length. [ 1594.715256][ T2533] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8670'. [ 1595.837541][ T6008] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 1596.008100][ T6008] usb 8-1: Using ep0 maxpacket: 32 [ 1596.011399][ T6008] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1596.014380][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.026348][ T6008] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1596.437908][ T2318] usbtmc 14-1:16.0: usb_control_msg returned -110 [ 1596.454831][ T1335] usb 14-1: USB disconnect, device number 46 [ 1596.624856][ T2567] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.8681'. [ 1597.246219][ T6008] gspca_nw80x: reg_w err -71 [ 1597.247891][ T6008] nw80x 8-1:3.0: probe with driver nw80x failed with error -71 [ 1597.252352][ T6008] usb 8-1: USB disconnect, device number 126 [ 1597.520735][ T2585] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.8688'. [ 1597.789876][ T2598] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8692'. [ 1597.837824][ T2609] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.8697'. [ 1597.916270][T29425] usb 14-1: new high-speed USB device number 47 using dummy_hcd [ 1598.078809][T29425] usb 14-1: Using ep0 maxpacket: 8 [ 1598.082158][T29425] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1598.084876][T29425] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1598.093449][T29425] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1598.096558][T29425] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1598.099794][T29425] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.103845][T29425] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1598.106736][T29425] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.316041][T29425] usb 14-1: GET_CAPABILITIES returned 0 [ 1598.318011][T29425] usbtmc 14-1:16.0: can't read capabilities [ 1598.741657][ T2639] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.8707'. [ 1600.145042][T14360] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1600.150152][T14360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1600.153669][T14360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1600.158149][T14360] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1600.160882][T14360] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1600.423343][ T2663] chnl_net:caif_netlink_parms(): no params data found [ 1600.482124][ T2663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.484493][ T2663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.486852][ T2663] bridge_slave_0: entered allmulticast mode [ 1600.490128][ T2663] bridge_slave_0: entered promiscuous mode [ 1600.493796][ T2663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.496352][ T2663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.499903][ T2663] bridge_slave_1: entered allmulticast mode [ 1600.502981][ T2663] bridge_slave_1: entered promiscuous mode [ 1600.522970][ T2663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.528572][ T2663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.549530][ T2663] team0: Port device team_slave_0 added [ 1600.553173][ T2663] team0: Port device team_slave_1 added [ 1600.571796][ T2663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1600.574092][ T2663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.582310][ T2663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1600.587116][ T2663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1600.589720][ T2663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.598123][ T2663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1600.657324][ T2663] hsr_slave_0: entered promiscuous mode [ 1600.659898][ T2663] hsr_slave_1: entered promiscuous mode [ 1600.662182][ T2663] debugfs: 'hsr0' already exists in 'hsr' [ 1600.664064][ T2663] Cannot create hsr debugfs directory [ 1600.768979][ T2663] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.779481][ T2681] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8721'. [ 1600.903692][ T2663] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.029113][ T2663] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.109487][ T2663] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.235728][ T2663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1601.241088][ T2663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1601.245319][ T2663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1601.251561][ T2663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1601.291646][ T2663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.299920][ T2663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.304790][T18952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.307155][T18952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.313118][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.315430][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.414916][ T2663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.436333][ T2663] veth0_vlan: entered promiscuous mode [ 1601.441191][ T2663] veth1_vlan: entered promiscuous mode [ 1601.454850][ T2663] veth0_macvtap: entered promiscuous mode [ 1601.458713][ T2663] veth1_macvtap: entered promiscuous mode [ 1601.473045][ T2663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.481177][ T2663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1601.493795][T24435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.496767][T24435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.499679][T24435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.502639][T24435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.544607][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.548577][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.569169][T18952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.571875][T18952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.610531][ T2710] netlink: 'syz.3.8717': attribute type 72 has an invalid length. [ 1601.645717][ T2712] tipc: Started in network mode [ 1601.647535][ T2712] tipc: Node identity 4, cluster identity 4711 [ 1601.650862][ T2712] tipc: Node number set to 4 [ 1601.822035][ T2723] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8731'. [ 1601.999594][ T2734] netlink: 'syz.2.8735': attribute type 72 has an invalid length. [ 1602.197634][T14360] Bluetooth: hci4: command tx timeout [ 1602.197654][ T2753] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8742'. [ 1602.245955][ T2757] netlink: 'syz.2.8744': attribute type 72 has an invalid length. [ 1602.278856][ T2761] syzkaller0: entered promiscuous mode [ 1602.280636][ T2761] syzkaller0: entered allmulticast mode [ 1602.560165][ T2777] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1602.700242][ T2786] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8755'. [ 1602.832398][ T2792] syzkaller0: entered promiscuous mode [ 1602.834821][ T2792] syzkaller0: entered allmulticast mode [ 1603.115197][ T2805] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1603.156319][ T2807] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8764'. [ 1603.250733][ T2820] syzkaller0: entered promiscuous mode [ 1603.253075][ T2820] syzkaller0: entered allmulticast mode [ 1603.567711][ T2594] usbtmc 14-1:16.0: usb_control_msg returned -110 [ 1603.578531][T29425] usb 14-1: USB disconnect, device number 47 [ 1603.605325][ T2836] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.8774'. [ 1603.643552][ T2838] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8775'. [ 1603.703866][ T2847] syzkaller0: entered promiscuous mode [ 1603.705650][ T2847] syzkaller0: entered allmulticast mode [ 1604.097516][T28274] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 1604.257518][T28274] usb 8-1: Using ep0 maxpacket: 8 [ 1604.260346][T28274] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1604.262911][T28274] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1604.265947][T28274] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1604.269754][T28274] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1604.273287][T28274] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1604.277283][T28274] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1604.280238][T14360] Bluetooth: hci4: command tx timeout [ 1604.282001][T28274] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.402075][T24421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1604.405437][T24421] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1604.409563][T24421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1604.413389][T24421] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1604.417941][T24421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1604.492195][T28274] usb 8-1: GET_CAPABILITIES returned 0 [ 1604.493985][T28274] usbtmc 8-1:16.0: can't read capabilities [ 1604.595301][ T2872] chnl_net:caif_netlink_parms(): no params data found [ 1604.647415][ T2872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.650604][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.653811][ T2872] bridge_slave_0: entered allmulticast mode [ 1604.660845][ T2872] bridge_slave_0: entered promiscuous mode [ 1604.664157][ T2872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.666400][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.668830][ T2872] bridge_slave_1: entered allmulticast mode [ 1604.671466][ T2872] bridge_slave_1: entered promiscuous mode [ 1604.686455][ T2872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.691250][ T2872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.707141][ T2872] team0: Port device team_slave_0 added [ 1604.710312][ T2872] team0: Port device team_slave_1 added [ 1604.722681][ T2872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.724897][ T2872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.732811][ T2872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.736983][ T2872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.739210][ T2872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.747812][ T2872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.784475][ T2872] hsr_slave_0: entered promiscuous mode [ 1604.788148][ T2872] hsr_slave_1: entered promiscuous mode [ 1604.791159][ T2872] debugfs: 'hsr0' already exists in 'hsr' [ 1604.793691][ T2872] Cannot create hsr debugfs directory [ 1604.910161][ T2872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.016622][ T2872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.090253][ T2872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.180295][ T2872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.309634][ T2872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1605.313846][ T2872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1605.331580][ T2872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1605.349145][ T2872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1605.453917][ T2872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.470627][ T2872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.480535][T18952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.482912][T18952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.494449][T18952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.496765][T18952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1605.566292][ T2923] syzkaller0: entered promiscuous mode [ 1605.569139][ T2923] syzkaller0: entered allmulticast mode [ 1605.613876][ T2872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.635486][ T2872] veth0_vlan: entered promiscuous mode [ 1605.641866][ T2872] veth1_vlan: entered promiscuous mode [ 1605.656224][ T2872] veth0_macvtap: entered promiscuous mode [ 1605.662173][ T2872] veth1_macvtap: entered promiscuous mode [ 1605.671626][ T2872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.678840][ T2872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1605.685268][T18952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.688665][T18952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.692446][T18952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.695785][T18952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.731582][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.737335][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.749488][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.752120][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.790049][ T2931] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8787'. [ 1605.863367][ T2941] tipc: Started in network mode [ 1605.865543][ T2941] tipc: Node identity 4, cluster identity 4711 [ 1605.868855][ T2941] tipc: Node number set to 4 [ 1605.990908][ T2949] syzkaller0: entered promiscuous mode [ 1605.992905][ T2949] syzkaller0: entered allmulticast mode [ 1606.073263][ T2962] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1606.367604][T14360] Bluetooth: hci4: command tx timeout [ 1606.447708][T14360] Bluetooth: hci0: command tx timeout [ 1608.437614][T14360] Bluetooth: hci4: command tx timeout [ 1608.517800][T14360] Bluetooth: hci0: command tx timeout [ 1609.717743][ T2862] usbtmc 8-1:16.0: usb_control_msg returned -110 [ 1609.730182][T28274] usb 8-1: USB disconnect, device number 127 [ 1609.851467][ T3006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8824'. [ 1609.956854][ T3020] syzkaller0: entered promiscuous mode [ 1609.960611][ T3020] syzkaller0: entered allmulticast mode [ 1610.097553][T29425] usb 14-1: new high-speed USB device number 48 using dummy_hcd [ 1610.247622][T29425] usb 14-1: Using ep0 maxpacket: 8 [ 1610.251747][T29425] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1610.255133][T29425] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1610.258593][T29425] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1610.261778][T29425] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1610.264938][T29425] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1610.269358][T29425] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1610.273058][T29425] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.481203][T29425] usb 14-1: GET_CAPABILITIES returned 0 [ 1610.483353][T29425] usbtmc 14-1:16.0: can't read capabilities [ 1610.607566][T14360] Bluetooth: hci0: command tx timeout [ 1610.682888][ T3011] usbtmc 14-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1610.709312][T28274] usb 14-1: USB disconnect, device number 48 [ 1611.561427][ T3041] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8835'. [ 1611.685793][ T2972] udevd[2972]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1611.695286][ T3071] syzkaller0: entered promiscuous mode [ 1611.697126][ T3071] syzkaller0: entered allmulticast mode [ 1611.887551][T29425] usb 14-1: new high-speed USB device number 49 using dummy_hcd [ 1611.981550][T24421] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1611.985618][T24421] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1611.988382][T24421] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1611.993962][T24421] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1611.996809][T24421] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1612.058307][T29425] usb 14-1: Using ep0 maxpacket: 8 [ 1612.061351][T29425] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1612.064561][T29425] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1612.069039][T29425] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1612.073870][T29425] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1612.079751][T29425] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.085267][T29425] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1612.089766][T29425] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.119811][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.268812][ T3087] chnl_net:caif_netlink_parms(): no params data found [ 1612.305714][T29425] usb 14-1: GET_CAPABILITIES returned 0 [ 1612.308167][T29425] usbtmc 14-1:16.0: can't read capabilities [ 1612.317263][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.320565][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.322891][ T3087] bridge_slave_0: entered allmulticast mode [ 1612.325496][ T3087] bridge_slave_0: entered promiscuous mode [ 1612.329259][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.331571][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.334315][ T3087] bridge_slave_1: entered allmulticast mode [ 1612.337061][ T3087] bridge_slave_1: entered promiscuous mode [ 1612.352035][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.356440][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.373032][ T3087] team0: Port device team_slave_0 added [ 1612.376457][ T3087] team0: Port device team_slave_1 added [ 1612.389395][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.391618][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.400171][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.404409][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1612.407271][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.416887][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.439409][ T3087] hsr_slave_0: entered promiscuous mode [ 1612.441725][ T3087] hsr_slave_1: entered promiscuous mode [ 1612.444335][ T3087] debugfs: 'hsr0' already exists in 'hsr' [ 1612.446168][ T3087] Cannot create hsr debugfs directory [ 1612.509131][ T3066] usbtmc 14-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1612.516956][ T6008] usb 14-1: USB disconnect, device number 49 [ 1612.565416][ T3087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.664736][ T3087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.678424][T24421] Bluetooth: hci0: command tx timeout [ 1612.698386][ T3104] syzkaller0: entered promiscuous mode [ 1612.700795][ T3104] syzkaller0: entered allmulticast mode [ 1612.769176][ T3087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.879155][ T3087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.981644][ T3087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1612.987788][ T3087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1612.993356][ T3087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1612.999365][ T3087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1613.053503][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.063635][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.069683][T24435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.072015][T24435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1613.077168][T24439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.079590][T24439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.098930][ T3087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1613.186246][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.206029][ T3087] veth0_vlan: entered promiscuous mode [ 1613.210810][ T3138] No control pipe specified [ 1613.213384][ T3087] veth1_vlan: entered promiscuous mode [ 1613.231117][ T3087] veth0_macvtap: entered promiscuous mode [ 1613.235064][ T3087] veth1_macvtap: entered promiscuous mode [ 1613.244651][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1613.252180][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1613.261843][ T1050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.265860][ T3142] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1613.273571][ T1050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.276678][ T1050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.281068][ T3140] syzkaller0: entered promiscuous mode [ 1613.282840][ T3140] syzkaller0: entered allmulticast mode [ 1613.288587][ T1050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.355784][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.360425][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.373378][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.376017][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.523450][ T3158] No control pipe specified [ 1613.559725][ T3164] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1613.609123][ T3168] syzkaller0: entered promiscuous mode [ 1613.611486][ T3168] syzkaller0: entered allmulticast mode [ 1613.767949][T10755] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1613.928866][ T3186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8892'. [ 1613.933975][ T3186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8892'. [ 1613.947571][T10755] usb 7-1: Using ep0 maxpacket: 8 [ 1613.950451][T10755] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1613.953017][T10755] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1613.956063][T10755] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1613.959925][T10755] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1613.963066][T10755] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1613.967161][T10755] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1613.970577][T10755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.974905][ T3191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1614.047950][T24421] Bluetooth: hci1: command tx timeout [ 1614.138241][ T3204] syzkaller0: entered promiscuous mode [ 1614.140028][ T3204] syzkaller0: entered allmulticast mode [ 1614.178400][T10755] usb 7-1: GET_CAPABILITIES returned 0 [ 1614.180226][T10755] usbtmc 7-1:16.0: can't read capabilities [ 1614.383646][ T3160] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1614.386673][T10755] usb 7-1: USB disconnect, device number 123 [ 1614.969169][T14360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1614.972794][T14360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1614.976311][T14360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1614.979218][T14360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1614.982164][T14360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1615.137807][ T3218] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1615.174087][ T3214] chnl_net:caif_netlink_parms(): no params data found [ 1615.219241][ T3214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.221547][ T3214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.223838][ T3214] bridge_slave_0: entered allmulticast mode [ 1615.226944][ T3214] bridge_slave_0: entered promiscuous mode [ 1615.230353][ T3214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.233666][ T3214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.235982][ T3214] bridge_slave_1: entered allmulticast mode [ 1615.238691][ T3214] bridge_slave_1: entered promiscuous mode [ 1615.253486][ T3214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.258620][ T3214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.274490][ T3214] team0: Port device team_slave_0 added [ 1615.277936][ T3214] team0: Port device team_slave_1 added [ 1615.295080][ T3214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.297280][ T3214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.305833][ T3214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.310224][ T3214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.312421][ T3214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.321993][ T3214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.344998][ T3214] hsr_slave_0: entered promiscuous mode [ 1615.347313][ T3214] hsr_slave_1: entered promiscuous mode [ 1615.349939][ T3214] debugfs: 'hsr0' already exists in 'hsr' [ 1615.351752][ T3214] Cannot create hsr debugfs directory [ 1615.410242][ T3233] syzkaller0: entered promiscuous mode [ 1615.412072][ T3233] syzkaller0: entered allmulticast mode [ 1615.441705][ T3214] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.521767][ T3214] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.601298][ T3214] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.659953][ T3214] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.769318][ T3214] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1615.773775][ T3214] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1615.778514][ T3214] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1615.788742][ T3214] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1615.804760][ T3214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.807149][ T3214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.809585][ T3214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.811997][ T3214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.814647][ T6721] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1615.855708][ T3214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.868259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.871255][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.880303][ T3214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.886193][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.888883][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.894492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.897161][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.967565][ T6721] usb 7-1: Using ep0 maxpacket: 8 [ 1615.973415][ T6721] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1615.976032][ T6721] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1615.979627][ T6721] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1615.982881][ T6721] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1615.985915][ T6721] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1615.990903][ T6721] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1615.993980][ T6721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.051413][ T3214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.117599][T24421] Bluetooth: hci1: command tx timeout [ 1616.205017][ T6721] usb 7-1: GET_CAPABILITIES returned 0 [ 1616.207413][ T6721] usbtmc 7-1:16.0: can't read capabilities [ 1616.207518][ T3214] veth0_vlan: entered promiscuous mode [ 1616.219543][ T3214] veth1_vlan: entered promiscuous mode [ 1616.236467][ T3214] veth0_macvtap: entered promiscuous mode [ 1616.240861][ T3214] veth1_macvtap: entered promiscuous mode [ 1616.252373][ T3214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1616.260949][ T3214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1616.270727][ T61] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.274945][ T61] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.278197][ T61] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.281031][ T61] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.315866][T18952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.318512][T18952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.332924][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.337017][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.370729][ T3257] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1616.425505][ T3263] tipc: Started in network mode [ 1616.427774][ T3263] tipc: Node identity 4, cluster identity 4711 [ 1616.430583][ T3263] tipc: Node number set to 4 [ 1616.508690][ T1335] usb 7-1: USB disconnect, device number 124 [ 1616.513649][ T3239] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 1616.518564][ T3266] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1617.077745][T24421] Bluetooth: hci3: command tx timeout [ 1617.265735][ T3282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8925'. [ 1617.271609][ T3282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8925'. [ 1617.627918][T29425] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1617.673073][ T3308] overlayfs: failed to resolve './file2': -2 [ 1617.752037][ T3312] overlayfs: failed to resolve './file2': -2 [ 1617.787634][T29425] usb 6-1: Using ep0 maxpacket: 32 [ 1617.791342][T29425] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1617.793961][T29425] usb 6-1: config 0 has no interface number 0 [ 1617.894452][T29425] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1617.898830][T29425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.907488][T29425] usb 6-1: Product: syz [ 1617.908846][T29425] usb 6-1: Manufacturer: syz [ 1617.910335][T29425] usb 6-1: SerialNumber: syz [ 1617.916002][T29425] usb 6-1: config 0 descriptor?? [ 1617.924437][T29425] hub 6-1:0.89: bad descriptor, ignoring hub [ 1617.926702][T29425] hub 6-1:0.89: probe with driver hub failed with error -5 [ 1617.937031][T29425] option 6-1:0.89: GSM modem (1-port) converter detected [ 1618.197601][T24421] Bluetooth: hci1: command tx timeout [ 1618.367736][ T6012] usb 6-1: USB disconnect, device number 19 [ 1618.371354][ T6012] option 6-1:0.89: device disconnected [ 1618.417103][ T3317] netdevsim netdevsim9: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1618.712550][ T3328] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1619.167715][T24421] Bluetooth: hci3: command tx timeout [ 1619.511641][ T3355] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1619.837564][ T1335] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1619.957513][T31690] usb 14-1: new high-speed USB device number 50 using dummy_hcd [ 1619.961630][ T3377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8968'. [ 1619.987623][ T1335] usb 8-1: Using ep0 maxpacket: 32 [ 1619.991118][ T1335] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1619.993653][ T1335] usb 8-1: config 0 has no interface number 0 [ 1619.997407][ T1335] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1620.000859][ T1335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.003359][ T1335] usb 8-1: Product: syz [ 1620.004680][ T1335] usb 8-1: Manufacturer: syz [ 1620.006793][ T1335] usb 8-1: SerialNumber: syz [ 1620.009524][ T1335] usb 8-1: config 0 descriptor?? [ 1620.014480][ T1335] hub 8-1:0.89: bad descriptor, ignoring hub [ 1620.016412][ T1335] hub 8-1:0.89: probe with driver hub failed with error -5 [ 1620.019692][ T1335] option 8-1:0.89: GSM modem (1-port) converter detected [ 1620.107515][T31690] usb 14-1: Using ep0 maxpacket: 8 [ 1620.110495][T31690] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 1620.113063][T31690] usb 14-1: config 0 has no interface number 0 [ 1620.115058][T31690] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1620.157573][T31690] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1620.161209][T31690] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1620.164633][T31690] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1620.177586][T31690] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1620.180473][T31690] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.184160][T31690] usb 14-1: config 0 descriptor?? [ 1620.188718][T31690] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1620.277557][T24421] Bluetooth: hci1: command tx timeout [ 1620.419386][T17306] usb 8-1: USB disconnect, device number 2 [ 1620.423952][T17306] option 8-1:0.89: device disconnected [ 1620.444750][T17306] usb 14-1: USB disconnect, device number 50 [ 1620.446673][ C2] ldusb 14-1:0.55: usb_submit_urb failed (-19) [ 1620.455917][ T3367] ldusb 14-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1620.461448][T17306] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 1620.946532][ T3405] syzkaller0: entered promiscuous mode [ 1620.949872][ T3405] syzkaller0: entered allmulticast mode [ 1621.024110][ T3409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8981'. [ 1621.084894][ T3418] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1621.231656][ T3433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8992'. [ 1621.237549][T24421] Bluetooth: hci3: command tx timeout [ 1621.300676][ T3437] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8994'. [ 1621.483857][ T3453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9002'. [ 1621.686817][ T3459] netlink: 92 bytes leftover after parsing attributes in process `syz.9.9005'. [ 1621.707685][ T1335] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1621.859666][ T1335] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.863804][ T1335] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1621.876618][ T1335] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1621.884134][ T1335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.887650][ T1335] usb 8-1: Product: syz [ 1621.889412][ T1335] usb 8-1: Manufacturer: syz [ 1621.892656][ T1335] usb 8-1: SerialNumber: syz [ 1622.062533][ T3473] syzkaller0: entered promiscuous mode [ 1622.064463][ T3473] syzkaller0: entered allmulticast mode [ 1622.112783][ T1335] usb 8-1: 0:2 : does not exist [ 1622.117888][ T1335] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1622.135729][ T1335] usb 8-1: USB disconnect, device number 3 [ 1622.153591][ T2972] udevd[2972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1622.248891][ T3480] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9015'. [ 1622.288399][ T3482] overlayfs: failed to resolve './file2': -2 [ 1622.805490][ T3510] overlayfs: failed to resolve './file2': -2 [ 1622.842042][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1622.896647][ T3518] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input150 [ 1623.117522][T29425] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1623.137107][ T3534] Bluetooth: MGMT ver 1.23 [ 1623.194289][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9041'. [ 1623.208932][T17306] usb 14-1: new high-speed USB device number 51 using dummy_hcd [ 1623.278323][T29425] usb 7-1: Using ep0 maxpacket: 32 [ 1623.281275][T29425] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1623.283837][T29425] usb 7-1: config 0 has no interface number 0 [ 1623.287479][T29425] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1623.290314][T29425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.292804][T29425] usb 7-1: Product: syz [ 1623.294128][T29425] usb 7-1: Manufacturer: syz [ 1623.295653][T29425] usb 7-1: SerialNumber: syz [ 1623.299780][T29425] usb 7-1: config 0 descriptor?? [ 1623.302416][T29425] hub 7-1:0.89: bad descriptor, ignoring hub [ 1623.304282][T29425] hub 7-1:0.89: probe with driver hub failed with error -5 [ 1623.307015][T29425] option 7-1:0.89: GSM modem (1-port) converter detected [ 1623.317875][T24421] Bluetooth: hci3: command tx timeout [ 1623.368622][T17306] usb 14-1: Using ep0 maxpacket: 8 [ 1623.438027][T17306] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1623.444422][T17306] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1623.448368][T17306] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1623.451871][T17306] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1623.456225][T17306] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1623.460677][T17306] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1623.463686][T17306] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.504364][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9050'. [ 1623.572666][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1623.671476][T17306] usb 14-1: GET_CAPABILITIES returned 0 [ 1623.673302][T17306] usbtmc 14-1:16.0: can't read capabilities [ 1623.712858][ T3579] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1623.718101][T29425] usb 7-1: USB disconnect, device number 125 [ 1623.721685][T29425] option 7-1:0.89: device disconnected [ 1623.928781][ T3527] usbtmc 14-1:16.0: usb_control_msg returned -71 [ 1623.928920][T10755] usb 14-1: USB disconnect, device number 51 [ 1624.351245][ T3600] sch_tbf: burst 20160 is lower than device lo mtu (65550) ! [ 1624.881661][ T3626] syzkaller0: entered promiscuous mode [ 1624.883460][ T3626] syzkaller0: entered allmulticast mode [ 1624.917929][T17306] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1625.035344][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.067627][T17306] usb 6-1: Using ep0 maxpacket: 32 [ 1625.071476][T17306] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1625.088924][T17306] usb 6-1: config 0 has no interface number 0 [ 1625.108156][T17306] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1625.111431][T17306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.114778][T17306] usb 6-1: Product: syz [ 1625.116595][T17306] usb 6-1: Manufacturer: syz [ 1625.118378][T17306] usb 6-1: SerialNumber: syz [ 1625.122139][T17306] usb 6-1: config 0 descriptor?? [ 1625.132001][T17306] hub 6-1:0.89: bad descriptor, ignoring hub [ 1625.134590][T17306] hub 6-1:0.89: probe with driver hub failed with error -5 [ 1625.138685][T17306] option 6-1:0.89: GSM modem (1-port) converter detected [ 1625.139863][T14360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1625.140437][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.151512][T14360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1625.155739][T14360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1625.158372][ T6721] usb 14-1: new high-speed USB device number 52 using dummy_hcd [ 1625.161702][T14360] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1625.164395][T14360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1625.237266][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.306864][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.327520][ T6721] usb 14-1: Using ep0 maxpacket: 8 [ 1625.330375][ T6721] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1625.333331][ T6721] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1625.336451][ T6721] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1625.339951][ T6721] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1625.343170][ T6721] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1625.347233][ T6721] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1625.350507][ T6721] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.437927][ T61] bridge_slave_1: left allmulticast mode [ 1625.439740][ T61] bridge_slave_1: left promiscuous mode [ 1625.441578][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.445729][ T61] bridge_slave_0: left allmulticast mode [ 1625.447822][ T61] bridge_slave_0: left promiscuous mode [ 1625.451041][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.559069][ T6721] usb 14-1: GET_CAPABILITIES returned 0 [ 1625.560859][ T6721] usbtmc 14-1:16.0: can't read capabilities [ 1625.597954][ T6721] usb 6-1: USB disconnect, device number 20 [ 1625.603734][ T6721] option 6-1:0.89: device disconnected [ 1625.703821][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1625.708317][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.712059][ T61] bond0 (unregistering): Released all slaves [ 1625.716029][ T3636] chnl_net:caif_netlink_parms(): no params data found [ 1625.758024][ T3655] syzkaller0: entered promiscuous mode [ 1625.760452][ T3655] syzkaller0: entered allmulticast mode [ 1625.825717][ T3630] usbtmc 14-1:16.0: usb_control_msg returned -71 [ 1625.825841][ T6012] usb 14-1: USB disconnect, device number 52 [ 1626.287584][T28274] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1626.447679][T28274] usb 6-1: Using ep0 maxpacket: 32 [ 1626.451320][T28274] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1626.455044][T28274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.461744][T28274] usb 6-1: config 0 descriptor?? [ 1626.467239][T28274] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1627.073470][T28274] gspca_sunplus: reg_r err -71 [ 1627.078185][T28274] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1627.085933][T28274] usb 6-1: USB disconnect, device number 21 [ 1627.249529][T24421] Bluetooth: hci0: command tx timeout [ 1627.297155][ T61] tipc: Left network mode [ 1627.386756][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.390910][ T3636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.393543][ T3636] bridge_slave_0: entered allmulticast mode [ 1627.396827][ T3636] bridge_slave_0: entered promiscuous mode [ 1627.402406][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.405472][ T3636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.409466][ T3636] bridge_slave_1: entered allmulticast mode [ 1627.413464][ T3636] bridge_slave_1: entered promiscuous mode [ 1627.452597][ T3636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.458705][ T3636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.483388][ T3636] team0: Port device team_slave_0 added [ 1627.486737][ T3636] team0: Port device team_slave_1 added [ 1627.503406][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.505804][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.515380][ T3636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.519929][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.522229][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.530965][ T3636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.608412][ T3636] hsr_slave_0: entered promiscuous mode [ 1627.610742][ T3636] hsr_slave_1: entered promiscuous mode [ 1627.613031][ T3636] debugfs: 'hsr0' already exists in 'hsr' [ 1627.615327][ T3636] Cannot create hsr debugfs directory [ 1627.643685][ T61] hsr_slave_0: left promiscuous mode [ 1627.646537][ T61] hsr_slave_1: left promiscuous mode [ 1627.649787][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1627.653037][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1627.656628][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1627.660201][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1627.675412][ T61] veth1_macvtap: left promiscuous mode [ 1627.677302][ T61] veth0_macvtap: left promiscuous mode [ 1627.679634][ T61] veth1_vlan: left promiscuous mode [ 1627.681383][ T61] veth0_vlan: left promiscuous mode [ 1627.707514][T31690] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1627.819010][T14545] usb 14-1: new high-speed USB device number 53 using dummy_hcd [ 1627.867541][T31690] usb 8-1: Using ep0 maxpacket: 32 [ 1627.870481][T31690] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1627.873223][T31690] usb 8-1: config 0 has no interface number 0 [ 1627.876861][T31690] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1627.880038][T31690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.882694][T31690] usb 8-1: Product: syz [ 1627.884399][T31690] usb 8-1: Manufacturer: syz [ 1627.885975][T31690] usb 8-1: SerialNumber: syz [ 1627.893623][T31690] usb 8-1: config 0 descriptor?? [ 1627.896693][T31690] hub 8-1:0.89: bad descriptor, ignoring hub [ 1627.898693][T31690] hub 8-1:0.89: probe with driver hub failed with error -5 [ 1627.901601][T31690] option 8-1:0.89: GSM modem (1-port) converter detected [ 1627.978850][T14545] usb 14-1: Using ep0 maxpacket: 8 [ 1627.982844][T14545] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1627.985624][T14545] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1627.989725][T14545] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1627.992941][T14545] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1627.996314][T14545] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1628.001008][T14545] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1628.004499][T14545] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.086773][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1628.124723][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1628.221640][T14545] usb 14-1: GET_CAPABILITIES returned 0 [ 1628.223464][T14545] usbtmc 14-1:16.0: can't read capabilities [ 1628.321952][T28274] usb 8-1: USB disconnect, device number 4 [ 1628.331876][T28274] option 8-1:0.89: device disconnected [ 1628.479222][T28274] usb 14-1: USB disconnect, device number 53 [ 1628.484981][ T3687] usbtmc 14-1:16.0: usb_control_msg returned -71 [ 1628.539284][ T3695] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9101'. [ 1628.957569][T17306] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1629.073826][ T3636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1629.078442][ T3636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1629.086966][ T3636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1629.104169][ T3636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1629.120354][T17306] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 1629.122989][T17306] usb 6-1: config 0 has no interface number 0 [ 1629.125529][T17306] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1629.129711][T17306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.134045][ T3730] syzkaller0: entered promiscuous mode [ 1629.135003][T17306] usb 6-1: config 0 descriptor?? [ 1629.135681][ T3730] syzkaller0: entered allmulticast mode [ 1629.327489][T24421] Bluetooth: hci0: command tx timeout [ 1629.351304][ T3706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.357842][ T3706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.374706][T24421] Bluetooth: hci1: adv larger than maximum supported [ 1629.374754][T24421] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1629.378908][T17306] usb 6-1: string descriptor 0 read error: -71 [ 1629.380583][ T3741] overlayfs: missing 'lowerdir' [ 1629.405309][T17306] usb-storage 6-1:0.168: USB Mass Storage device detected [ 1629.441617][ T3745] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9111'. [ 1629.442067][T17306] usb-storage 6-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 1629.497874][T17306] usb 6-1: USB disconnect, device number 22 [ 1629.513029][ T3747] netlink: 76 bytes leftover after parsing attributes in process `syz.9.9112'. [ 1629.928013][ T3751] Bluetooth: MGMT ver 1.23 [ 1630.695465][ T3636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.705219][ T3636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.719914][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.722582][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.726747][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.729022][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.746751][ T3636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1630.750449][ T3636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1630.829477][ T3777] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1630.873738][ T3636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.026220][ T3636] veth0_vlan: entered promiscuous mode [ 1631.048307][ T3811] syzkaller0: entered promiscuous mode [ 1631.050083][ T3811] syzkaller0: entered allmulticast mode [ 1631.097848][T31690] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1631.269173][T31690] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 1631.271907][T31690] usb 6-1: config 0 has no interface number 0 [ 1631.275457][T31690] usb 6-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=75.15 [ 1631.280790][T31690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.283360][T31690] usb 6-1: Product: syz [ 1631.284683][T31690] usb 6-1: Manufacturer: syz [ 1631.286153][T31690] usb 6-1: SerialNumber: syz [ 1631.292800][T31690] usb 6-1: config 0 descriptor?? [ 1631.398198][T24421] Bluetooth: hci0: command tx timeout [ 1631.501404][ T1335] usb 6-1: USB disconnect, device number 23 [ 1632.050459][ T3829] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9131'. [ 1632.433137][ T3636] veth1_vlan: entered promiscuous mode [ 1632.463022][ T3636] veth0_macvtap: entered promiscuous mode [ 1632.470705][ T3636] veth1_macvtap: entered promiscuous mode [ 1632.484118][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1632.506615][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1632.514361][T24435] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.519544][T18953] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.524353][T18953] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.531105][T18953] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.538403][ T3841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1632.571843][ T3847] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1632.574638][ T3847] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1632.606991][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.610626][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.626571][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.629673][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.739175][ T3871] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9142'. [ 1632.827642][T24027] usb 14-1: new full-speed USB device number 54 using dummy_hcd [ 1632.927524][T12765] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1632.942191][ T3887] syzkaller0: entered promiscuous mode [ 1632.944387][ T3887] syzkaller0: entered allmulticast mode [ 1633.009999][T24027] usb 14-1: config 0 has an invalid interface number: 168 but max is 0 [ 1633.012855][T24027] usb 14-1: config 0 has no interface number 0 [ 1633.014841][T24027] usb 14-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1633.017872][T24027] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.022083][T24027] usb 14-1: config 0 descriptor?? [ 1633.077682][T12765] usb 6-1: Using ep0 maxpacket: 16 [ 1633.080600][T12765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1633.088040][T12765] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1633.090874][T12765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.093678][T12765] usb 6-1: Product: syz [ 1633.095013][T12765] usb 6-1: Manufacturer: syz [ 1633.096477][T12765] usb 6-1: SerialNumber: syz [ 1633.099777][T12765] usb 6-1: config 0 descriptor?? [ 1633.102603][T12765] hub 6-1:0.0: bad descriptor, ignoring hub [ 1633.104483][T12765] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1633.109148][T12765] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1633.231919][ T3849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.234643][ T3849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.239014][T24421] Bluetooth: hci3: adv larger than maximum supported [ 1633.244458][T24421] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1633.255403][T24027] usb 14-1: string descriptor 0 read error: -71 [ 1633.258639][T24027] usb-storage 14-1:0.168: USB Mass Storage device detected [ 1633.269813][T24027] usb-storage 14-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 1633.306656][ T40] audit: type=1326 audit(1770086518.457:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.317368][ T40] audit: type=1326 audit(1770086518.467:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.327126][ T40] audit: type=1326 audit(1770086518.467:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.336282][ T40] audit: type=1326 audit(1770086518.467:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.345531][ T40] audit: type=1326 audit(1770086518.467:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.352676][T24027] usb 14-1: USB disconnect, device number 54 [ 1633.354596][ T40] audit: type=1326 audit(1770086518.467:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.365449][ T40] audit: type=1326 audit(1770086518.467:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.374173][ T40] audit: type=1326 audit(1770086518.467:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.381930][ T40] audit: type=1326 audit(1770086518.467:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3864 comm="syz.1.9141" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1633.477939][T24421] Bluetooth: hci0: command tx timeout [ 1633.850959][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9149'. [ 1634.541463][ T3916] team0: Port device team_slave_0 removed [ 1634.611854][ T3932] netlink: 92 bytes leftover after parsing attributes in process `syz.9.9152'. [ 1634.781995][ T3950] syzkaller1: entered promiscuous mode [ 1634.783959][ T3950] syzkaller1: entered allmulticast mode [ 1634.789127][ T3950] af_packet: tpacket_rcv: packet too big, clamped from 3944 to 3942. macoff=106 [ 1634.907541][ T6012] usb 14-1: new high-speed USB device number 55 using dummy_hcd [ 1635.057633][ T6012] usb 14-1: Using ep0 maxpacket: 8 [ 1635.060826][ T6012] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1635.067718][ T6012] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1635.071578][ T6012] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1635.074810][ T6012] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1635.078873][ T6012] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1635.083068][ T6012] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1635.086039][ T6012] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.296711][ T6012] usb 14-1: usb_control_msg returned -71 [ 1635.299072][ T6012] usbtmc 14-1:16.0: can't read capabilities [ 1635.307025][ T6012] usb 14-1: USB disconnect, device number 55 [ 1635.521147][ T3974] syzkaller0: entered promiscuous mode [ 1635.522938][ T3974] syzkaller0: entered allmulticast mode [ 1635.682955][T16750] usb 6-1: USB disconnect, device number 24 [ 1635.806972][ T3982] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9162'. [ 1637.184276][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9170'. [ 1637.187157][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9170'. [ 1637.357694][ T6012] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1637.511004][ T6012] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1637.514444][ T6012] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1637.524647][ T6012] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1637.527583][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.533557][ T4004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1637.538996][ T6012] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1637.640652][ T4042] overlayfs: missing 'lowerdir' [ 1637.754031][T14545] usb 6-1: USB disconnect, device number 25 [ 1637.875612][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9185'. [ 1638.523040][ T4070] overlayfs: missing 'workdir' [ 1638.945720][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9197'. [ 1639.057558][T17272] usb 14-1: new high-speed USB device number 56 using dummy_hcd [ 1639.103403][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9198'. [ 1639.146838][ T4084] team0: Port device team_slave_0 removed [ 1639.207772][T17272] usb 14-1: Using ep0 maxpacket: 32 [ 1639.211599][T17272] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.215907][T17272] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.220264][T17272] usb 14-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1639.224130][T17272] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.230134][T17272] usb 14-1: config 0 descriptor?? [ 1639.466284][T17272] usbhid 14-1:0.0: can't add hid device: -71 [ 1639.468662][T17272] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 1639.472263][T17272] usb 14-1: USB disconnect, device number 56 [ 1639.483670][ T4086] syzkaller0: entered promiscuous mode [ 1639.486026][ T4086] syzkaller0: entered allmulticast mode [ 1639.956630][ T4100] overlayfs: missing 'workdir' [ 1641.286067][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9205'. [ 1641.496187][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9215'. [ 1641.541493][ T4133] team0: Port device team_slave_0 removed [ 1643.193521][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9235'. [ 1644.529652][ T4231] netlink: 4996 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1644.959730][ T4250] binder: 4249:4250 ioctl c0306201 80000680 returned -14 [ 1645.110018][T24421] block nbd9: Receive control failed (result -107) [ 1645.212838][ T2972] block nbd9: shutting down sockets [ 1645.605068][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9268'. [ 1645.674327][ T4275] syzkaller0: entered promiscuous mode [ 1645.676810][ T4275] syzkaller0: entered allmulticast mode [ 1645.800131][T24421] block nbd3: Receive control failed (result -107) [ 1645.883254][ T2972] block nbd3: shutting down sockets [ 1645.987140][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9278'. [ 1646.167570][T10755] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1646.325104][T10755] usb 8-1: config 0 has an invalid interface number: 168 but max is 0 [ 1646.329447][T10755] usb 8-1: config 0 has no interface number 0 [ 1646.330843][ T4299] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 1646.332066][T10755] usb 8-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1646.335842][ T4299] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 1646.340515][T10755] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.342490][ T4299] CPU: 2 UID: 0 PID: 4299 Comm: syz.9.9282 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.349361][ T4299] Tainted: [L]=SOFTLOCKUP [ 1646.350738][ T4299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1646.353883][ T4299] RIP: 0010:kernfs_rename_ns+0x3b/0xa70 [ 1646.355649][ T4299] Code: 48 89 fb 4c 8d 73 30 48 83 ec 28 48 89 14 24 48 89 4c 24 08 e8 36 48 54 ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 16 09 00 00 48 8b 43 30 48 85 c0 0f 84 ca 08 00 [ 1646.361665][ T4299] RSP: 0000:ffffc900244c7a20 EFLAGS: 00010206 [ 1646.363606][ T4299] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c191000 [ 1646.366122][ T4299] RDX: 0000000000000006 RSI: ffffffff82b2028a RDI: 0000000000000000 [ 1646.368641][ T4299] RBP: ffff888040fb9d20 R08: 0000000000000007 R09: 0000000000000000 [ 1646.371152][ T4299] R10: 000000007fffffff R11: 0000000000000000 R12: ffff8880279386c0 [ 1646.373650][ T4299] R13: ffff888066b8b340 R14: 0000000000000030 R15: 1ffff92004898f50 [ 1646.376124][ T4299] FS: 0000000000000000(0000) GS:ffff8880975e3000(0063) knlGS:00000000f5436b40 [ 1646.378932][ T4299] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1646.381016][ T4299] CR2: 00000000f5414ff4 CR3: 00000000759a9000 CR4: 0000000000352ef0 [ 1646.383529][ T4299] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 1646.386039][ T4299] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1646.388551][ T4299] Call Trace: [ 1646.389628][ T4299] [ 1646.390597][ T4299] kobject_move+0x127/0x260 [ 1646.392064][ T4299] ? __pfx_kobject_move+0x10/0x10 [ 1646.393680][ T4299] ? kobject_put+0xb9/0x640 [ 1646.395141][ T4299] device_move+0xa9/0x1140 [ 1646.396614][ T4299] hci_conn_del_sysfs+0x86/0x1a0 [ 1646.398216][ T4299] hci_conn_del+0x506/0x1180 [ 1646.399716][ T4299] hci_conn_hash_flush+0x186/0x280 [ 1646.401371][ T4299] hci_dev_reset+0x249/0x650 [ 1646.402873][ T4299] ? __pfx_hci_dev_reset+0x10/0x10 [ 1646.404512][ T4299] ? bpf_lsm_capable+0x9/0x10 [ 1646.406040][ T4299] ? security_capable+0x80/0x260 [ 1646.407644][ T4299] hci_sock_ioctl+0x5c5/0x7e0 [ 1646.409155][ T4299] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 1646.410825][ T4299] ? do_vfs_ioctl+0x226/0x13e0 [ 1646.412373][ T4299] hci_sock_compat_ioctl+0x43/0x80 [ 1646.414010][ T4299] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 1646.415890][ T4299] compat_sock_ioctl+0x179/0x760 [ 1646.417511][ T4299] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1646.419244][ T4299] ? __fget_files+0x21f/0x3d0 [ 1646.420752][ T4299] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1646.422500][ T4299] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1646.424240][ T4299] __do_fast_syscall_32+0xde/0x660 [ 1646.425893][ T4299] do_fast_syscall_32+0x32/0x70 [ 1646.427489][ T4299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1646.429490][ T4299] RIP: 0023:0xf7f76579 [ 1646.430809][ T4299] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 1646.436864][ T4299] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1646.439503][ T4299] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448cb [ 1646.442002][ T4299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1646.444499][ T4299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1646.447044][ T4299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1646.449523][ T4299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1646.452018][ T4299] [ 1646.453016][ T4299] Modules linked in: [ 1646.454895][ C2] hpet: Lost 7 RTC interrupts [ 1646.456452][ T4310] fuse: Bad value for 'fd' [ 1646.457247][ T4299] ---[ end trace 0000000000000000 ]--- [ 1646.470260][ T4299] RIP: 0010:kernfs_rename_ns+0x3b/0xa70 [ 1646.472042][ T4299] Code: 48 89 fb 4c 8d 73 30 48 83 ec 28 48 89 14 24 48 89 4c 24 08 e8 36 48 54 ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 16 09 00 00 48 8b 43 30 48 85 c0 0f 84 ca 08 00 [ 1646.478648][ T4299] RSP: 0000:ffffc900244c7a20 EFLAGS: 00010206 [ 1646.480715][ T4299] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c191000 [ 1646.483199][ T4299] RDX: 0000000000000006 RSI: ffffffff82b2028a RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1646.485669][ T4299] RBP: ffff888040fb9d20 R08: 0000000000000007 R09: 0000000000000000 [ 1646.488435][ T4299] R10: 000000007fffffff R11: 0000000000000000 R12: ffff8880279386c0 [ 1646.491054][ T4299] R13: ffff888066b8b340 R14: 0000000000000030 R15: 1ffff92004898f50 [ 1646.493515][ T4299] FS: 0000000000000000(0000) GS:ffff8880976e3000(0063) knlGS:00000000f5436b40 [ 1646.496307][ T4299] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1646.498488][ T4299] CR2: 00007ffe5e1e1000 CR3: 00000000759a9000 CR4: 0000000000352ef0 [ 1646.500996][ T4299] Kernel panic - not syncing: Fatal exception [ 1646.503625][ T4299] Kernel Offset: disabled [ 1646.505013][ T4299] Rebooting in 86400 seconds..