last executing test programs: 3m33.124162859s ago: executing program 2 (id=6292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="58010000100013070000000000000000fc024200000000000000000000000001fe0000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c", @ANYRESOCT=r3, @ANYRES8=r3], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="5425f8a07434c277446b622824f458aa47ff7a23c4f770070d89868f33b5a0d70752f6892ab1706d8057b9c7eba7ec6899077207cc1fea63ec0ddd2ef71f7b4d5d3254cfff3f69889b2e8c4cf62617e4a39b35eb2d9e5ff9f00491aceead7077be331f01a9bbe0e240ab34841ad5fbb915a21b5dd2c6730c654e2c868f77578ff320fc46350999abbf0e8304fd841a89437825a22b16ae422d2b4fe549154aad83bc80e71e3f8b0196ce66ef434ad89be21440eaa384ce3d1352f886664f40efdf3d40c2a9b46d3054ee144bbdbb08ee5adea72ac02d20e536ccc1212997416c5e40d1aaf1982ab3aba17751aca7e757fd1f"], 0x0, 0x4a}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000518d000000040000000009000e0c0000"], &(0x7f0000002300), 0x600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x37) 3m32.156324833s ago: executing program 2 (id=6295): syz_usb_connect(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xad, 0xa1, 0x7c, 0x10, 0x499, 0x5004, 0x6dc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x2, 0xa0, 0x80, 0x40, "", [{{0x9, 0x4, 0x57, 0xbd, 0x5, 0x31, 0xef, 0x6f, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x0, 0x5, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x404, 0x1, 0x1, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x403, 0x5, 0x1, 0x3}]}], [{{0x9, 0x5, 0xb, 0x2, 0x20, 0x81, 0x2, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x28, 0x7f, 0xe4}}, {{0x9, 0x5, 0x1, 0xbff0defdc7fff7be, 0x400, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x6, 0x1a}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x0, 0x2, 0x9}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x300, 0xad, 0x7, 0x0, 0x20, 0xe}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x814}}, {0xea, &(0x7f0000000780)=@string={0xea, 0x3, "a9c13c4ce74ebf13fb1ff1baa1deb5cd8532fdce106b517289c29290fdb62e3b6c56103e77daa37239b6939cd164d8319caddcf7b5a323a53de2325b17c4dd4c200d4f641fe569e0e148af881306703d015f33dd7f5ddce008f4fef6aa60c4a06665ecf2c31b2bda1f568974a57e241de0ff626ff06c291766fb8719e06676d3ef47adb5f52cf2d11709c83ed682f5d6cc5ce1d2f0e77d5bdb466267a314f6df1de90d84c1df6b495fbe464f123139bd14f7ca62d850052ab41845238a35d112781f01b086a814aea77cf22b9f303f1a2325c1e9e43cbde3ea88a5d74a89ea88b90f24608b97dc91"}}, {0xfd, &(0x7f0000000880)=@string={0xfd, 0x3, "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"}}]}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000002080)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x2, 0x8, 0x3, 0x9, 0x9}, &(0x7f0000002140)=0x98) bpf$TOKEN_CREATE(0x24, &(0x7f0000003900), 0x8) syz_usb_connect$cdc_ncm(0x3, 0x92, &(0x7f0000003940)={{0x12, 0x1, 0x88, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x2, 0xd0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef3eaceac6"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x10, 0x8, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x36}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x10, 0xf1cd}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x36, [0x5]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x2, 0xfffc}, @network_terminal={0x7, 0x24, 0xa, 0x16, 0x8, 0x5, 0xfe}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xf3, 0x3, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x82, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x40, 0x40, 0x2}}}}}}}]}}, &(0x7f0000003b00)={0xa, &(0x7f0000003a00)={0xa, 0x6, 0x201, 0x3, 0x4, 0x0, 0xff, 0xdc}, 0x31, &(0x7f0000003a40)={0x5, 0xf, 0x31, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "be9c2c49567ea73c02466c947052dbce"}, @ssp_cap={0x18, 0x10, 0xa, 0xf9, 0x3, 0x7ffffff, 0x0, 0x0, [0xff00cf, 0x0, 0xf]}]}, 0x2, [{0x4, &(0x7f0000003a80)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000003ac0)=@lang_id={0x4, 0x3, 0x41f}}]}) 3m32.151641325s ago: executing program 2 (id=6296): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="000000000000000000000015cdb85782df2ae092e010997e751d9429049d5cfb816adfb1a15e45ea594d3f1539a48e702ac2945bc7341e9f9f9a3c2c532b3bc8b99f9092869769b3b0d7fd4fdb3bdf0ea7b5606945b9f4b9790808864eb989832a5868af05c7b6d3040aa7ac52107f2efb88ae83d6260c0428bc20108e4514d4d1d3d0a15d007f12f728c44911e1762cf2e50850f882f22a5ececa9b0884524dcf98501e31049f65944cb210ac3dfc48d74ec3e7222374f9b87b05e79c605433151d6d3a942db5a232deb10b4319"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r2, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETVAL(r2, 0x4, 0x10, 0x0) r3 = gettid() r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$unix(r4, &(0x7f00000004c0)=""/256, 0x100, 0x22, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000980)={'security\x00', 0xd2, "e4be59e254c3474fda1b2a6407fc3c6e43ab91a1908dd7246f24756b8c89994e623a28bceac0384654b82d36989381b53a2c20af4d58362e67a933a9379858ca96a413d4b65d10fa4dc432518cdf062db1582aa0e2b0438fc152a2d2f61e4033087c70ef7650ce07f46535a7cc9138ee244440d3a618f5c6df720c71516b7aa8f400d2f2112b1fa2d008e24d77dc58ec827323c5a8fb9a84eae4dfea332390a2b05f04cb713263f1f6031582ea23359761b7500fba39f568b01fd62c811316077f71f7700e11870a812ddac1c6d3bbccb5a6"}, &(0x7f0000000140)=0xf6) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030f00000000000000000800"], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r10 = syz_open_dev$dri(&(0x7f0000000000), 0xa123, 0x40001) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000900)={0x1, 0x0, &(0x7f00000008c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r10, 0xc00464be, &(0x7f0000000940)={r11}) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x2e4, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_LLC_SDP={0x110, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}]}, {0x4c, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0x5, 0x1, '{'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, '..{&'}]}, {0x18, 0x0, 0x0, 0x1, [{0x4}, {0x4}, {0x5, 0x1, ')'}, {0x4}]}, {0x40, 0x0, 0x0, 0x1, [{0x6, 0x1, '-['}, {0x8, 0x1, 'nfc\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xa, 0x1, '\\\\\'\\$g'}, {0x5, 0x1, '-'}, {0x8, 0x1, '\\}\xd5:'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x7, 0x1, '.(\x14'}, {0x8, 0x1, 'nfc\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x6, 0x1, '!+'}]}, {0x24, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x188, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}, {0xb, 0x1, ',.\'$}]^'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0x8, 0x1, '$[^*'}, {0xa, 0x1, '{[:]@:'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x86'}]}, {0x64, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x4}, {0x7, 0x1, '\xa0.^'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x9, 0x1, '*[)$^'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0xb, 0x1, '#$^-+.]'}, {0x5, 0x1, '%'}]}, {0x3c, 0x0, 0x0, 0x1, [{0x4}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x6, 0x1, '6@'}, {0xc, 0x1, '[,)\xc1^/\"['}, {0x7, 0x1, '\\\x9f-'}, {0x8, 0x1, 'nfc\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0x9, 0x1, '/-%!['}]}, {0x2c, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0x7, 0x1, '/&}'}, {0x5, 0x1, '\\'}, {0x5, 0x1, '.'}]}]}, @NFC_ATTR_LLC_SDP={0x8, 0x13, 0x0, 0x1, [{0x4}]}, @NFC_ATTR_LLC_SDP={0x18, 0x13, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x45190}, 0x8000) 3m31.440414226s ago: executing program 2 (id=6299): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) (fail_nth: 1) 3m31.337996375s ago: executing program 2 (id=6300): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 3m29.540383676s ago: executing program 2 (id=6310): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x1a, 0x1, 0x1) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 3m29.33370942s ago: executing program 32 (id=6310): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x1a, 0x1, 0x1) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m36.925679823s ago: executing program 0 (id=6581): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, 0xffffffffffffffff, 0x2f}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @random="d28ad090ad63", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "917915", 0x28, 0x29, 0x1, @private0, @mcast2, {[@dstopts={0x2c, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0xce, 0x8001}}]}], "20c1ebad4d11e653d67e3d9593a4f394"}}}}}, 0x0) 2m36.815035938s ago: executing program 0 (id=6582): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x36, &(0x7f0000000380)={0x20, 0x8, 0xff7ffffe}) ptrace$peeksig(0x4209, r0, &(0x7f0000000300)={0x0, 0x1, 0x1}, &(0x7f00000001c0)=[{}]) 2m36.59154637s ago: executing program 0 (id=6586): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000180)={r7, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7fff, 0x81, 0x6, 0x9, 0x0, 0x7, 0x7f}, &(0x7f0000000040)=0x9c) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) 2m36.187810354s ago: executing program 0 (id=6589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0) 2m34.950257676s ago: executing program 0 (id=6591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf5b30000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 2m33.587931622s ago: executing program 0 (id=6595): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_open_dev$tty20(0xc, 0x4, 0x1) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10014400, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0xfffffffffffffffe) 2m17.238575452s ago: executing program 33 (id=6595): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_open_dev$tty20(0xc, 0x4, 0x1) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10014400, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0xfffffffffffffffe) 11.869234282s ago: executing program 5 (id=7007): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2, 0x80805, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x1, 0x2a0}, 0x0, 0x0) epoll_create1(0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcdd, r2}, 0x38) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}}, 0x0) 10.788022245s ago: executing program 5 (id=7012): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000000)='$][\\{))/.#-/&#(%,\\!{\x00', 0x50840, &(0x7f0000000080)={@align=0xdeb0, {0x6, 0x6, 0x5}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x2}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x62, 0x3}, {0x9e, 0x3}, {0x80}, {0x4, 0x4}], "2b2ebb5b8ac728b7"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xa5, 0x1}, {0x1, 0x3}, {0x8, 0x7}, {0x5, 0x5}, {0xe, 0x5}, {0xf, 0x1}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}], "acdd0830703d56db"}}]}, 0x48}}, 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r5, 0x8923, &(0x7f0000000080)="94b58ec726ebd03a") syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c2400", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4], 0x0) 8.147911084s ago: executing program 3 (id=7022): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) signalfd4(r1, &(0x7f0000000200)={[0x8]}, 0x8, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x50}}, 0xc0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 8.083940518s ago: executing program 5 (id=7023): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x2, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x496000}) read$FUSE(0xffffffffffffffff, &(0x7f0000001b80)={0x2020, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r6], 0x68}}, 0x40000) bind$xdp(r5, &(0x7f0000000040)={0x2c, 0x8, r8, 0x27, r1}, 0x10) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0x0, r3, {0x2, 0x1, 0x0, {0x0, 0x6, 0xc818, 0xffffffffffffffff, 0x100000001, 0x3, 0x8, 0x3, 0x7ff, 0xa000, 0x80000000, r4, 0xee00, 0x2, 0x3}}}, 0x78) 7.721670361s ago: executing program 3 (id=7025): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010003704040000000000000000000000411a389dd7722f59a703d994fb126d602af2cda9a40b6ed71a370719d573c3200f3606467867667ac24c1c80255c46d8f7b793a9d730942c9c4d64d1a8aa926903fcc1a438440d77679661fff2b961eb95e82b45fcb7cd72e6f2d1ab9a5a00"/127, @ANYRES32=r8, @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r8, @ANYBLOB="0044000002800000"], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 7.468695441s ago: executing program 5 (id=7028): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1006, 0x0, 0x2, 0x7ffc0002}]}) fchdir(0xffffffffffffffff) 7.274987029s ago: executing program 4 (id=7029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f000000c2c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)="1d", 0x1}], 0x1}}], 0x1, 0xbc08519e58a787e5) pipe(0xfffffffffffffffc) 6.473273407s ago: executing program 4 (id=7031): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) 6.199772836s ago: executing program 3 (id=7035): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000280)={0x6, 0x9, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r6}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 6.183270816s ago: executing program 5 (id=7036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x800, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 6.182845s ago: executing program 4 (id=7037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 5.07470747s ago: executing program 3 (id=7039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="58010000100013070000000000000000fc024200000000000000000000000001fe0000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c", @ANYRESOCT=r3, @ANYRES8=r3], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="5425f8a07434c277446b622824f458aa47ff7a23c4f770070d89868f33b5a0d70752f6892ab1706d8057b9c7eba7ec6899077207cc1fea63ec0ddd2ef71f7b4d5d3254cfff3f69889b2e8c4cf62617e4a39b35eb2d9e5ff9f00491aceead7077be331f01a9bbe0e240ab34841ad5fbb915a21b5dd2c6730c654e2c868f77578ff320fc46350999abbf0e8304fd841a89437825a22b16ae422d2b4fe549154aad83bc80e71e3f8b0196ce66ef434ad89be21440eaa384ce3d1352f886664f40efdf3d40c2a9b46d3054ee144bbdbb08ee5adea72ac02d20e536ccc1212997416c5e40d1aaf1982ab3aba17751aca7e757fd1f"], 0x0, 0x4a}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000518d000000040000000009000e0c0000"], &(0x7f0000002300), 0x600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x37) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) 4.966418426s ago: executing program 4 (id=7042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x6020400) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x1, r2}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x147) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x2}) lsetxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], 0x12, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x0, 0x4000007}) syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa, "89440fa65d0253484339"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.707401227s ago: executing program 6 (id=7049): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (fail_nth: 6) 3.694123441s ago: executing program 3 (id=7050): socket(0x2b, 0x1, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7e8a, 0x800, 0x1000, 0x29}, &(0x7f0000000400)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$loop(&(0x7f00000003c0), 0x7, 0x142323) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43acff03ad02", [0x7fffffffffffffff, 0x7]}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.537589138s ago: executing program 1 (id=7053): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007008000", 0x22) 3.40031293s ago: executing program 1 (id=7054): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 3.342500339s ago: executing program 6 (id=7055): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r0 = socket(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 32) r1 = socket(0x1e, 0x4, 0x0) (rerun: 32) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x7816985e, 0x242240) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x8, &(0x7f0000000040)=[{0x0, 0x0, 0x4}, {0xe6, 0x0, 0x3}, {0x8, 0x0, 0x11}, {0x7f, 0x0, 0x100}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x8a}, {0x6, 0x0, 0x54}, {0x20, 0x0, 0x80000001}]}, 0x1, 0x7, 0x4, 0x2, 0x0, 0x49, 0x1, 0x7fff, 0x0, 0x0}) (async, rerun: 64) mbind(&(0x7f0000193000/0x3000)=nil, 0x3000, 0x8003, &(0x7f0000000000)=0x8, 0x8, 0x4) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r4, 0xc0086448, &(0x7f00000000c0)={r5}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x5, 0x104, 0xfffffffffffffffb, 0x4000000008, 0x71dd, 0x0, 0x5, 0x8d], 0x26000, 0x2008c0}) (async) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) 2.225970423s ago: executing program 3 (id=7056): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='\x00\x01\x00\x00', 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) lseek(0xffffffffffffffff, 0x3, 0x1) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.043883938s ago: executing program 6 (id=7057): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket(0x1e, 0x4, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14) 1.971826516s ago: executing program 1 (id=7058): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000002c0)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x101, 0x1ff}}) 1.896532049s ago: executing program 6 (id=7059): timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1006, 0x0, 0x2, 0x7ffc0002}]}) fchdir(0xffffffffffffffff) 1.725404151s ago: executing program 1 (id=7060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0xc008aec1, 0x0) (fail_nth: 2) 1.679897529s ago: executing program 6 (id=7061): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) unshare(0x20000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r1], 0x1}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) 1.55510165s ago: executing program 4 (id=7062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="58010000100013070000000000000000fc024200000000000000000000000001fe0000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c", @ANYRESOCT=r3, @ANYRES8=r3], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$evdev(0x0, 0x40002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="5425f8a07434c277446b622824f458aa47ff7a23c4f770070d89868f33b5a0d70752f6892ab1706d8057b9c7eba7ec6899077207cc1fea63ec0ddd2ef71f7b4d5d3254cfff3f69889b2e8c4cf62617e4a39b35eb2d9e5ff9f00491aceead7077be331f01a9bbe0e240ab34841ad5fbb915a21b5dd2c6730c654e2c868f77578ff320fc46350999abbf0e8304fd841a89437825a22b16ae422d2b4fe549154aad83bc80e71e3f8b0196ce66ef434ad89be21440eaa384ce3d1352f886664f40efdf3d40c2a9b46d3054ee144bbdbb08ee5adea72ac02d20e536ccc1212997416c5e40d1aaf1982ab3aba17751aca7e757fd1f"], 0x0, 0x4a}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000518d000000040000000009000e0c0000"], &(0x7f0000002300), 0x600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x37) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) 255.559144ms ago: executing program 1 (id=7063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000740), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 218.253873ms ago: executing program 5 (id=7064): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007008000", 0x22) 217.229114ms ago: executing program 6 (id=7065): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00), 0x4) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000004c0)={0x0, 0x1, 0x5c, {0x5c, 0x1, "38c9604de2d5929cc278852bdf87003284972e5623faf740f91ae7d005bbd6278adde0111f3cb2d2b75355b96a937c2528deb05ad3094c11ce0a474df6862baa49fa67424487e239322b17a0790c9dd39b76576e4a5bdf9d6fb3"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x6, 0x5e, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x1, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "97"}, {0x5, 0x24, 0x0, 0x12}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xbc, 0x0, 0xa}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x6c, 0x5, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x1, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xe2, 0xf, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x7, 0x7, 0x40}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x4, 0x8}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2009}}, {0xc8, &(0x7f00000001c0)=@string={0xc8, 0x3, "383350ba3597f8d427ca9428be270fd43c0987f30003591da4861b2fb9bd1a117b7cf6117bdc7b02c1ad7491ee5e8e5834acf06cdef88e9cf06848d25b964714a260dea5d7819eaca12435797352b29fe9b072816064b722be02b57aa5d4d14f13e34370385ec94b176679a6b0f557d1f7d170c06678fe10622777e1a6988fb14b995175660e7055f8c2c1d98ad66b02fdc703a4af16547435a83a9648c86c33d6179c39a74dad9adf601affebd1d8be9b5a5f1f6edd43c3292879a600710f8bb2b1bc1574f0"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}]}) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @private1, 0xa77}, 0x1c) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x0, 0x21, 0x7e, {0x7e, 0x23, "a2fe6f8472bbd5b79569daabafe2e7d66ccb39188c1c2d9643bdf2d6dd9bdcc753fa7e7a945d2cb1b6d1da7f83324912e8cb2b6b64a782b450784368b1fd23892c0341a85f82da99e4f13ab3b479abe06f748e21edcc649fe3407b012f4a3ae4c46055aa20756d620437cdf48e595750f3fe348316ff443395266e81"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f00000005c0)={0x40, 0x1, 0xa0, "35de2d6a0d1866c0c556268b18324b6f0fde213221890baab796ded45db1d32d403c504a8d52b5f57fce95e194d57ce0663505c8938fb1ec78a6e5ccb00634d9a4f68cd8e69c5c29ee9a49eb9bec88103cc02d5ed59a521fcbb4c9c924ae6955ec3f5d36edfd560a428ec22d09988c826ea7016e9a98bb7d0eacd6b3eddc9df9b6efee6a8a4bde8c36989702f59378ec08f5cac7e19a8021020b0ca79348f06f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}}) 81.914075ms ago: executing program 4 (id=7066): socket(0x2b, 0x1, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7e8a, 0x800, 0x1000, 0x29}, &(0x7f0000000400)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005870000000d48001280340001800a0001006c696d6974000000240002800c000240000000000000d2360c00014000000000000000070800044000000001100001800c0001007061796c6f6164000800034000000110140000001000010000000000000000000584000a"], 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) r5 = syz_open_dev$loop(&(0x7f00000003c0), 0x7, 0x142323) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43acff03ad02", [0x7fffffffffffffff, 0x7]}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=7067): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) kernel console output (not intermixed with test programs): get: fail, usb_gadget_register_driver returned -16 [ 1421.711268][T25381] program syz.3.6374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1421.857858][T25396] misc userio: No port type given on /dev/userio [ 1421.916156][T20913] pwc: recv_control_msg error -71 req 04 val 1300 [ 1421.916657][T20913] pwc: recv_control_msg error -71 req 04 val 1400 [ 1421.917160][T20913] pwc: recv_control_msg error -71 req 02 val 2000 [ 1421.931113][T20913] pwc: recv_control_msg error -71 req 02 val 2100 [ 1421.932008][T20913] pwc: recv_control_msg error -71 req 04 val 1500 [ 1421.945657][T20913] pwc: recv_control_msg error -71 req 02 val 2500 [ 1421.946778][T20913] pwc: recv_control_msg error -71 req 02 val 2400 [ 1421.948091][T20913] pwc: recv_control_msg error -71 req 02 val 2600 [ 1421.950303][T20913] pwc: recv_control_msg error -71 req 02 val 2900 [ 1421.956144][T20913] pwc: recv_control_msg error -71 req 02 val 2800 [ 1421.964797][T20913] pwc: recv_control_msg error -71 req 04 val 1100 [ 1421.966278][T20913] pwc: recv_control_msg error -71 req 04 val 1200 [ 1422.029031][T20913] pwc: Registered as video103. [ 1422.059690][T20913] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input109 [ 1422.130634][T20913] usb 4-1: USB disconnect, device number 97 [ 1422.966171][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.082003][T25151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1423.140480][T25151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1424.176141][T20913] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1424.699092][T20913] usb 4-1: Using ep0 maxpacket: 8 [ 1424.866482][T20913] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.866508][T20913] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1424.866542][T20913] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1424.866564][T20913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.995851][T25151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1425.335151][T25418] netlink: 'syz.3.6383': attribute type 3 has an invalid length. [ 1425.335172][T25418] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6383'. [ 1425.365153][T25151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1425.751852][ T37] audit: type=1326 audit(2000001133.499:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25431 comm="syz.1.6386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf015ac799 code=0x0 [ 1426.082318][T20913] usb 4-1: USB disconnect, device number 98 [ 1426.851389][T25455] 9p: Bad value for 'rfdno' [ 1426.972003][T25151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.125051][T25151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.219271][T12016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.219468][T12016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.275184][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.275333][ T6375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.285906][ T6230] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1427.435847][ T6230] usb 1-1: Using ep0 maxpacket: 16 [ 1427.439336][ T6230] usb 1-1: config 2 has an invalid interface number: 87 but max is 0 [ 1427.439360][ T6230] usb 1-1: config 2 has no interface number 0 [ 1427.439404][ T6230] usb 1-1: config 2 interface 87 altsetting 189 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1427.439427][ T6230] usb 1-1: config 2 interface 87 altsetting 189 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1427.439453][ T6230] usb 1-1: config 2 interface 87 has no altsetting 0 [ 1427.443407][ T6230] usb 1-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice=6d.c3 [ 1427.443432][ T6230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.443450][ T6230] usb 1-1: Product: syz [ 1427.443461][ T6230] usb 1-1: Manufacturer: syz [ 1427.443474][ T6230] usb 1-1: SerialNumber: syz [ 1427.545122][T25458] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1427.759641][T25458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.775806][T25458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.806719][ T6230] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1427.807667][ T6230] usb 1-1: invalid MIDI in EP 0 [ 1427.843775][T25492] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1427.843775][T25492] The task syz.4.6401 (25492) triggered the difference, watch for misbehavior. [ 1427.942657][ T6230] snd-usb-audio 1-1:2.87: probe with driver snd-usb-audio failed with error -22 [ 1427.963139][ T6230] usb 1-1: USB disconnect, device number 28 [ 1428.057330][T10086] udevd[10086]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.87/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.281127][T25151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.793971][T25486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1428.794051][T25486] block device autoloading is deprecated and will be removed. [ 1429.412891][T25552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6415'. [ 1429.412922][T25552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6415'. [ 1429.413358][T25552] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1429.501454][T25151] veth0_vlan: entered promiscuous mode [ 1429.516047][T25151] veth1_vlan: entered promiscuous mode [ 1429.604364][T25559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1429.649938][T25151] veth0_macvtap: entered promiscuous mode [ 1429.667076][T25151] veth1_macvtap: entered promiscuous mode [ 1429.708668][T25151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.715163][ T37] audit: type=1326 audit(2000001137.489:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.721121][ T37] audit: type=1326 audit(2000001137.499:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.777576][ T37] audit: type=1326 audit(2000001137.539:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.777626][ T37] audit: type=1326 audit(2000001137.559:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.777918][ T37] audit: type=1326 audit(2000001137.559:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.777962][ T37] audit: type=1326 audit(2000001137.559:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.778011][ T37] audit: type=1326 audit(2000001137.559:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.783989][ T37] audit: type=1326 audit(2000001137.559:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.784036][ T37] audit: type=1326 audit(2000001137.559:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25564 comm="syz.3.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d625c799 code=0x7ffc0000 [ 1429.797246][T25151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.083108][ T9168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.350771][ T9168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.588424][ T9168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.113791][ T9168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.417270][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1432.471340][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1432.492331][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1432.493646][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1432.494761][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1432.623468][T18497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1432.623491][T18497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.701277][T25593] netlink: 'syz.1.6430': attribute type 1 has an invalid length. [ 1432.701291][T25593] netlink: 'syz.1.6430': attribute type 2 has an invalid length. [ 1432.726355][ T5870] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1432.733394][T12018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.733412][T12018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.854411][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6438'. [ 1433.366118][ T5870] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1433.609805][T18497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.609842][T18497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.643384][T25624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6442'. [ 1433.690823][T25619] ip6tnl1: entered allmulticast mode [ 1433.704110][T25624] vlan2: entered promiscuous mode [ 1433.764551][T25602] lo speed is unknown, defaulting to 1000 [ 1433.849761][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1434.019820][T18497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1434.019855][T18497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.079572][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 1434.079590][ T37] audit: type=1326 audit(2000001141.859:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.081853][ T37] audit: type=1326 audit(2000001141.859:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.082449][ T37] audit: type=1326 audit(2000001141.859:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.082745][ T37] audit: type=1326 audit(2000001141.859:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.083541][ T37] audit: type=1326 audit(2000001141.859:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.083858][ T37] audit: type=1326 audit(2000001141.859:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.084135][ T37] audit: type=1326 audit(2000001141.859:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.084727][ T37] audit: type=1326 audit(2000001141.859:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.084968][ T37] audit: type=1326 audit(2000001141.859:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25636 comm="syz.0.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6c807cc799 code=0x7ffc0000 [ 1434.258079][T12018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.258098][T12018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.545949][T21915] Bluetooth: hci4: command tx timeout [ 1436.278941][T18497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1436.278976][T18497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.615453][T25658] bond1: entered promiscuous mode [ 1436.626178][T21915] Bluetooth: hci4: command tx timeout [ 1436.640127][T25658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1436.661065][T25661] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1436.737434][T25661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1436.753681][T25661] lo: entered promiscuous mode [ 1436.759405][T25661] bond1: (slave lo): Enslaving as an active interface with an up link [ 1436.772458][T25661] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1436.794057][ T6230] lo speed is unknown, defaulting to 1000 [ 1436.794399][ T5862] lo speed is unknown, defaulting to 1000 [ 1436.794494][T15507] lo speed is unknown, defaulting to 1000 [ 1437.534159][T25602] chnl_net:caif_netlink_parms(): no params data found [ 1437.702723][T18497] bridge_slave_1: left allmulticast mode [ 1437.702751][T18497] bridge_slave_1: left promiscuous mode [ 1437.702986][T18497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.788078][T18497] bridge_slave_0: left allmulticast mode [ 1437.788105][T18497] bridge_slave_0: left promiscuous mode [ 1437.788411][T18497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.566375][T25703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1438.715950][T21915] Bluetooth: hci4: command tx timeout [ 1438.767278][T18497] erspan0 (unregistering): left promiscuous mode [ 1438.856460][T18497] gretap0 (unregistering): left promiscuous mode [ 1439.299522][T18497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.376679][T18497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.441029][T18497] bond0 (unregistering): Released all slaves [ 1439.461034][T18497] bond1 (unregistering): Released all slaves [ 1439.860555][T25729] batadv_slave_1: entered promiscuous mode [ 1439.860813][T25722] tap0: tun_chr_ioctl cmd 1074025677 [ 1439.861010][T25722] tap0: linktype set to 804 [ 1440.686033][T25728] batadv_slave_1: left promiscuous mode [ 1440.787373][T21915] Bluetooth: hci4: command tx timeout [ 1440.914111][T25602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.914300][T25602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.914607][T25602] bridge_slave_0: entered allmulticast mode [ 1440.941795][T25602] bridge_slave_0: entered promiscuous mode [ 1441.078256][T25602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.078388][T25602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.078623][T25602] bridge_slave_1: entered allmulticast mode [ 1441.081616][T25602] bridge_slave_1: entered promiscuous mode [ 1441.502119][T25602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1441.665487][T25602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.736662][T25780] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1442.030986][T25602] team0: Port device team_slave_0 added [ 1443.445832][T18497] hsr_slave_0: left promiscuous mode [ 1443.471329][T18497] hsr_slave_1: left promiscuous mode [ 1443.472316][T18497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.472340][T18497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.497605][T18497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.497631][T18497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.580558][T18497] veth1_macvtap: left promiscuous mode [ 1443.580668][T18497] veth0_macvtap: left promiscuous mode [ 1443.581057][T18497] veth1_vlan: left promiscuous mode [ 1443.581240][T18497] veth0_vlan: left promiscuous mode [ 1443.670564][T25804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1444.416453][T18497] team0 (unregistering): Port device team_slave_1 removed [ 1444.479969][T18497] team0 (unregistering): Port device team_slave_0 removed [ 1444.785107][T25602] team0: Port device team_slave_1 added [ 1444.863880][T25602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.863896][T25602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.863920][T25602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.930552][T25602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.930568][T25602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.930593][T25602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.254934][T25602] hsr_slave_0: entered promiscuous mode [ 1445.258018][T25602] hsr_slave_1: entered promiscuous mode [ 1445.266427][T25602] debugfs: 'hsr0' already exists in 'hsr' [ 1445.266451][T25602] Cannot create hsr debugfs directory [ 1446.413279][T25865] tmpfs: Bad value for 'mpol' [ 1446.835271][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6538'. [ 1447.759350][T25908] netlink: 'syz.0.6547': attribute type 30 has an invalid length. [ 1447.759599][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6547'. [ 1448.297045][T25908] bond0: option arp_missed_max: invalid value (0) [ 1448.297068][T25908] bond0: option arp_missed_max: allowed values 1 - 255 [ 1449.022411][T25934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6558'. [ 1449.103707][ T37] audit: type=1326 audit(2000001156.879:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25936 comm="syz.5.6559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x0 [ 1449.443411][T25934] bond2 (unregistering): Released all slaves [ 1449.481529][T25947] fuse: Bad value for 'fd' [ 1449.532170][T25949] netlink: 'syz.4.6564': attribute type 12 has an invalid length. [ 1449.532193][T25949] netlink: 'syz.4.6564': attribute type 29 has an invalid length. [ 1449.532205][T25949] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1449.532235][T25949] netlink: 'syz.4.6564': attribute type 1 has an invalid length. [ 1449.532246][T25949] netlink: 'syz.4.6564': attribute type 2 has an invalid length. [ 1449.532257][T25949] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1450.675173][T25602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1450.883306][T25602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1451.123607][T25602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1451.613752][T25971] lo speed is unknown, defaulting to 1000 [ 1451.941589][T25602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1453.388656][T25602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.418323][T25602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.424530][T18508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.424650][T18508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1453.459239][T18508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.459313][T18508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.603170][T25602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1453.796184][T26023] 9p: Bad value for 'rfdno' [ 1454.066987][T26033] pim6reg: entered allmulticast mode [ 1454.071421][T26025] pim6reg: left allmulticast mode [ 1454.405985][T26048] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 1454.534538][T25602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.597412][T25602] veth0_vlan: entered promiscuous mode [ 1454.611794][T25602] veth1_vlan: entered promiscuous mode [ 1454.659674][T25602] veth0_macvtap: entered promiscuous mode [ 1455.336559][T25602] veth1_macvtap: entered promiscuous mode [ 1455.547833][T25602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.571717][T25602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.885329][ T9336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.905446][ T9336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.929153][ T9336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.933746][ T9336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.515427][T26093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6599'. [ 1458.726046][T26096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6599'. [ 1458.774654][T26093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1460.380018][T26096] bond1: entered promiscuous mode [ 1460.380046][T26096] bond1: entered allmulticast mode [ 1460.473258][T26103] dummy0: entered promiscuous mode [ 1460.473551][T26103] dummy0: entered allmulticast mode [ 1460.473974][T26103] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1460.484929][T18495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.484948][T18495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.702633][T18508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.702655][T18508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.595786][ T37] audit: type=1326 audit(2000001171.359:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26153 comm="syz.4.6614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48c487c799 code=0x0 [ 1463.814776][T15507] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1464.792727][T26174] tmpfs: Unknown parameter 'nr' [ 1464.878269][T15507] usb 6-1: Using ep0 maxpacket: 8 [ 1464.894578][T15507] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1464.894604][T15507] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.894620][T15507] usb 6-1: config 179 has no interface number 0 [ 1464.894671][T15507] usb 6-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1464.894696][T15507] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1464.894726][T15507] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1464.894745][T15507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.151988][T26150] netlink: 'syz.5.6613': attribute type 3 has an invalid length. [ 1465.152011][T26150] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6613'. [ 1466.559354][ T6230] usb 6-1: USB disconnect, device number 2 [ 1468.275826][T26219] netlink: 'syz.3.6628': attribute type 1 has an invalid length. [ 1468.275850][T26219] netlink: 'syz.3.6628': attribute type 1 has an invalid length. [ 1470.565957][ T5862] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1470.785860][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 1470.789047][ T5862] usb 4-1: config 2 has an invalid interface number: 87 but max is 0 [ 1470.789072][ T5862] usb 4-1: config 2 has no interface number 0 [ 1470.789117][ T5862] usb 4-1: config 2 interface 87 altsetting 189 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1470.789140][ T5862] usb 4-1: config 2 interface 87 altsetting 189 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1470.789166][ T5862] usb 4-1: config 2 interface 87 has no altsetting 0 [ 1470.791763][ T5862] usb 4-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice=6d.c3 [ 1470.791789][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.791807][ T5862] usb 4-1: Product: syz [ 1470.791820][ T5862] usb 4-1: Manufacturer: syz [ 1470.791833][ T5862] usb 4-1: SerialNumber: syz [ 1470.798980][T26250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1471.478037][T26250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.482060][T26250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.543932][ T5862] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1471.559932][ T5862] usb 4-1: invalid MIDI in EP 0 [ 1471.963299][ T5862] snd-usb-audio 4-1:2.87: probe with driver snd-usb-audio failed with error -22 [ 1472.045175][ T5862] usb 4-1: USB disconnect, device number 99 [ 1472.620280][T10086] udevd[10086]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.87/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1475.543492][ T37] audit: type=1326 audit(2000001183.319:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.547932][ T37] audit: type=1326 audit(2000001183.329:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.550760][ T37] audit: type=1326 audit(2000001183.329:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.550807][ T37] audit: type=1326 audit(2000001183.329:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.551062][ T37] audit: type=1326 audit(2000001183.329:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.552114][ T37] audit: type=1326 audit(2000001183.329:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.552158][ T37] audit: type=1326 audit(2000001183.329:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.552533][ T37] audit: type=1326 audit(2000001183.329:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.553154][ T37] audit: type=1326 audit(2000001183.329:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1475.553199][ T37] audit: type=1326 audit(2000001183.329:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26307 comm="syz.5.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f008595e007 code=0x7ffc0000 [ 1475.590501][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1475.616484][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1475.618692][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1475.636107][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1475.650387][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1475.829965][T26308] lo speed is unknown, defaulting to 1000 [ 1475.987282][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1476.308883][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.308908][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1476.310866][ T5870] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1476.310892][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1476.310911][ T5870] usb 6-1: SerialNumber: syz [ 1476.564671][T26308] chnl_net:caif_netlink_parms(): no params data found [ 1477.319901][ T5870] usb 6-1: 0:2 : does not exist [ 1477.375621][ T5870] usb 6-1: USB disconnect, device number 3 [ 1477.520032][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1477.641785][T26347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6669'. [ 1477.761908][T21915] Bluetooth: hci5: command tx timeout [ 1477.848024][T26308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.848196][T26308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.848366][T26308] bridge_slave_0: entered allmulticast mode [ 1477.850771][T26308] bridge_slave_0: entered promiscuous mode [ 1477.854002][T26308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.854188][T26308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.854369][T26308] bridge_slave_1: entered allmulticast mode [ 1477.926669][T26308] bridge_slave_1: entered promiscuous mode [ 1477.979074][T26308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.982806][T26308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.057934][T26308] team0: Port device team_slave_0 added [ 1478.061183][T26308] team0: Port device team_slave_1 added [ 1478.112633][T26308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.112650][T26308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.112673][T26308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.115004][T26308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.115016][T26308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.115039][T26308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.170165][T26357] tmpfs: Unknown parameter 'nr' [ 1478.295091][T26308] hsr_slave_0: entered promiscuous mode [ 1478.302382][T26308] hsr_slave_1: entered promiscuous mode [ 1478.303256][T26308] debugfs: 'hsr0' already exists in 'hsr' [ 1478.303279][T26308] Cannot create hsr debugfs directory [ 1479.825773][T21915] Bluetooth: hci5: command tx timeout [ 1480.275829][ T5870] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1480.433009][ T5870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.433035][ T5870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1480.447190][ T5870] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1480.447206][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1480.447216][ T5870] usb 2-1: SerialNumber: syz [ 1480.500768][T26387] loop6: detected capacity change from 0 to 7 [ 1480.502978][ C1] blk_print_req_error: 5 callbacks suppressed [ 1480.502998][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.503029][ C1] buffer_io_error: 5 callbacks suppressed [ 1480.503041][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.599263][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.599299][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.600866][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.600898][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.602691][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.602721][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.607397][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.607429][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.735973][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.736010][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.756490][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.756526][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.756774][T26387] ldm_validate_partition_table(): Disk read failed. [ 1480.758040][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.758071][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.767912][T26376] dummy0: entered promiscuous mode [ 1480.768162][T26383] lo speed is unknown, defaulting to 1000 [ 1480.770638][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.770669][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.823630][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1480.823667][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1480.864731][T26387] Dev loop6: unable to read RDB block 0 [ 1480.901090][ T5870] usb 2-1: 0:2 : does not exist [ 1480.934358][T26387] loop6: unable to read partition table [ 1480.934589][T26387] loop6: partition table beyond EOD, truncated [ 1480.934618][T26387] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1480.935642][T26308] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1480.991053][ T5870] usb 2-1: USB disconnect, device number 65 [ 1481.099495][T26308] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1481.134445][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.395868][T21915] Bluetooth: hci5: command tx timeout [ 1483.966411][T26308] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1484.239127][T26308] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1484.538656][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.916514][T21915] Bluetooth: hci5: command tx timeout [ 1485.385804][T20901] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1485.468114][T26308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.483127][T26308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.535808][T20901] usb 2-1: Using ep0 maxpacket: 16 [ 1485.538445][T20901] usb 2-1: config 2 has an invalid interface number: 87 but max is 0 [ 1485.538469][T20901] usb 2-1: config 2 has no interface number 0 [ 1485.538514][T20901] usb 2-1: config 2 interface 87 altsetting 189 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1485.538538][T20901] usb 2-1: config 2 interface 87 altsetting 189 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1485.538564][T20901] usb 2-1: config 2 interface 87 has no altsetting 0 [ 1485.541999][T20901] usb 2-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice=6d.c3 [ 1485.542025][T20901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.542044][T20901] usb 2-1: Product: syz [ 1485.542057][T20901] usb 2-1: Manufacturer: syz [ 1485.542071][T20901] usb 2-1: SerialNumber: syz [ 1485.652256][T26415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1485.660653][T12018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.660778][T12018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.663187][T12018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.663345][T12018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.602981][T20901] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.603932][T20901] usb 2-1: invalid MIDI in EP 0 [ 1486.949959][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 1487.179977][T20901] snd-usb-audio 2-1:2.87: probe with driver snd-usb-audio failed with error -22 [ 1487.267392][T20901] usb 2-1: USB disconnect, device number 66 [ 1487.396523][T10086] udevd[10086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.87/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1487.664169][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 1487.664187][ T37] audit: type=1326 audit(2000001195.439:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.664240][ T37] audit: type=1326 audit(2000001195.439:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.700519][ T37] audit: type=1326 audit(2000001195.479:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.700571][ T37] audit: type=1326 audit(2000001195.479:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.700612][ T37] audit: type=1326 audit(2000001195.479:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.700653][ T37] audit: type=1326 audit(2000001195.479:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.700693][ T37] audit: type=1326 audit(2000001195.479:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.700736][ T37] audit: type=1326 audit(2000001195.479:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.703823][ T37] audit: type=1326 audit(2000001195.479:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1487.703872][ T37] audit: type=1326 audit(2000001195.479:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26441 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c487c799 code=0x7ffc0000 [ 1489.800145][T26308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.985840][ T6230] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1493.319645][T26308] veth0_vlan: entered promiscuous mode [ 1493.337672][T26308] veth1_vlan: entered promiscuous mode [ 1493.368538][ T6230] usb 2-1: Using ep0 maxpacket: 16 [ 1493.375298][ T6230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.375323][ T6230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1493.469037][ T6230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1493.469067][ T6230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.469086][ T6230] usb 2-1: Product: syz [ 1493.469099][ T6230] usb 2-1: Manufacturer: syz [ 1493.469112][ T6230] usb 2-1: SerialNumber: syz [ 1493.642738][T26308] veth0_macvtap: entered promiscuous mode [ 1493.664256][T26477] netlink: 'syz.4.6707': attribute type 3 has an invalid length. [ 1493.664278][T26477] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6707'. [ 1493.670021][T26308] veth1_macvtap: entered promiscuous mode [ 1493.727961][T26308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.745469][T26308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.768584][T18499] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.768831][T18499] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.768871][T18499] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.768914][T18499] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.854069][ T6230] usb 2-1: 0:2 : does not exist [ 1493.868813][ T6230] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1493.968237][ T6230] usb 2-1: USB disconnect, device number 67 [ 1493.986439][T15507] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1494.089430][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1494.135769][T15507] usb 4-1: Using ep0 maxpacket: 16 [ 1494.137561][T15507] usb 4-1: config 2 has an invalid interface number: 87 but max is 0 [ 1494.137582][T15507] usb 4-1: config 2 has no interface number 0 [ 1494.137619][T15507] usb 4-1: config 2 interface 87 altsetting 189 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1494.137639][T15507] usb 4-1: config 2 interface 87 altsetting 189 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1494.137662][T15507] usb 4-1: config 2 interface 87 has no altsetting 0 [ 1494.886644][T15507] usb 4-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice=6d.c3 [ 1494.886674][T15507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.886694][T15507] usb 4-1: Product: syz [ 1494.886708][T15507] usb 4-1: Manufacturer: syz [ 1494.886721][T15507] usb 4-1: SerialNumber: syz [ 1494.961379][T26476] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1495.218913][T26476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.219355][T26476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.277641][T15507] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1495.278629][T15507] usb 4-1: invalid MIDI in EP 0 [ 1495.390274][T15507] snd-usb-audio 4-1:2.87: probe with driver snd-usb-audio failed with error -22 [ 1495.416909][T15507] usb 4-1: USB disconnect, device number 100 [ 1496.262428][T10086] udevd[10086]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.87/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1497.324741][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 1497.324758][ T37] audit: type=1326 audit(2000001205.099:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.326219][ T37] audit: type=1326 audit(2000001205.099:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.328318][ T37] audit: type=1326 audit(2000001205.109:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.328578][ T37] audit: type=1326 audit(2000001205.109:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.328861][ T37] audit: type=1326 audit(2000001205.109:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.329413][ T37] audit: type=1326 audit(2000001205.109:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.329827][ T37] audit: type=1326 audit(2000001205.109:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.330204][ T37] audit: type=1326 audit(2000001205.109:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.330573][ T37] audit: type=1326 audit(2000001205.109:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1497.330884][ T37] audit: type=1326 audit(2000001205.109:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26495 comm="syz.3.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb997c799 code=0x7ffc0000 [ 1498.362764][T18495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.362785][T18495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.405804][ T5872] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1498.669881][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.669951][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1498.755409][ T5872] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1498.757701][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1498.758757][ T5872] usb 4-1: SerialNumber: syz [ 1499.194959][T18497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.194981][T18497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.463121][ T5872] usb 4-1: 0:2 : does not exist [ 1499.463202][ T5872] usb 4-1: unit 5 not found! [ 1499.539140][ T31] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1499.597937][ T5872] usb 4-1: USB disconnect, device number 101 [ 1499.685815][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1499.688407][ T31] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1499.688458][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1499.688484][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1499.688509][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1499.688531][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1499.690053][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1499.690076][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1499.690093][ T31] usb 2-1: Manufacturer: syz [ 1500.195311][ T31] usb 2-1: config 0 descriptor?? [ 1500.378889][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.455733][ T31] rc_core: IR keymap rc-hauppauge not found [ 1501.455755][ T31] Registered IR keymap rc-empty [ 1501.456265][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.476251][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.504190][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1501.511289][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input110 [ 1501.519776][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.597401][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.617175][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.636032][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.656040][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.676116][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.696089][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.696100][ T5870] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1501.720391][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.736073][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.757224][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1501.786792][ T31] mceusb 2-1:0.0: Registered Ѝ with mce emulator interface version 1 [ 1501.786817][ T31] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1501.816191][ T31] usb 2-1: USB disconnect, device number 68 [ 1501.847041][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 1501.851423][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.851447][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1501.854275][ T5870] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1501.854299][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.854318][ T5870] usb 4-1: Product: syz [ 1501.854331][ T5870] usb 4-1: Manufacturer: syz [ 1501.854344][ T5870] usb 4-1: SerialNumber: syz [ 1502.104806][ T5870] usb 4-1: 0:2 : does not exist [ 1502.132754][ T5870] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1502.297290][ T5870] usb 4-1: USB disconnect, device number 102 [ 1502.365538][ T5924] udevd[5924]: setting mode of /dev/bus/usb/004/102 to 020664 failed: No such file or directory [ 1502.385467][ T5924] udevd[5924]: setting owner of /dev/bus/usb/004/102 to uid=0, gid=0 failed: No such file or directory [ 1502.475867][T18102] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1502.489225][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1502.635891][T18102] usb 6-1: Using ep0 maxpacket: 16 [ 1502.637935][T18102] usb 6-1: config 2 has an invalid interface number: 87 but max is 0 [ 1502.637958][T18102] usb 6-1: config 2 has no interface number 0 [ 1502.638003][T18102] usb 6-1: config 2 interface 87 altsetting 189 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1502.638033][T18102] usb 6-1: config 2 interface 87 altsetting 189 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1502.638059][T18102] usb 6-1: config 2 interface 87 has no altsetting 0 [ 1502.644041][T18102] usb 6-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice=6d.c3 [ 1502.644066][T18102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.644084][T18102] usb 6-1: Product: syz [ 1502.644096][T18102] usb 6-1: Manufacturer: syz [ 1502.644109][T18102] usb 6-1: SerialNumber: syz [ 1502.698782][T26538] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1503.456195][T26538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.456744][T26538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.539220][T18102] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1503.540201][T18102] usb 6-1: invalid MIDI in EP 0 [ 1504.033721][T18102] snd-usb-audio 6-1:2.87: probe with driver snd-usb-audio failed with error -22 [ 1504.117646][T18102] usb 6-1: USB disconnect, device number 4 [ 1504.600704][T10086] udevd[10086]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.87/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1505.981648][T18102] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1506.156087][T18102] usb 7-1: Using ep0 maxpacket: 16 [ 1506.173742][T18102] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.173808][T18102] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1506.173833][T18102] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1506.176833][T18102] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1506.176859][T18102] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1506.176878][T18102] usb 7-1: Manufacturer: syz [ 1506.237776][T18102] usb 7-1: config 0 descriptor?? [ 1507.489098][ T5862] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1508.097834][T18102] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1508.411655][T18102] usb 2-1: Using ep0 maxpacket: 16 [ 1508.433825][T18102] usb 2-1: config 2 has an invalid interface number: 87 but max is 0 [ 1508.433852][T18102] usb 2-1: config 2 has no interface number 0 [ 1508.433897][T18102] usb 2-1: config 2 interface 87 altsetting 189 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1508.433920][T18102] usb 2-1: config 2 interface 87 altsetting 189 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1508.433945][T18102] usb 2-1: config 2 interface 87 has no altsetting 0 [ 1508.495849][T18102] usb 2-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice=6d.c3 [ 1508.495877][T18102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.495897][T18102] usb 2-1: Product: syz [ 1508.495910][T18102] usb 2-1: Manufacturer: syz [ 1508.495924][T18102] usb 2-1: SerialNumber: syz [ 1508.505768][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 1508.508118][ T5862] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1508.508167][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1508.508194][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1508.508218][ T5862] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1508.508240][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1508.509553][ T5862] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1508.509578][ T5862] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1508.509596][ T5862] usb 6-1: Manufacturer: syz [ 1508.662690][ T5862] usb 6-1: config 0 descriptor?? [ 1508.671580][T26588] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1508.767800][ T6230] usb 7-1: USB disconnect, device number 2 [ 1508.941172][T26588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.957778][T26588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.007110][T18102] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1509.008076][T18102] usb 2-1: invalid MIDI in EP 0 [ 1509.377919][T18102] snd-usb-audio 2-1:2.87: probe with driver snd-usb-audio failed with error -22 [ 1509.421265][T18102] usb 2-1: USB disconnect, device number 69 [ 1509.594336][T26603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6748'. [ 1509.648472][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.87/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1511.539889][ T5848] udevd[5848]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1511.585352][ T5972] udevd[5972]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1512.265743][ T5862] rc_core: IR keymap rc-hauppauge not found [ 1512.265765][ T5862] Registered IR keymap rc-empty [ 1512.266222][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.364303][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.377430][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1513.396602][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input111 [ 1513.403356][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.416908][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.436989][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.456250][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.489538][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.506440][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.526741][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.546188][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.566260][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.586703][ T5862] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1513.610083][ T5862] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1513.610107][ T5862] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1513.637595][ T5862] usb 6-1: USB disconnect, device number 5 [ 1522.428323][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1527.514672][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 1528.025856][T20901] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1528.185923][T20901] usb 2-1: Using ep0 maxpacket: 32 [ 1528.217983][T20901] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1528.218010][T20901] usb 2-1: config 0 has no interface number 0 [ 1528.245884][T20901] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1528.245913][T20901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.245931][T20901] usb 2-1: Product: syz [ 1528.245945][T20901] usb 2-1: Manufacturer: syz [ 1528.245959][T20901] usb 2-1: SerialNumber: syz [ 1528.293792][T20901] usb 2-1: config 0 descriptor?? [ 1528.364476][T20901] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1528.564897][T18102] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1528.583283][T20901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1530.325794][T18102] usb 7-1: Using ep0 maxpacket: 32 [ 1530.328493][T18102] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1530.328571][T18102] usb 7-1: config 0 has no interface number 0 [ 1530.370039][T18102] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1530.370122][T18102] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.370142][T18102] usb 7-1: Product: syz [ 1530.370155][T18102] usb 7-1: Manufacturer: syz [ 1530.370169][T18102] usb 7-1: SerialNumber: syz [ 1530.785011][T20901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1531.712109][T18102] usb 7-1: config 0 descriptor?? [ 1531.893732][T18102] usb 7-1: can't set config #0, error -71 [ 1532.035936][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1532.040744][T18102] usb 7-1: USB disconnect, device number 4 [ 1532.045861][ T5862] usb 2-1: USB disconnect, device number 70 [ 1532.124387][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1532.148229][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1532.149064][ T5862] quatech2 2-1:0.51: device disconnected [ 1532.347277][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1532.353413][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1532.359977][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1532.405836][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1532.412921][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1533.355426][T18102] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1533.518351][T18102] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.518405][T18102] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1533.518428][T18102] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.523520][T18102] usb 7-1: config 0 descriptor?? [ 1533.562729][T18102] pwc: Askey VC010 type 2 USB webcam detected. [ 1533.936273][T18102] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1533.937111][T18102] pwc: recv_control_msg error -32 req 02 val 2700 [ 1533.938022][T18102] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1533.941716][T26784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.942568][T26784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.944412][T26784] program syz.6.6799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1534.247790][T18102] pwc: recv_control_msg error -71 req 04 val 1300 [ 1534.248282][T18102] pwc: recv_control_msg error -71 req 04 val 1400 [ 1534.252579][T18102] pwc: recv_control_msg error -71 req 02 val 2000 [ 1534.254981][T18102] pwc: recv_control_msg error -71 req 02 val 2100 [ 1534.288031][T18102] pwc: recv_control_msg error -71 req 04 val 1500 [ 1534.288517][T18102] pwc: recv_control_msg error -71 req 02 val 2500 [ 1534.288952][T18102] pwc: recv_control_msg error -71 req 02 val 2400 [ 1534.293099][T18102] pwc: recv_control_msg error -71 req 02 val 2600 [ 1534.293536][T18102] pwc: recv_control_msg error -71 req 02 val 2900 [ 1534.328397][T18102] pwc: recv_control_msg error -71 req 02 val 2800 [ 1534.329047][T18102] pwc: recv_control_msg error -71 req 04 val 1100 [ 1534.329487][T18102] pwc: recv_control_msg error -71 req 04 val 1200 [ 1534.396166][T18102] pwc: Registered as video103. [ 1534.399413][T18102] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input112 [ 1534.451263][T26782] lo speed is unknown, defaulting to 1000 [ 1534.467498][T18102] usb 7-1: USB disconnect, device number 5 [ 1534.639423][T21915] Bluetooth: hci6: command tx timeout [ 1534.795878][ T5862] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1534.965899][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 1534.967918][ T5862] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1534.967943][ T5862] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.967962][ T5862] usb 2-1: config 179 has no interface number 0 [ 1534.968002][ T5862] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1534.968015][ T5862] usb 2-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1534.968028][ T5862] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1534.968046][ T5862] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1534.968058][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.704047][T26782] chnl_net:caif_netlink_parms(): no params data found [ 1536.755872][T21915] Bluetooth: hci6: command tx timeout [ 1537.016329][T26836] misc userio: No port type given on /dev/userio [ 1537.877279][T18102] usb 2-1: USB disconnect, device number 71 [ 1538.785850][T21915] Bluetooth: hci6: command tx timeout [ 1539.506873][T18102] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1540.080978][T26782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.081099][T26782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.081286][T26782] bridge_slave_0: entered allmulticast mode [ 1540.083899][T26782] bridge_slave_0: entered promiscuous mode [ 1540.087361][T26782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.087503][T26782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.087638][T26782] bridge_slave_1: entered allmulticast mode [ 1540.089810][T26782] bridge_slave_1: entered promiscuous mode [ 1540.173228][T18102] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1540.173281][T18102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.197543][T18102] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1540.197568][T18102] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1540.197585][T18102] usb 4-1: Manufacturer: syz [ 1540.249106][T26782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.288980][T18102] usb 4-1: config 0 descriptor?? [ 1540.291263][T26782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.355902][ T5862] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1540.405805][T20901] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1540.433224][T26782] team0: Port device team_slave_0 added [ 1540.435262][T26782] team0: Port device team_slave_1 added [ 1540.455820][T18102] rc_core: IR keymap rc-hauppauge not found [ 1540.455839][T18102] Registered IR keymap rc-empty [ 1540.457654][T18102] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1540.460742][T18102] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input113 [ 1540.528728][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.528780][ T5862] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1540.528803][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.605814][T20901] usb 7-1: Using ep0 maxpacket: 16 [ 1540.642527][T20901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.642590][T20901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1540.643013][T20901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1540.643035][T20901] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1540.643056][T20901] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1540.643975][ T5862] usb 2-1: config 0 descriptor?? [ 1540.664554][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1540.674209][T20901] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1540.674243][T20901] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1540.674262][T20901] usb 7-1: Manufacturer: syz [ 1540.779938][T26860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.792202][T26860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.795161][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 1540.815138][T20901] usb 7-1: config 0 descriptor?? [ 1540.840864][T18102] usb 4-1: USB disconnect, device number 103 [ 1540.867828][ T5804] Bluetooth: hci6: command tx timeout [ 1541.071073][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1541.071801][ T5862] pwc: recv_control_msg error -32 req 02 val 2700 [ 1541.072524][ T5862] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1541.098778][T26852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.100188][T26852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.104295][T26852] program syz.1.6816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1541.219668][T26782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.219684][T26782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.219758][T26782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.314639][ T5862] pwc: recv_control_msg error -71 req 04 val 1300 [ 1541.315978][ T5862] pwc: recv_control_msg error -71 req 04 val 1400 [ 1541.316907][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 1541.328125][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 1541.331702][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 1541.338284][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 1541.339612][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 1541.340070][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 1541.340513][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 1541.340950][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 1541.341606][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 1541.344216][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 1541.369532][ T5862] pwc: Registered as video103. [ 1541.385596][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input114 [ 1541.419908][ T5862] usb 2-1: USB disconnect, device number 72 [ 1541.610409][T26782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.610427][T26782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.610452][T26782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.886665][T20913] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1542.695745][T20913] usb 6-1: Using ep0 maxpacket: 16 [ 1542.698097][T20913] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1542.698148][T20913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1542.698174][T20913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1542.698198][T20913] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1542.698218][T20913] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.702697][T20913] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1542.702723][T20913] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1542.702741][T20913] usb 6-1: Manufacturer: syz [ 1542.719538][T20913] usb 6-1: config 0 descriptor?? [ 1543.285992][ T6230] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1543.305824][T20901] rc_core: IR keymap rc-hauppauge not found [ 1543.305843][T20901] Registered IR keymap rc-empty [ 1543.305988][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1543.325875][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1543.347492][T20901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1543.350825][T20901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input115 [ 1543.495544][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1543.644433][ T6230] usb 4-1: Using ep0 maxpacket: 8 [ 1544.320902][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.330356][ T6230] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1544.330381][ T6230] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.330399][ T6230] usb 4-1: config 179 has no interface number 0 [ 1544.330494][ T6230] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1544.330517][ T6230] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1544.330543][ T6230] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1544.330575][ T6230] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1544.330644][ T6230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.412746][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.425967][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.455804][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.475817][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.500689][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.515831][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.535901][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.555827][T20901] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1544.578928][T20901] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1544.578952][T20901] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1544.604778][T20901] usb 7-1: USB disconnect, device number 6 [ 1544.776027][T20913] rc_core: IR keymap rc-hauppauge not found [ 1544.776046][T20913] Registered IR keymap rc-empty [ 1544.776488][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1544.796091][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1544.835002][T26793] udevd[26793]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1544.882122][T26893] misc userio: No port type given on /dev/userio [ 1544.974302][T20913] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 1545.740921][T20913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input116 [ 1545.912236][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.039169][ T5872] usb 4-1: USB disconnect, device number 104 [ 1546.090326][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.107207][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.130970][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.204807][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.234710][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.246706][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.287599][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.330203][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.395185][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.406160][T20913] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1546.428998][T20913] mceusb 6-1:0.0: Registered Ѝ with mce emulator interface version 1 [ 1546.429021][T20913] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1546.530970][T20913] usb 6-1: USB disconnect, device number 6 [ 1547.326033][T20913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1547.344318][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1547.344350][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.451797][T26782] hsr_slave_0: entered promiscuous mode [ 1547.452974][T26782] hsr_slave_1: entered promiscuous mode [ 1547.453905][T26782] debugfs: 'hsr0' already exists in 'hsr' [ 1547.453924][T26782] Cannot create hsr debugfs directory [ 1547.479580][T20913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.479628][T20913] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1547.479641][T20913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.485443][T20913] usb 6-1: config 0 descriptor?? [ 1547.495919][ T5801] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1547.589652][T20913] pwc: Askey VC010 type 2 USB webcam detected. [ 1547.657431][ T5801] usb 2-1: Using ep0 maxpacket: 16 [ 1547.660464][ T5801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.660510][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1547.660536][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1547.660557][ T5801] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1547.660579][ T5801] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1547.662287][ T5801] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1547.662312][ T5801] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1547.662331][ T5801] usb 2-1: Manufacturer: syz [ 1547.758486][ T5801] usb 2-1: config 0 descriptor?? [ 1547.819075][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1547.820614][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.962022][T20913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1547.964648][T20913] pwc: recv_control_msg error -32 req 02 val 2700 [ 1547.977030][T20913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1547.993032][T26911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.993849][T26911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.014223][T26911] program syz.5.6831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1548.258567][T20913] pwc: recv_control_msg error -71 req 04 val 1300 [ 1548.259051][T20913] pwc: recv_control_msg error -71 req 04 val 1400 [ 1548.262073][T20913] pwc: recv_control_msg error -71 req 02 val 2000 [ 1548.262744][T20913] pwc: recv_control_msg error -71 req 02 val 2100 [ 1548.263193][T20913] pwc: recv_control_msg error -71 req 04 val 1500 [ 1548.263679][T20913] pwc: recv_control_msg error -71 req 02 val 2500 [ 1548.264122][T20913] pwc: recv_control_msg error -71 req 02 val 2400 [ 1548.264537][T20913] pwc: recv_control_msg error -71 req 02 val 2600 [ 1548.266038][T20913] pwc: recv_control_msg error -71 req 02 val 2900 [ 1548.266482][T20913] pwc: recv_control_msg error -71 req 02 val 2800 [ 1548.269484][T20913] pwc: recv_control_msg error -71 req 04 val 1100 [ 1548.275120][T20913] pwc: recv_control_msg error -71 req 04 val 1200 [ 1548.275793][ T31] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1548.285352][T20913] pwc: Registered as video103. [ 1548.296848][T20913] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input117 [ 1548.606712][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1548.805173][ T31] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1548.810798][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1548.810896][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1548.811090][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1548.811158][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1549.130122][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1549.130151][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1549.130168][ T31] usb 4-1: Manufacturer: syz [ 1549.143770][T20913] usb 6-1: USB disconnect, device number 7 [ 1549.154416][ T31] usb 4-1: config 0 descriptor?? [ 1549.991738][ T31] rc_core: IR keymap rc-hauppauge not found [ 1549.991759][ T31] Registered IR keymap rc-empty [ 1549.992183][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1550.007536][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1550.707833][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1550.732221][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input118 [ 1550.868664][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1550.890643][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1550.907591][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1550.928540][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1550.966651][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1550.995019][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1551.009115][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1551.034958][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1551.050812][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1551.066402][ T31] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1551.140178][ T31] mceusb 4-1:0.0: Registered Ѝ with mce emulator interface version 1 [ 1551.140195][ T31] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1551.162316][ T5801] rc_core: IR keymap rc-hauppauge not found [ 1551.162333][ T5801] Registered IR keymap rc-empty [ 1551.162476][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.175800][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.200934][ T5801] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1551.219941][ T5801] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input119 [ 1551.247490][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.263017][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.263037][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.276992][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.286100][ T31] usb 4-1: USB disconnect, device number 105 [ 1551.296581][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.315834][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.335825][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.365840][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.385878][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.406011][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.775933][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1551.795881][ T5801] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1552.041549][ T5801] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1552.041571][ T5801] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1553.027310][ T5801] usb 2-1: USB disconnect, device number 73 [ 1553.822180][ T13] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1553.822221][ T13] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.985873][ T5801] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1555.156168][ T5801] usb 6-1: Using ep0 maxpacket: 16 [ 1555.160844][ T5801] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1555.160895][ T5801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1555.160919][ T5801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1555.160944][ T5801] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1555.160966][ T5801] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1555.166239][ T5801] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1555.166265][ T5801] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1555.166292][ T5801] usb 6-1: Manufacturer: syz [ 1555.301164][ T5801] usb 6-1: config 0 descriptor?? [ 1557.641152][ T13] bridge_slave_1: left allmulticast mode [ 1557.641180][ T13] bridge_slave_1: left promiscuous mode [ 1557.641427][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.655812][ T5801] rc_core: IR keymap rc-hauppauge not found [ 1557.655829][ T5801] Registered IR keymap rc-empty [ 1557.669858][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.686117][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.708430][ T5801] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1557.711540][ T5801] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input120 [ 1557.826387][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.850797][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.857423][ T13] bridge_slave_0: left allmulticast mode [ 1557.857448][ T13] bridge_slave_0: left promiscuous mode [ 1557.857686][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.882126][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.896591][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.915974][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.936153][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.955977][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.976140][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1557.996141][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1558.016138][ T5801] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1558.023246][T27018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6861'. [ 1558.047354][ T5801] mceusb 6-1:0.0: Registered Ѝ with mce emulator interface version 1 [ 1558.047375][ T5801] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1558.071771][ T5862] usb 6-1: USB disconnect, device number 8 [ 1559.077732][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.886105][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 1559.920255][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.937878][ T13] bond0 (unregistering): Released all slaves [ 1560.398236][ T13] tipc: Left network mode [ 1560.526059][ T5862] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1560.696621][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 1560.708408][ T5862] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1560.708434][ T5862] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.708453][ T5862] usb 4-1: config 179 has no interface number 0 [ 1560.708506][ T5862] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1560.708525][ T5862] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1560.708549][ T5862] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1560.708579][ T5862] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1560.708600][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.822431][ T5872] usb 4-1: USB disconnect, device number 106 [ 1562.114267][T27080] netlink: 'syz.6.6881': attribute type 14 has an invalid length. [ 1562.114289][T27080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6881'. [ 1563.228662][T27080] bond0: option xmit_hash_policy: invalid value (158) [ 1564.378678][T27103] netlink: 'syz.1.6887': attribute type 29 has an invalid length. [ 1564.378699][T27103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6887'. [ 1565.391339][T27103] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1566.168896][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1566.925788][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1566.928049][ T31] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1566.928073][ T31] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.928091][ T31] usb 7-1: config 179 has no interface number 0 [ 1566.928148][ T31] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1566.928168][ T31] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1566.928193][ T31] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1566.928222][ T31] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1566.928243][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.463117][ T5801] usb 7-1: USB disconnect, device number 7 [ 1569.804832][ T13] hsr_slave_0: left promiscuous mode [ 1569.836122][ T13] hsr_slave_1: left promiscuous mode [ 1569.837148][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.837172][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.865745][ T5801] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1569.886932][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.886958][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.017956][ T5801] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1570.018013][ T5801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.019749][ T5801] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1570.019773][ T5801] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1570.019792][ T5801] usb 7-1: Manufacturer: syz [ 1570.074384][ T13] veth0_macvtap: left promiscuous mode [ 1570.075164][ T5801] usb 7-1: config 0 descriptor?? [ 1570.081012][ T13] veth1_vlan: left promiscuous mode [ 1570.081086][ T13] veth0_vlan: left promiscuous mode [ 1570.165718][ T5801] rc_core: IR keymap rc-hauppauge not found [ 1570.165739][ T5801] Registered IR keymap rc-empty [ 1570.168912][ T5801] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1570.403627][ T5801] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input121 [ 1570.673843][ C0] igorplugusb 7-1:0.0: Error: urb status = -32 [ 1570.832952][T27176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.861962][T27176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.021548][ T5801] usb 7-1: USB disconnect, device number 8 [ 1571.420360][ T5862] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1571.696192][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 1571.997434][ T5862] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1571.997461][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.997479][ T5862] usb 2-1: config 0 has no interface number 0 [ 1572.002175][ T5862] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1572.002202][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.002221][ T5862] usb 2-1: Product: syz [ 1572.002234][ T5862] usb 2-1: Manufacturer: syz [ 1572.002248][ T5862] usb 2-1: SerialNumber: syz [ 1572.096204][ T5862] usb 2-1: config 0 descriptor?? [ 1572.370302][ T5862] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1572.370336][ T5862] uvcvideo 2-1:0.31: No valid video chain found. [ 1572.392004][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1572.436774][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1572.575996][ T5872] usb 2-1: USB disconnect, device number 74 [ 1572.986050][ T5801] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1573.055131][T26782] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1573.104140][T26782] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1573.136250][ T5801] usb 7-1: Using ep0 maxpacket: 8 [ 1573.149122][ T5801] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1573.149147][ T5801] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.149165][ T5801] usb 7-1: config 179 has no interface number 0 [ 1573.149208][ T5801] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1573.149230][ T5801] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1573.149255][ T5801] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1573.149287][ T5801] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1573.149307][ T5801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.225757][T19495] usb 7-1: USB disconnect, device number 9 [ 1575.226637][T26782] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1575.299474][T26782] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1575.343944][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6916'. [ 1575.801940][T26782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.873374][T26782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.943525][T18495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.943656][T18495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.990708][T12016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.015859][T12016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.298397][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6923'. [ 1578.611762][T27252] misc userio: No port type given on /dev/userio [ 1579.708096][T19495] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1580.008846][T19495] usb 4-1: Using ep0 maxpacket: 8 [ 1580.148416][T19495] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1580.148490][T19495] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.149431][T19495] usb 4-1: config 179 has no interface number 0 [ 1580.191405][T19495] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1580.191903][T19495] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1580.192597][T19495] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1580.195013][T19495] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1580.507902][ T13] IPVS: stop unused estimator thread 0... [ 1580.508199][T19495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.095786][T20913] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1581.287529][T26782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.435812][T20913] usb 7-1: Using ep0 maxpacket: 16 [ 1581.458334][T20913] usb 7-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1581.458388][T20913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1581.458414][T20913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1581.458438][T20913] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1581.458459][T20913] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1582.199663][ T5872] usb 4-1: USB disconnect, device number 107 [ 1582.295787][T20913] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1582.295816][T20913] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1582.295834][T20913] usb 7-1: Manufacturer: syz [ 1582.304316][T20913] usb 7-1: config 0 descriptor?? [ 1582.851847][T26782] veth0_vlan: entered promiscuous mode [ 1582.889958][T26782] veth1_vlan: entered promiscuous mode [ 1582.975602][T26782] veth0_macvtap: entered promiscuous mode [ 1583.000878][T26782] veth1_macvtap: entered promiscuous mode [ 1583.023786][T26782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.029322][T20913] rc_core: IR keymap rc-hauppauge not found [ 1583.029341][T20913] Registered IR keymap rc-empty [ 1583.033273][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.046327][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.067706][T20913] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1583.073806][T20913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input122 [ 1583.077267][T26782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.102330][ T9336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.102669][ T9336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.102707][ T9336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.102850][ T9336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.116486][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1583.153043][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.176029][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.208036][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.228515][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.247167][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.266476][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.269809][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.269842][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1583.269855][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.286386][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.303531][ T31] usb 6-1: config 0 descriptor?? [ 1583.309629][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.328784][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.345471][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 1583.350962][T20913] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1583.382678][T20913] mceusb 7-1:0.0: Registered Ѝ with mce emulator interface version 1 [ 1583.382704][T20913] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1583.478244][T20913] usb 7-1: USB disconnect, device number 10 [ 1583.791424][ T6375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.791451][ T6375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.894125][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1583.895021][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 1583.895808][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1583.898029][T27295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.898440][T27295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.938705][T27295] program syz.5.6936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1584.143300][ T31] pwc: recv_control_msg error -71 req 04 val 1300 [ 1584.143770][ T31] pwc: recv_control_msg error -71 req 04 val 1400 [ 1584.144230][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 1584.144675][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 1584.165815][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 1584.167363][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 1584.167826][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 1584.168283][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 1584.170309][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 1584.175402][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 1584.243019][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 1584.256172][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 1584.291924][ T31] pwc: Registered as video103. [ 1584.295361][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input123 [ 1585.067211][ T31] usb 6-1: USB disconnect, device number 9 [ 1586.352291][T18495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.352311][T18495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.805254][T27327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6945'. [ 1587.265820][T20901] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1587.415740][T20901] usb 7-1: Using ep0 maxpacket: 8 [ 1587.442578][T20901] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1587.442606][T20901] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.442625][T20901] usb 7-1: config 179 has no interface number 0 [ 1587.442670][T20901] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1587.442691][T20901] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1587.442717][T20901] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1587.442749][T20901] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1587.442771][T20901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.525765][ T5872] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1587.800402][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 1587.802817][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.802841][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1587.828874][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1587.828902][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.828920][ T5872] usb 5-1: Product: syz [ 1587.828933][ T5872] usb 5-1: Manufacturer: syz [ 1587.828946][ T5872] usb 5-1: SerialNumber: syz [ 1587.993623][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6950'. [ 1587.993715][T27342] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1588.215131][ T5872] usb 5-1: 0:2 : does not exist [ 1588.233125][ T5872] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1589.062747][T20901] usb 7-1: USB disconnect, device number 11 [ 1589.156820][ T5872] usb 5-1: USB disconnect, device number 28 [ 1589.421110][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1592.236461][T27406] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1593.128724][ T31] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1593.765748][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1593.776104][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.776130][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1593.909061][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1593.909090][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.909108][ T31] usb 4-1: Product: syz [ 1593.909121][ T31] usb 4-1: Manufacturer: syz [ 1593.909134][ T31] usb 4-1: SerialNumber: syz [ 1594.185286][ T31] usb 4-1: 0:2 : does not exist [ 1594.213946][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1595.206437][ T31] usb 4-1: USB disconnect, device number 108 [ 1595.923919][T27447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6987'. [ 1595.939625][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1596.105943][ T31] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1596.255991][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 1596.258262][ T31] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1596.258286][ T31] usb 4-1: config 0 has no interface number 0 [ 1596.261540][ T31] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1596.261566][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.261585][ T31] usb 4-1: Product: syz [ 1596.261599][ T31] usb 4-1: Manufacturer: syz [ 1596.261612][ T31] usb 4-1: SerialNumber: syz [ 1596.295812][T20916] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1596.445791][T20916] usb 5-1: Using ep0 maxpacket: 8 [ 1596.567750][T27447] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1596.576055][T20916] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1596.576081][T20916] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.576100][T20916] usb 5-1: config 179 has no interface number 0 [ 1596.576150][T20916] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1596.576170][T20916] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1596.576194][T20916] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1596.576224][T20916] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1596.576246][T20916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.645917][T27447] block (null): Could not allocate knbd recv work queue. [ 1596.691199][ T31] usb 4-1: config 0 descriptor?? [ 1596.701295][T27447] nbd: failed to add new device [ 1596.772003][ T31] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1596.933729][T27458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6988'. [ 1596.973284][ T31] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1596.990971][ T31] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1597.215008][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 100 [ 1597.389087][T20916] usb 5-1: USB disconnect, device number 29 [ 1597.417564][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1597.419713][ T5872] usb 4-1: USB disconnect, device number 109 [ 1597.436567][ T5872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1597.456678][ T5872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1597.457962][ T5872] quatech2 4-1:0.51: device disconnected [ 1597.482660][ T31] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1597.622426][T27484] FAULT_INJECTION: forcing a failure. [ 1597.622426][T27484] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.622461][T27484] CPU: 1 UID: 0 PID: 27484 Comm: syz.1.7002 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1597.622486][T27484] Tainted: [L]=SOFTLOCKUP [ 1597.622493][T27484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1597.622505][T27484] Call Trace: [ 1597.622513][T27484] [ 1597.622522][T27484] dump_stack_lvl+0xe8/0x150 [ 1597.622555][T27484] should_fail_ex+0x46b/0x600 [ 1597.622583][T27484] should_failslab+0xa8/0x100 [ 1597.622604][T27484] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1597.622631][T27484] ? __alloc_skb+0x1d0/0x7d0 [ 1597.622653][T27484] ? lockdep_hardirqs_on+0x7a/0x110 [ 1597.622683][T27484] __alloc_skb+0x1d0/0x7d0 [ 1597.622710][T27484] netlink_sendmsg+0x5d4/0xb40 [ 1597.622865][T27484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1597.622888][T27484] ? unwind_get_return_address+0x4d/0x90 [ 1597.622911][T27484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1597.622939][T27484] ____sys_sendmsg+0x94c/0x9c0 [ 1597.622968][T27484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1597.622998][T27484] ? import_iovec+0x73/0xa0 [ 1597.623031][T27484] ___sys_sendmsg+0x2a5/0x360 [ 1597.623060][T27484] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.623114][T27484] ? __fget_files+0x2a/0x420 [ 1597.623134][T27484] ? __fget_files+0x3a6/0x420 [ 1597.623165][T27484] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1597.623192][T27484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1597.623224][T27484] ? __pfx_ksys_write+0x10/0x10 [ 1597.623260][T27484] do_syscall_64+0x14d/0xf80 [ 1597.623283][T27484] ? trace_irq_disable+0x3b/0x150 [ 1597.623302][T27484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.623321][T27484] ? clear_bhb_loop+0x40/0x90 [ 1597.623343][T27484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.623361][T27484] RIP: 0033:0x7fcf015ac799 [ 1597.623379][T27484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.623396][T27484] RSP: 002b:00007fceff7fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1597.623417][T27484] RAX: ffffffffffffffda RBX: 00007fcf01825fa0 RCX: 00007fcf015ac799 [ 1597.623431][T27484] RDX: 6b7e369c4a37b0ea RSI: 0000200000000200 RDI: 0000000000000006 [ 1597.623444][T27484] RBP: 00007fceff7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.623455][T27484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.623467][T27484] R13: 00007fcf01826038 R14: 00007fcf01825fa0 R15: 00007ffe0fd25ec8 [ 1597.623496][T27484] [ 1597.703069][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 1598.397530][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.397585][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1598.397610][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1598.397630][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1598.397650][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.442572][ T31] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1598.442600][ T31] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1598.442618][ T31] usb 7-1: Manufacturer: syz [ 1598.526561][ T31] usb 7-1: config 0 descriptor?? [ 1598.908356][T27505] netlink: 'syz.5.7007': attribute type 14 has an invalid length. [ 1598.908377][T27505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7007'. [ 1599.597846][T21915] Bluetooth: hci5: command 0x0406 tx timeout [ 1599.714922][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1599.714940][ T37] audit: type=1326 audit(2000001307.489:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.757473][ T37] audit: type=1326 audit(2000001307.489:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.815904][ T37] audit: type=1326 audit(2000001307.599:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.816034][ T37] audit: type=1326 audit(2000001307.599:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.816185][ T37] audit: type=1326 audit(2000001307.599:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.816539][ T37] audit: type=1326 audit(2000001307.599:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.816870][ T37] audit: type=1326 audit(2000001307.599:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.816980][ T37] audit: type=1326 audit(2000001307.599:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.817239][ T37] audit: type=1326 audit(2000001307.599:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1599.817440][ T37] audit: type=1326 audit(2000001307.599:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27511 comm="syz.5.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008595c799 code=0x7ffc0000 [ 1600.186807][T20916] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1600.340400][T20916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.340426][T20916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1600.343557][T20916] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1600.343583][T20916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1600.343602][T20916] usb 6-1: SerialNumber: syz [ 1600.576044][T19495] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1600.617571][T20916] usb 6-1: 0:2 : does not exist [ 1600.692848][T20916] usb 6-1: USB disconnect, device number 10 [ 1600.727154][T19495] usb 5-1: Using ep0 maxpacket: 32 [ 1600.733671][T19495] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1600.733695][T19495] usb 5-1: config 0 has no interface number 0 [ 1600.757691][T19495] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1600.757719][T19495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.757944][T19495] usb 5-1: Product: syz [ 1600.757958][T19495] usb 5-1: Manufacturer: syz [ 1600.757971][T19495] usb 5-1: SerialNumber: syz [ 1600.801615][T19495] usb 5-1: config 0 descriptor?? [ 1600.827552][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1600.830091][T19495] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1601.185750][ T31] rc_core: IR keymap rc-hauppauge not found [ 1601.185771][ T31] Registered IR keymap rc-empty [ 1601.185979][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1601.206055][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1601.231209][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1601.276099][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input124 [ 1601.988401][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.016372][T19495] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1602.022771][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.037361][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.057545][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.083839][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.096343][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.131914][T19495] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1602.188743][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.205830][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.213075][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 100 [ 1602.226122][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.247011][ T31] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1602.317152][ T31] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1602.324161][ T31] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1602.435102][ T31] usb 7-1: USB disconnect, device number 12 [ 1602.550445][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1602.552197][ T5872] usb 5-1: USB disconnect, device number 30 [ 1602.608778][ T5872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1602.643340][ T5872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1602.644589][ T5872] quatech2 5-1:0.51: device disconnected [ 1602.913259][T27557] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1602.913642][T27557] team0 (unregistering): Port device team_slave_0 removed [ 1602.914755][T27562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7025'. [ 1602.989342][T27557] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1602.989811][T27557] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1602.990249][T27557] team0 (unregistering): Port device team_slave_1 removed [ 1603.169436][ T31] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1603.869355][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1603.871516][ T31] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1603.871540][ T31] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.871559][ T31] usb 7-1: config 179 has no interface number 0 [ 1603.871601][ T31] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 1603.871622][ T31] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1603.871647][ T31] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1603.871677][ T31] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1603.871698][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.632329][T27588] FAULT_INJECTION: forcing a failure. [ 1604.632329][T27588] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.632389][T27588] CPU: 1 UID: 0 PID: 27588 Comm: syz.1.7034 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1604.632415][T27588] Tainted: [L]=SOFTLOCKUP [ 1604.632423][T27588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1604.632435][T27588] Call Trace: [ 1604.632443][T27588] [ 1604.632453][T27588] dump_stack_lvl+0xe8/0x150 [ 1604.632484][T27588] should_fail_ex+0x46b/0x600 [ 1604.632511][T27588] should_failslab+0xa8/0x100 [ 1604.632532][T27588] __kmalloc_noprof+0xdf/0x7b0 [ 1604.632557][T27588] ? __kasan_kmalloc+0x93/0xb0 [ 1604.632580][T27588] ? security_shm_alloc+0x48/0x310 [ 1604.632607][T27588] security_shm_alloc+0x48/0x310 [ 1604.632630][T27588] newseg+0x35a/0xc80 [ 1604.632739][T27588] ? __pfx_newseg+0x10/0x10 [ 1604.632761][T27588] ? ipcget+0x141/0xed0 [ 1604.632806][T27588] ? ipcget+0x141/0xed0 [ 1604.632826][T27588] ipcget+0xa71/0xed0 [ 1604.632855][T27588] ? ipcget+0x141/0xed0 [ 1604.632876][T27588] ? __pfx_ipcget+0x10/0x10 [ 1604.632905][T27588] __x64_sys_shmget+0x140/0x190 [ 1604.632928][T27588] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1604.632959][T27588] do_syscall_64+0x14d/0xf80 [ 1604.632983][T27588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.633002][T27588] ? clear_bhb_loop+0x40/0x90 [ 1604.633024][T27588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.633043][T27588] RIP: 0033:0x7fcf015ac799 [ 1604.633062][T27588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.633077][T27588] RSP: 002b:00007fceff7bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1604.633097][T27588] RAX: ffffffffffffffda RBX: 00007fcf01826180 RCX: 00007fcf015ac799 [ 1604.633111][T27588] RDX: 0000000000000e01 RSI: 0000000000400000 RDI: 00000000798dd818 [ 1604.633123][T27588] RBP: 00007fceff7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.633136][T27588] R10: 000020000013e000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.633148][T27588] R13: 00007fcf01826218 R14: 00007fcf01826180 R15: 00007ffe0fd25ec8 [ 1604.633179][T27588] [ 1605.544483][ T5872] usb 7-1: USB disconnect, device number 13 [ 1606.785849][ T5872] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1606.789366][T27619] FAULT_INJECTION: forcing a failure. [ 1606.789366][T27619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.789453][T27619] CPU: 0 UID: 0 PID: 27619 Comm: syz.6.7049 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.789479][T27619] Tainted: [L]=SOFTLOCKUP [ 1606.789486][T27619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1606.789496][T27619] Call Trace: [ 1606.789504][T27619] [ 1606.789513][T27619] dump_stack_lvl+0xe8/0x150 [ 1606.789545][T27619] should_fail_ex+0x46b/0x600 [ 1606.789572][T27619] _copy_from_user+0x2d/0xb0 [ 1606.789605][T27619] ___sys_sendmsg+0x1c6/0x360 [ 1606.789634][T27619] ? __pfx____sys_sendmsg+0x10/0x10 [ 1606.789699][T27619] __sys_sendmmsg+0x282/0x4e0 [ 1606.789728][T27619] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1606.789759][T27619] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1606.789792][T27619] ? ksys_write+0x248/0x270 [ 1606.789820][T27619] ? __pfx_ksys_write+0x10/0x10 [ 1606.789849][T27619] __x64_sys_sendmmsg+0xa0/0xc0 [ 1606.789876][T27619] do_syscall_64+0x14d/0xf80 [ 1606.789899][T27619] ? trace_irq_disable+0x3b/0x150 [ 1606.789920][T27619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.789939][T27619] ? clear_bhb_loop+0x40/0x90 [ 1606.789961][T27619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.789980][T27619] RIP: 0033:0x7fafaa7ac799 [ 1606.789999][T27619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.790015][T27619] RSP: 002b:00007fafa89fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1606.790037][T27619] RAX: ffffffffffffffda RBX: 00007fafaaa25fa0 RCX: 00007fafaa7ac799 [ 1606.790051][T27619] RDX: 0000000000000002 RSI: 0000200000001b00 RDI: 0000000000000003 [ 1606.790063][T27619] RBP: 00007fafa89fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.790075][T27619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.790086][T27619] R13: 00007fafaaa26038 R14: 00007fafaaa25fa0 R15: 00007ffece667358 [ 1606.790116][T27619] [ 1606.948588][ T5872] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1606.948617][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.948635][ T5872] usb 5-1: Product: syz [ 1606.948649][ T5872] usb 5-1: Manufacturer: syz [ 1606.948662][ T5872] usb 5-1: SerialNumber: syz [ 1607.049604][ T5872] usb 5-1: config 0 descriptor?? [ 1607.281976][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.835357][ T5872] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1608.835387][ T5872] peak_usb 5-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 1608.893582][T27652] FAULT_INJECTION: forcing a failure. [ 1608.893582][T27652] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.893619][T27652] CPU: 1 UID: 0 PID: 27652 Comm: syz.1.7060 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1608.893645][T27652] Tainted: [L]=SOFTLOCKUP [ 1608.893651][T27652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1608.893663][T27652] Call Trace: [ 1608.893671][T27652] [ 1608.893679][T27652] dump_stack_lvl+0xe8/0x150 [ 1608.893710][T27652] should_fail_ex+0x46b/0x600 [ 1608.893737][T27652] should_failslab+0xa8/0x100 [ 1608.893757][T27652] __kmalloc_noprof+0xdf/0x7b0 [ 1608.893783][T27652] ? tomoyo_encode+0x28b/0x550 [ 1608.893808][T27652] tomoyo_encode+0x28b/0x550 [ 1608.893831][T27652] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1608.893861][T27652] ? tomoyo_path_number_perm+0x219/0x630 [ 1608.893885][T27652] tomoyo_path_number_perm+0x246/0x630 [ 1608.893910][T27652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1608.893936][T27652] ? __lock_acquire+0x6b5/0x2cf0 [ 1608.893989][T27652] ? __fget_files+0x2a/0x420 [ 1608.894014][T27652] ? __fget_files+0x2a/0x420 [ 1608.894033][T27652] ? __fget_files+0x3a6/0x420 [ 1608.894053][T27652] ? __fget_files+0x2a/0x420 [ 1608.894078][T27652] security_file_ioctl+0xc3/0x2a0 [ 1608.894106][T27652] __se_sys_ioctl+0x47/0x170 [ 1608.894134][T27652] do_syscall_64+0x14d/0xf80 [ 1608.894156][T27652] ? trace_irq_disable+0x3b/0x150 [ 1608.894176][T27652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.894195][T27652] ? clear_bhb_loop+0x40/0x90 [ 1608.894217][T27652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.894235][T27652] RIP: 0033:0x7fcf015ac799 [ 1608.894253][T27652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.894269][T27652] RSP: 002b:00007fceff7fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1608.894289][T27652] RAX: ffffffffffffffda RBX: 00007fcf01825fa0 RCX: 00007fcf015ac799 [ 1608.894303][T27652] RDX: 0000000000000000 RSI: 00000000c008aec1 RDI: 0000000000000006 [ 1608.894315][T27652] RBP: 00007fceff7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.894328][T27652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.894339][T27652] R13: 00007fcf01826038 R14: 00007fcf01825fa0 R15: 00007ffe0fd25ec8 [ 1608.894370][T27652] [ 1608.894495][T27652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1610.227632][ T5872] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1610.250374][ T5872] usb 5-1: USB disconnect, device number 31 [ 1610.466854][ T38] INFO: task syz.0.6595:26073 blocked for more than 144 seconds. [ 1610.466877][ T38] Tainted: G L syzkaller #0 [ 1610.466888][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1610.466962][ T38] task:syz.0.6595 state:D stack:24832 pid:26073 tgid:26073 ppid:23633 task_flags:0x400040 flags:0x00080003 [ 1610.467013][ T38] Call Trace: [ 1610.467020][ T38] [ 1610.467033][ T38] __schedule+0x1553/0x5240 [ 1610.467064][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1610.467096][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1610.467119][ T38] ? __pfx___schedule+0x10/0x10 [ 1610.467148][ T38] ? schedule+0x90/0x360 [ 1610.467171][ T38] schedule+0x164/0x360 [ 1610.467194][ T38] __fuse_simple_request+0x121f/0x1c60 [ 1610.467345][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 1610.467369][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1610.467405][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1610.467442][ T38] fuse_flush+0x673/0x8b0 [ 1610.467493][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1610.467513][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1610.467537][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1610.467576][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1610.467598][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1610.467619][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1610.467638][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1610.467659][ T38] filp_flush+0xc0/0x190 [ 1610.467680][ T38] filp_close+0x1d/0x40 [ 1610.467699][ T38] __se_sys_close_range+0x3d7/0x900 [ 1610.467801][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 1610.467837][ T38] do_syscall_64+0x14d/0xf80 [ 1610.467859][ T38] ? trace_irq_disable+0x3b/0x150 [ 1610.467879][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.467897][ T38] ? clear_bhb_loop+0x40/0x90 [ 1610.467919][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.467937][ T38] RIP: 0033:0x7f6c807cc799 [ 1610.467954][ T38] RSP: 002b:00007fff9ac867c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1610.467973][ T38] RAX: ffffffffffffffda RBX: 00007fff9ac868b0 RCX: 00007f6c807cc799 [ 1610.467987][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1610.468000][ T38] RBP: 0000000000163ace R08: 0000000000000001 R09: 0000000000000000 [ 1610.468012][ T38] R10: 0000001b30c20000 R11: 0000000000000246 R12: 00007fff9ac868f0 [ 1610.468025][ T38] R13: 00007f6c80a45fac R14: 0000000000163b71 R15: 00007f6c80a45fa0 [ 1610.468056][ T38] [ 1610.468094][ T38] [ 1610.468094][ T38] Showing all locks held in the system: [ 1610.468104][ T38] 1 lock held by khungtaskd/38: [ 1610.468116][ T38] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1610.468244][ T38] 3 locks held by kworker/u8:3/44: [ 1610.468256][ T38] #0: ffff88801aee7938 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1610.468304][ T38] #1: ffffc90000b67c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1610.468351][ T38] #2: ffff88802acd2188 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 1610.468523][ T38] 2 locks held by kworker/u8:9/1359: [ 1610.468534][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1610.468578][ T38] #1: ffffc90006477c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1610.468636][ T38] 2 locks held by getty/5551: [ 1610.468647][ T38] #0: ffff88803828e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1610.468729][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1610.468786][ T38] 3 locks held by kworker/0:7/5872: [ 1610.468797][ T38] #0: ffff8880216bed38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1610.468841][ T38] #1: ffffc9000525fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1610.468887][ T38] #2: ffff88802a6dc188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1610.468936][ T38] 3 locks held by kworker/u8:21/12018: [ 1610.468947][ T38] #0: ffff88801aee7938 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1610.468992][ T38] #1: ffffc9000e847c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1610.469038][ T38] #2: ffff88802a7ac188 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 1610.469083][ T38] 2 locks held by kworker/u8:0/18495: [ 1610.469094][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1610.469138][ T38] #1: ffffc90003f4fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1610.469192][ T38] 1 lock held by udevd/26732: [ 1610.469203][ T38] #0: ffff888038201458 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb4f/0x38a0 [ 1610.469267][ T38] 2 locks held by udevd/26781: [ 1610.469277][ T38] #0: ffff888038d68480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1610.469328][ T38] #1: ffff888038201458 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x148/0x410 [ 1610.469384][ T38] 2 locks held by udevd/26793: [ 1610.469397][ T38] 2 locks held by syz.4.7066/27672: [ 1610.469410][ T38] [ 1610.469416][ T38] ============================================= [ 1610.469416][ T38] [ 1610.469430][ T38] NMI backtrace for cpu 0 [ 1610.469447][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1610.469471][ T38] Tainted: [L]=SOFTLOCKUP [ 1610.469479][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1610.469489][ T38] Call Trace: [ 1610.469498][ T38] [ 1610.469506][ T38] dump_stack_lvl+0xe8/0x150 [ 1610.469533][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1610.469553][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1610.469580][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1610.469603][ T38] sys_info+0x135/0x170 [ 1610.469666][ T38] watchdog+0xfd9/0x1030 [ 1610.469692][ T38] ? watchdog+0x21a/0x1030 [ 1610.469719][ T38] kthread+0x388/0x470 [ 1610.469740][ T38] ? __pfx_watchdog+0x10/0x10 [ 1610.469769][ T38] ? __pfx_kthread+0x10/0x10 [ 1610.469788][ T38] ret_from_fork+0x51e/0xb90 [ 1610.469815][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1610.469838][ T38] ? __switch_to+0xc7d/0x1450 [ 1610.469864][ T38] ? __pfx_kthread+0x10/0x10 [ 1610.469883][ T38] ret_from_fork_asm+0x1a/0x30 [ 1610.469916][ T38] [ 1610.469923][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1610.469952][ C1] NMI backtrace for cpu 1 [ 1610.469982][ C1] CPU: 1 UID: 0 PID: 27672 Comm: syz.4.7066 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1610.470004][ C1] Tainted: [L]=SOFTLOCKUP [ 1610.470009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1610.470019][ C1] RIP: 0010:lock_release+0x7f/0x3d0 [ 1610.470037][ C1] Code: 96 22 ca 0d 00 0f 84 1c 02 00 00 65 8b 05 59 36 ae 10 85 c0 0f 85 0d 02 00 00 65 4c 8b 3d a1 ef ad 10 41 83 bf b4 0b 00 00 00 <0f> 85 f7 01 00 00 49 81 3e 00 f4 11 93 0f 84 ea 01 00 00 9c 5b fa [ 1610.470050][ C1] RSP: 0018:ffffc9000469f3c8 EFLAGS: 00000246 [ 1610.470064][ C1] RAX: 0000000000000000 RBX: ffffc9000469f4e0 RCX: 0000000080000001 [ 1610.470076][ C1] RDX: 0000000000000002 RSI: ffffffff8ba64de0 RDI: ffffffff8ba64da0 [ 1610.470087][ C1] RBP: 0000000000000008 R08: ffffffff821c1aac R09: ffffffff8df04b60 [ 1610.470098][ C1] R10: ffffc9000469f4e0 R11: fffff520008d3ea1 R12: 1ffff11006f95005 [ 1610.470110][ C1] R13: ffffffff821c4f1f R14: ffffffff8deefc60 R15: ffff888037ca8000 [ 1610.470121][ C1] FS: 00007f7260b2e6c0(0000) GS:ffff88812643d000(0000) knlGS:0000000000000000 [ 1610.470134][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1610.470146][ C1] CR2: 0000000000000000 CR3: 000000003b674000 CR4: 00000000003526f0 [ 1610.470160][ C1] Call Trace: [ 1610.470166][ C1] [ 1610.470174][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 1610.470193][ C1] prepare_alloc_pages+0x1b4/0x6b0 [ 1610.470211][ C1] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1610.470229][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1610.470247][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 1610.470269][ C1] ? filemap_get_entry+0x2ac/0x320 [ 1610.470361][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 1610.470382][ C1] alloc_pages_mpol+0xd1/0x380 [ 1610.470399][ C1] folio_alloc_mpol_noprof+0x39/0xe0 [ 1610.470415][ C1] shmem_get_folio_gfp+0x644/0x1a80 [ 1610.470494][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1610.470519][ C1] shmem_fault+0x170/0x380 [ 1610.470536][ C1] ? do_pte_missing+0x1332/0x2d30 [ 1610.470553][ C1] __do_fault+0x138/0x390 [ 1610.470567][ C1] ? do_pte_missing+0x1332/0x2d30 [ 1610.470582][ C1] do_pte_missing+0x17fd/0x2d30 [ 1610.470602][ C1] ? handle_mm_fault+0xe7/0x13c0 [ 1610.470623][ C1] handle_mm_fault+0xd0a/0x13c0 [ 1610.470645][ C1] ? handle_mm_fault+0xe7/0x13c0 [ 1610.470666][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1610.470686][ C1] ? follow_page_pte+0xc47/0x1380 [ 1610.470711][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 1610.470735][ C1] __get_user_pages+0x1679/0x2800 [ 1610.470768][ C1] populate_vma_page_range+0x2be/0x3c0 [ 1610.470788][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1610.470806][ C1] ? userfaultfd_unmap_complete+0x29e/0x320 [ 1610.470826][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1610.470846][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1610.470868][ C1] __mm_populate+0x25f/0x390 [ 1610.470888][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1610.470906][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1610.470925][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1610.470942][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1610.470962][ C1] vm_mmap_pgoff+0x3ad/0x4f0 [ 1610.471006][ C1] ? __se_sys_futex+0x3a8/0x450 [ 1610.471023][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1610.471042][ C1] ? rcu_is_watching+0x15/0xb0 [ 1610.471061][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1610.471083][ C1] do_syscall_64+0x14d/0xf80 [ 1610.471101][ C1] ? trace_irq_disable+0x3b/0x150 [ 1610.471118][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.471133][ C1] ? clear_bhb_loop+0x40/0x90 [ 1610.471151][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.471165][ C1] RIP: 0033:0x7f72628dc799 [ 1610.471179][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.471193][ C1] RSP: 002b:00007f7260b2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1610.471209][ C1] RAX: ffffffffffffffda RBX: 00007f7262b55fa0 RCX: 00007f72628dc799 [ 1610.471221][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1610.471232][ C1] RBP: 00007f7262972bd9 R08: ffffffffffffffff R09: 0000000000000000 [ 1610.471243][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1610.471258][ C1] R13: 00007f7262b56038 R14: 00007f7262b55fa0 R15: 00007ffd27037518 [ 1610.471278][ C1] [ 1610.471959][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1610.471976][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1610.472001][ T38] Tainted: [L]=SOFTLOCKUP [ 1610.472008][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1610.472019][ T38] Call Trace: [ 1610.472027][ T38] [ 1610.472035][ T38] vpanic+0x56c/0xa60 [ 1610.472063][ T38] ? __pfx_vpanic+0x10/0x10 [ 1610.472096][ T38] panic+0xc5/0xd0 [ 1610.472120][ T38] ? __pfx_panic+0x10/0x10 [ 1610.472141][ T38] ? printk_trigger_flush+0x117/0x180 [ 1610.472166][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1610.472196][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1610.472220][ T38] watchdog+0x1023/0x1030 [ 1610.472246][ T38] ? watchdog+0x21a/0x1030 [ 1610.472274][ T38] kthread+0x388/0x470 [ 1610.472294][ T38] ? __pfx_watchdog+0x10/0x10 [ 1610.472313][ T38] ? __pfx_kthread+0x10/0x10 [ 1610.472332][ T38] ret_from_fork+0x51e/0xb90 [ 1610.472358][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1610.472380][ T38] ? __switch_to+0xc7d/0x1450 [ 1610.472406][ T38] ? __pfx_kthread+0x10/0x10 [ 1610.472426][ T38] ret_from_fork_asm+0x1a/0x30 [ 1610.472458][ T38] [ 1610.472699][ T38] Kernel Offset: disabled