last executing test programs: 21m10.633620057s ago: executing program 32 (id=736): syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x80009e3a, 0x80, 0x2, 0x1bd}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21m9.81857089s ago: executing program 33 (id=627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 19m18.682601692s ago: executing program 34 (id=2019): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r1, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) 15m5.989143537s ago: executing program 4 (id=4223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000017c0), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x2, @ib={0x1b, 0x0, 0x0, {"22dd3fb97497021fa99774a26900a452"}}}}, 0xa0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x200000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 15m4.164212364s ago: executing program 2 (id=4231): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000706010300000000000000000000040005000100070000"], 0x1c}}, 0x0) 15m4.018036469s ago: executing program 4 (id=4234): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 15m1.385287075s ago: executing program 2 (id=4238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x1, @rand_addr, 0x1000000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x8000000004) 15m1.38407845s ago: executing program 4 (id=4239): socket(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 14m59.355474618s ago: executing program 2 (id=4244): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000080), 0x0}, 0x20) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 14m58.150179302s ago: executing program 2 (id=4247): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 14m57.712867373s ago: executing program 4 (id=4248): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0) 14m55.633190641s ago: executing program 4 (id=4252): syz_open_dev$ndb(0x0, 0x0, 0x200) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x8, 0x2001) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) 14m52.0119076s ago: executing program 4 (id=4254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) accept(0xffffffffffffffff, 0x0, 0x0) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) shutdown(r1, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) 14m49.555859253s ago: executing program 2 (id=4260): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, &(0x7f00000004c0)="87", 0x1, 0x304f601a}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020600) 14m45.980352187s ago: executing program 2 (id=4264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r3, 0x2007ffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) creat(&(0x7f0000000000)='./bus\x00', 0x48) 14m42.878975068s ago: executing program 35 (id=4245): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) socket$netlink(0x10, 0x3, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') 14m36.533204401s ago: executing program 36 (id=4254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) accept(0xffffffffffffffff, 0x0, 0x0) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) shutdown(r1, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) 14m30.536927066s ago: executing program 37 (id=4264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r3, 0x2007ffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) creat(&(0x7f0000000000)='./bus\x00', 0x48) 10m30.701796012s ago: executing program 8 (id=6832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x58, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10m30.571356852s ago: executing program 8 (id=6836): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000840)={0x40, 0x7, 0x1, '2'}, 0x0, 0x0}) 10m28.600375141s ago: executing program 8 (id=6864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m28.324695775s ago: executing program 8 (id=6868): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 10m28.039382899s ago: executing program 8 (id=6871): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e, 0xffffbffffffffff9, 0x0, 0x0, 0x1}) 10m27.320824373s ago: executing program 8 (id=6878): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 10m27.103089757s ago: executing program 38 (id=6878): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 9m9.379175422s ago: executing program 1 (id=8288): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4058, 0xfda, 0x8161, 0x0, 0x0) 9m9.316011423s ago: executing program 1 (id=8290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x317b, 0x400, 0x20003, 0x369}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0xa1ff, 0x0, 0x0, 0x0) dup3(r1, r0, 0x80000) 9m8.696011648s ago: executing program 1 (id=8303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4001) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 9m8.419691002s ago: executing program 1 (id=8309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000726) 9m7.915702107s ago: executing program 1 (id=8321): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x381000, 0x120) 9m7.785712736s ago: executing program 1 (id=8328): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m52.704016388s ago: executing program 39 (id=8328): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m8.136105504s ago: executing program 7 (id=14132): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[], 0x14}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x60941, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x240, 0x1, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x401}}, @NFQA_PAYLOAD={0x4}, @NFQA_CT={0x9c, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, @NFQA_CT={0x4}, @NFQA_EXP={0x174, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_MASK={0x20, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800653200070103cdd6700c0000000000000000000000010c"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x3}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m8.019583265s ago: executing program 7 (id=14134): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4m7.799353417s ago: executing program 7 (id=14137): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) 4m7.498528526s ago: executing program 7 (id=14140): socket(0xa, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) 4m7.278711431s ago: executing program 7 (id=14144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x4}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000000701030000000000000003000000010c000640"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m7.109842219s ago: executing program 7 (id=14148): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x1ff, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(0x0, 0x0, 0x2042) io_uring_enter(0xffffffffffffffff, 0x2def, 0x1a38, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 3m51.561306785s ago: executing program 40 (id=14148): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x1ff, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(0x0, 0x0, 0x2042) io_uring_enter(0xffffffffffffffff, 0x2def, 0x1a38, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 16.947928588s ago: executing program 5 (id=16451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) 15.701542125s ago: executing program 5 (id=16456): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x7daa}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22ac1414aa925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 14.321340504s ago: executing program 5 (id=16462): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x20000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 11.904167656s ago: executing program 5 (id=16466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) 10.710518652s ago: executing program 0 (id=16471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) utimes(&(0x7f00000005c0)='./file0\x00', 0x0) 10.612001902s ago: executing program 9 (id=16472): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x7) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8008801) 8.364159397s ago: executing program 0 (id=16478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25", 0x8}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.316633353s ago: executing program 9 (id=16479): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0x0, 0x4, 0xad, 0x6, 0x6, 0x0, 0x0, 0x8, 0x3}}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000580)={0x50, 0x0, 0x0, {0x7, 0x28, 0xfffd, 0x40200880, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0x80}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, 0x0) setregid(0x0, 0xee00) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x2010001, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) keyctl$session_to_parent(0x12) 8.077733092s ago: executing program 9 (id=16483): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$watch_queue(&(0x7f0000001100), 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) listen(0xffffffffffffffff, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0), 0x0) 6.683574786s ago: executing program 0 (id=16485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) 6.68305613s ago: executing program 6 (id=16486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 6.626476732s ago: executing program 9 (id=16487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) read$ptp(r4, &(0x7f0000000080)=""/31, 0x1f) 5.508433407s ago: executing program 0 (id=16489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="459a1d2e4068ff5163fe1bd586f63915d16251c86caf72935fef82de5486462232abde1f112773fd00d529aaf925e353265cc290931c0333359bd0e8e46b8e9265516f1f57052412259693", 0x4b, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)}], 0x1}}], 0x2, 0x40408d1) 5.459745904s ago: executing program 6 (id=16490): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') 3.50736011s ago: executing program 3 (id=16491): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) signalfd4(r0, &(0x7f00000000c0)={[0x101]}, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) mremap(&(0x7f0000484000/0x6000)=nil, 0x6000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x100000000000000}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 3.434321615s ago: executing program 3 (id=16492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.704319417s ago: executing program 9 (id=16493): io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x66032, 0xffffffffffffffff, 0x40000000) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffed}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.55935107s ago: executing program 0 (id=16494): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0xffffd000) close_range(r0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x28040041, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r3, 0x0, 0x0) 2.464456224s ago: executing program 3 (id=16495): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r2, 0x2ded, 0x4000, 0x4, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.445365176s ago: executing program 5 (id=16496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x3, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.38787153s ago: executing program 6 (id=16497): r0 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)={0x21, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getdents64(r4, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3507, 0x1, 0x8, 0x0, 0x9}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mq_timedreceive(r3, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) 2.108807027s ago: executing program 6 (id=16498): openat$ptp0(0xffffffffffffff9c, 0x0, 0x240, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpgrp(0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r4) 2.105535673s ago: executing program 3 (id=16499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.27209355s ago: executing program 5 (id=16500): r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100150000000000000001000000140001800800050003000000060001000a"], 0x28}}, 0x0) 1.242971219s ago: executing program 0 (id=16501): sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 1.111684841s ago: executing program 6 (id=16502): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x5f) 1.110835987s ago: executing program 9 (id=16503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x14, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 1.084744137s ago: executing program 3 (id=16504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0xf000000) 881.843971ms ago: executing program 6 (id=16505): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 0s ago: executing program 3 (id=16506): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x78283d8c, 0x10000, 0x6, 0x800}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r4, r3, &(0x7f0000000080)=0xb, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) kernel console output (not intermixed with test programs): atadv_slave_1 [ 931.513374][T25968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.513403][T25968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.817373][T16124] Bluetooth: hci1: command tx timeout [ 932.178002][ T72] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.488395][T25968] hsr_slave_0: entered promiscuous mode [ 932.490746][T25968] hsr_slave_1: entered promiscuous mode [ 932.502246][T25968] debugfs: 'hsr0' already exists in 'hsr' [ 932.502322][T25968] Cannot create hsr debugfs directory [ 933.904508][T16124] Bluetooth: hci1: command tx timeout [ 933.946121][ T72] bridge_slave_1: left allmulticast mode [ 933.946152][ T72] bridge_slave_1: left promiscuous mode [ 933.946436][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.126010][ T72] bridge_slave_0: left allmulticast mode [ 934.126043][ T72] bridge_slave_0: left promiscuous mode [ 934.126312][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.884534][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.884610][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.207017][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.297109][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.359312][ T72] bond0 (unregistering): Released all slaves [ 939.472183][T26647] netlink: 'syz.9.8882': attribute type 4 has an invalid length. [ 939.881047][T26880] Invalid argument reading file caps for ./file0 [ 940.292166][T25968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.398029][T25968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.510186][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880684d1000: rx timeout, send abort [ 941.510356][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880684d0800: rx timeout, send abort [ 941.510554][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880684d1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 941.515796][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880684d0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 942.000414][T25968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.789665][T25968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.164739][ T72] hsr_slave_0: left promiscuous mode [ 943.205138][ T72] hsr_slave_1: left promiscuous mode [ 943.206342][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.206370][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.277012][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.277044][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.474196][ T72] veth1_macvtap: left promiscuous mode [ 943.504969][ T72] veth0_macvtap: left promiscuous mode [ 943.505337][ T72] veth1_vlan: left promiscuous mode [ 943.505527][ T72] veth0_vlan: left promiscuous mode [ 949.196407][ T72] team0 (unregistering): Port device team_slave_1 removed [ 950.570055][ T72] team0 (unregistering): Port device team_slave_0 removed [ 958.482858][T25968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 958.614040][T25968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 958.709895][T25968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 958.757332][T14164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 958.821178][T14164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 958.824291][T25968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 958.839000][T14164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 958.878716][T14164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 958.879620][T14164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 960.159239][T25968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.616455][ T72] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.939221][T14164] Bluetooth: hci0: command tx timeout [ 961.251818][ T72] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.377598][T25968] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.767757][ T72] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.838396][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.838508][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.840627][T27701] chnl_net:caif_netlink_parms(): no params data found [ 961.995281][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.995528][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.418773][ T72] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.943544][T27701] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.943772][T27701] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.944003][T27701] bridge_slave_0: entered allmulticast mode [ 962.968317][T27701] bridge_slave_0: entered promiscuous mode [ 962.988920][T27701] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.989068][T27701] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.989308][T27701] bridge_slave_1: entered allmulticast mode [ 962.992142][T27701] bridge_slave_1: entered promiscuous mode [ 963.014550][T14164] Bluetooth: hci0: command tx timeout [ 963.365330][T27701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.390475][T27701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.969702][T27701] team0: Port device team_slave_0 added [ 964.102795][T27701] team0: Port device team_slave_1 added [ 964.447989][T27701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.448008][T27701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.448036][T27701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.452071][T27701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.452087][T27701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.452116][T27701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.855828][ T72] bridge_slave_1: left allmulticast mode [ 964.855859][ T72] bridge_slave_1: left promiscuous mode [ 964.856126][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.986700][ T72] bridge_slave_0: left allmulticast mode [ 964.986733][ T72] bridge_slave_0: left promiscuous mode [ 964.987008][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.094658][T14164] Bluetooth: hci0: command tx timeout [ 965.161725][ T72] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 966.037916][ T72] batman_adv: batadv0: Removing interface: ip6gretap1 [ 967.227419][T14164] Bluetooth: hci0: command tx timeout [ 969.820262][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.906980][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.007548][ T72] bond0 (unregistering): Released all slaves [ 970.428128][T27701] hsr_slave_0: entered promiscuous mode [ 970.429762][T27701] hsr_slave_1: entered promiscuous mode [ 970.430870][T27701] debugfs: 'hsr0' already exists in 'hsr' [ 970.430894][T27701] Cannot create hsr debugfs directory [ 971.516751][T25968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.617514][ T72] hsr_slave_0: left promiscuous mode [ 972.688044][ T72] hsr_slave_1: left promiscuous mode [ 972.688922][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.688942][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.762298][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.762328][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.978183][ T72] veth1_macvtap: left promiscuous mode [ 972.978652][ T72] veth0_macvtap: left promiscuous mode [ 972.978926][ T72] veth1_vlan: left promiscuous mode [ 972.979118][ T72] veth0_vlan: left promiscuous mode [ 973.760435][ T72] team0 (unregistering): Port device batadv1 removed [ 978.828664][ T72] team0 (unregistering): Port device team_slave_1 removed [ 979.465578][ T72] team0 (unregistering): Port device team_slave_0 removed [ 985.768981][T16124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 985.797358][T16124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 985.799060][T16124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 985.800198][T16124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 985.800974][T16124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 987.895691][T14164] Bluetooth: hci2: command tx timeout [ 989.431369][T29276] chnl_net:caif_netlink_parms(): no params data found [ 989.975153][T14164] Bluetooth: hci2: command tx timeout [ 990.251902][T27701] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 990.348318][T27701] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 990.783450][T27701] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 990.967475][T27701] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 991.556398][T29276] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.556628][T29276] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.556925][T29276] bridge_slave_0: entered allmulticast mode [ 991.562968][T29276] bridge_slave_0: entered promiscuous mode [ 991.613818][T29276] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.613954][T29276] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.614261][T29276] bridge_slave_1: entered allmulticast mode [ 991.641276][T29276] bridge_slave_1: entered promiscuous mode [ 991.951174][T29276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.013749][T29276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.064535][T14164] Bluetooth: hci2: command tx timeout [ 992.329921][T29276] team0: Port device team_slave_0 added [ 992.343294][T29276] team0: Port device team_slave_1 added [ 992.931401][T29276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.931419][T29276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.931448][T29276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.021031][T29276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.021050][T29276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.021079][T29276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.505827][T29276] hsr_slave_0: entered promiscuous mode [ 993.507401][T29276] hsr_slave_1: entered promiscuous mode [ 993.508452][T29276] debugfs: 'hsr0' already exists in 'hsr' [ 993.508478][T29276] Cannot create hsr debugfs directory [ 993.668754][ T72] bridge_slave_1: left allmulticast mode [ 993.668783][ T72] bridge_slave_1: left promiscuous mode [ 993.669060][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.781332][ T72] bridge_slave_0: left allmulticast mode [ 993.781355][ T72] bridge_slave_0: left promiscuous mode [ 993.781536][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.144560][T14164] Bluetooth: hci2: command tx timeout [ 997.875772][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.966045][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.030920][ T72] bond0 (unregistering): Released all slaves [ 998.313186][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.313262][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.764473][ T72] hsr_slave_0: left promiscuous mode [ 998.800370][ T72] hsr_slave_1: left promiscuous mode [ 998.801623][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.845828][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.213587][ T72] team0 (unregistering): Port device team_slave_1 removed [ 1001.766588][ T72] team0 (unregistering): Port device team_slave_0 removed [ 1007.419305][T27701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.678340][T27701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.820529][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.820761][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.944838][ T807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.945004][ T807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.593507][T27701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.401111][T29276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1010.430715][T29276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1010.501500][T29276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1010.552249][T29276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1010.906120][T27701] veth0_vlan: entered promiscuous mode [ 1010.957247][T27701] veth1_vlan: entered promiscuous mode [ 1011.173643][T29276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.203001][T27701] veth0_macvtap: entered promiscuous mode [ 1011.256317][T27701] veth1_macvtap: entered promiscuous mode [ 1011.319363][T29276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.368918][ T807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.369153][ T807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.372460][T27701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.458010][ T807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.465529][ T807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.483309][T27701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.581656][ T5985] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.615867][ T5985] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.633311][ T5985] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.652758][ T5985] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.195720][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.195744][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.452729][ T1441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.452753][ T1441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.777176][T29276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.175449][T29276] veth0_vlan: entered promiscuous mode [ 1013.841453][T29276] veth1_vlan: entered promiscuous mode [ 1014.104835][T29276] veth0_macvtap: entered promiscuous mode [ 1015.311352][T29276] veth1_macvtap: entered promiscuous mode [ 1016.103756][T29276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.158538][T29276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.207336][T26066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.207563][T26066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.295127][T26066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.298816][T26066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.917863][ T807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.917887][ T807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.226703][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.226727][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.166475][T31154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10700'. [ 1030.522258][ T37] audit: type=1326 audit(1767054596.029:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31150 comm="syz.9.10705" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff92c53f749 code=0x0 [ 1034.124618][T31197] ceph: No mds server is up or the cluster is laggy [ 1034.178530][ T805] libceph: connect (1)[c::]:6789 error -101 [ 1034.178702][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 1034.934579][ T43] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1035.094582][ T43] usb 10-1: Using ep0 maxpacket: 16 [ 1035.098307][ T43] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.098336][ T43] usb 10-1: config 0 has no interface number 0 [ 1035.102833][ T43] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1035.102863][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.102884][ T43] usb 10-1: Product: syz [ 1035.102899][ T43] usb 10-1: Manufacturer: syz [ 1035.102914][ T43] usb 10-1: SerialNumber: syz [ 1035.176371][ T43] usb 10-1: config 0 descriptor?? [ 1035.192028][ T43] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1036.141347][T16124] Bluetooth: hci2: command 0x0405 tx timeout [ 1036.882912][ T43] gspca_spca1528: reg_w err -110 [ 1036.883014][ T43] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110 [ 1038.405222][ T9033] usb 10-1: USB disconnect, device number 23 [ 1038.889305][T31338] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1041.354505][T15003] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1041.716963][T15003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1041.717006][T15003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1041.720520][T15003] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1041.720554][T15003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.720577][T15003] usb 10-1: Product: syz [ 1041.720592][T15003] usb 10-1: Manufacturer: syz [ 1041.720608][T15003] usb 10-1: SerialNumber: syz [ 1042.833921][T15003] usb 10-1: config 0 descriptor?? [ 1043.131910][T15003] cx82310_eth 10-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1043.253724][T15003] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1043.688675][T15003] usb 10-1: USB disconnect, device number 24 [ 1045.554726][T15003] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1045.706835][T15003] usb 10-1: config 0 has an invalid interface number: 40 but max is 0 [ 1045.706866][T15003] usb 10-1: config 0 has no interface number 0 [ 1045.706919][T15003] usb 10-1: config 0 interface 40 altsetting 3 bulk endpoint 0xA has invalid maxpacket 8 [ 1045.706947][T15003] usb 10-1: config 0 interface 40 altsetting 3 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1045.706973][T15003] usb 10-1: config 0 interface 40 has no altsetting 0 [ 1045.710384][T15003] usb 10-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=43.16 [ 1045.710416][T15003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.710438][T15003] usb 10-1: Product: syz [ 1045.710453][T15003] usb 10-1: Manufacturer: syz [ 1045.710468][T15003] usb 10-1: SerialNumber: syz [ 1045.794110][T15003] usb 10-1: config 0 descriptor?? [ 1045.806899][T31482] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1045.807205][T31482] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1046.030328][T15003] cdc_subset 10-1:0.40: probe with driver cdc_subset failed with error -71 [ 1046.064922][T15003] usb 10-1: USB disconnect, device number 25 [ 1046.674815][ T9276] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1046.824609][ T9276] usb 1-1: Using ep0 maxpacket: 32 [ 1046.844042][ T9276] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1046.844079][ T9276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1046.880048][ T9276] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1046.880081][ T9276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.880103][ T9276] usb 1-1: Product: syz [ 1046.880119][ T9276] usb 1-1: Manufacturer: syz [ 1046.880135][ T9276] usb 1-1: SerialNumber: syz [ 1046.950384][ T9276] usb 1-1: config 0 descriptor?? [ 1047.045939][ T9276] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1047.158356][ T44] usb 1-1: Failed to submit usb control message: -71 [ 1047.158396][ T44] usb 1-1: unable to send the bmi data to the device: -71 [ 1047.158415][ T44] usb 1-1: unable to get target info from device [ 1047.158447][ T44] usb 1-1: could not get target info (-71) [ 1047.158994][ T44] usb 1-1: could not probe fw (-71) [ 1047.165624][T15003] usb 1-1: USB disconnect, device number 15 [ 1049.089201][T16124] Bluetooth: hci2: unexpected event for opcode 0x200d [ 1049.584688][T14529] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1049.737621][T14529] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1049.739501][T14529] usb 10-1: not running at top speed; connect to a high speed hub [ 1049.741020][T14529] usb 10-1: config 4 has an invalid interface number: 32 but max is 0 [ 1049.741048][T14529] usb 10-1: config 4 has no interface number 0 [ 1049.747426][T14529] usb 10-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 1049.747517][T14529] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.747571][T14529] usb 10-1: Product: syz [ 1049.747613][T14529] usb 10-1: Manufacturer: syz [ 1049.747648][T14529] usb 10-1: SerialNumber: syz [ 1049.774725][T15003] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1049.926801][T15003] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.926830][T15003] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1049.926851][T15003] usb 1-1: config 1 has no interface number 0 [ 1049.926903][T15003] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1049.930030][T15003] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1049.930061][T15003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.930082][T15003] usb 1-1: Product: syz [ 1049.930098][T15003] usb 1-1: Manufacturer: syz [ 1049.930114][T15003] usb 1-1: SerialNumber: syz [ 1050.027478][T15003] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 1050.027528][T15003] cdc_ncm 1-1:1.1: bind() failure [ 1050.115264][T14529] uvcvideo 10-1:4.32: Found UVC 0.02 device syz (17dc:0202) [ 1050.115516][T14529] uvcvideo 10-1:4.32: Entity type for entity Output 9 was not initialized! [ 1050.116401][T14529] uvcvideo 10-1:4.32: Failed to create links for entity 9 [ 1050.116423][T14529] uvcvideo 10-1:4.32: Failed to register entities (-22). [ 1050.173088][T14529] usb 10-1: USB disconnect, device number 26 [ 1050.229314][T15003] usb 1-1: USB disconnect, device number 16 [ 1051.910148][T31754] vxfs: WRONG superblock magic 00000000 at 1 [ 1051.910895][T31754] vxfs: WRONG superblock magic 00000000 at 8 [ 1051.910918][T31754] vxfs: can't find superblock. [ 1053.624578][T31803] netlink: 'syz.9.10960': attribute type 1 has an invalid length. [ 1053.624602][T31803] netlink: 224 bytes leftover after parsing attributes in process `syz.9.10960'. [ 1053.893107][T31818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10968'. [ 1054.518298][T31830] overlayfs: overlapping lowerdir path [ 1056.214647][T31891] netlink: 'syz.0.10999': attribute type 10 has an invalid length. [ 1056.422218][T31891] team0: Port device netdevsim0 added [ 1056.964530][ T9276] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1057.117149][ T9276] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1057.117183][ T9276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.142189][ T9276] usb 1-1: config 0 descriptor?? [ 1057.150615][ T9276] cp210x 1-1:0.0: cp210x converter detected [ 1057.596485][ T9276] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1057.597253][ T9276] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1057.597308][ T9276] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1057.630942][ T9276] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1057.658835][ T9276] usb 1-1: USB disconnect, device number 17 [ 1057.687663][ T9276] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1057.690700][ T9276] cp210x 1-1:0.0: device disconnected [ 1057.852034][T31995] kernel read not supported for file /file1 (pid: 31995 comm: syz.9.11040) [ 1057.852318][ T37] audit: type=1800 audit(1767054623.389:1459): pid=31995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.11040" name="file1" dev="mqueue" ino=106415 res=0 errno=0 [ 1059.268155][T32016] random: crng reseeded on system resumption [ 1059.751481][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.864519][T14529] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1060.907148][T32066] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1061.023705][T14529] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 1061.023737][T14529] usb 10-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1061.023760][T14529] usb 10-1: config 150 has no interface number 0 [ 1061.023808][T14529] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1061.061371][T14529] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1061.061405][T14529] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.061426][T14529] usb 10-1: Product: syz [ 1061.061442][T14529] usb 10-1: Manufacturer: syz [ 1061.061458][T14529] usb 10-1: SerialNumber: syz [ 1061.317003][T14529] xr_serial 10-1:150.204: skipping garbage [ 1061.317064][T14529] xr_serial 10-1:150.204: xr_serial converter detected [ 1061.337567][T14529] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1061.337629][T14529] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1061.364758][T14529] usb 10-1: USB disconnect, device number 27 [ 1061.368747][T14529] xr_serial 10-1:150.204: device disconnected [ 1064.195054][T32262] -: renamed from veth0_vlan (while UP) [ 1064.864641][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1065.038876][ T9] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1065.038910][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.038932][ T9] usb 1-1: Product: syz [ 1065.038948][ T9] usb 1-1: Manufacturer: syz [ 1065.038963][ T9] usb 1-1: SerialNumber: syz [ 1065.092800][ T9] usb 1-1: config 0 descriptor?? [ 1065.110181][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1065.110245][ T9] usb 1-1: setting power ON [ 1065.140413][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1065.196284][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1065.275434][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1065.276352][ T9] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1065.311215][ T43] usb 1-1: USB disconnect, device number 18 [ 1067.130091][T32437] netlink: 'syz.0.11238': attribute type 46 has an invalid length. [ 1068.944908][ T43] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1069.108928][ T43] usb 10-1: config 5 has an invalid interface number: 123 but max is 0 [ 1069.108959][ T43] usb 10-1: config 5 has no interface number 0 [ 1069.109018][ T43] usb 10-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1069.109057][ T43] usb 10-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1069.109099][ T43] usb 10-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1069.109128][ T43] usb 10-1: config 5 interface 123 has no altsetting 0 [ 1069.111682][ T43] usb 10-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1069.111722][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.111743][ T43] usb 10-1: Product: syz [ 1069.111758][ T43] usb 10-1: Manufacturer: syz [ 1069.111774][ T43] usb 10-1: SerialNumber: syz [ 1069.527873][ T43] ni6501 10-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1069.591006][ T43] usb 10-1: USB disconnect, device number 28 [ 1070.235752][T32570] kernel read not supported for file /file1 (pid: 32570 comm: syz.9.11296) [ 1070.238751][ T37] audit: type=1800 audit(1767054635.779:1460): pid=32570 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.11296" name="file1" dev="mqueue" ino=106415 res=0 errno=0 [ 1072.026401][T32627] netlink: 'syz.9.11322': attribute type 3 has an invalid length. [ 1072.026514][T32627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1072.026529][T32627] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.026596][T32627] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.465605][T32652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11335'. [ 1073.356648][T32700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1073.911489][T32736] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11379'. [ 1074.922408][ T316] tmpfs: Bad value for 'mpol' [ 1075.462580][ T805] IPVS: starting estimator thread 0... [ 1075.538970][ T347] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11417'. [ 1075.544509][ T343] IPVS: using max 8 ests per chain, 19200 per kthread [ 1075.681602][ T353] kernel read not supported for file /file1 (pid: 353 comm: syz.0.11419) [ 1075.681900][ T37] audit: type=1800 audit(1767054641.219:1461): pid=353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.11419" name="file1" dev="mqueue" ino=108449 res=0 errno=0 [ 1076.744463][ T9] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1076.908864][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1076.909500][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 1076.912963][ T9] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 1076.912992][ T9] usb 10-1: config 0 has no interface number 0 [ 1076.913042][ T9] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1076.913071][ T9] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1076.913094][ T9] usb 10-1: config 0 interface 88 has no altsetting 0 [ 1076.929154][T14529] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1076.993914][ T9] usb 10-1: string descriptor 0 read error: -22 [ 1076.994072][ T9] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1076.994099][ T9] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1077.061031][ T9] usb 10-1: config 0 descriptor?? [ 1077.096655][T14529] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 1077.096686][T14529] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.096706][T14529] usb 1-1: config 0 has no interface number 0 [ 1077.099207][T14529] usb 1-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=f2.87 [ 1077.099237][T14529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.099258][T14529] usb 1-1: Product: syz [ 1077.099272][T14529] usb 1-1: Manufacturer: syz [ 1077.099287][T14529] usb 1-1: SerialNumber: syz [ 1077.173361][T14529] usb 1-1: config 0 descriptor?? [ 1077.182908][T14529] rtl8150 1-1:0.191: couldn't find required endpoints [ 1077.183228][T14529] rtl8150 1-1:0.191: probe with driver rtl8150 failed with error -5 [ 1077.241802][ T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input35 [ 1077.418881][ T993] usb 1-1: USB disconnect, device number 19 [ 1077.484582][ T9] input: failed to attach handler mousedev to device input35, error: -5 [ 1077.518673][ T9] usb 10-1: USB disconnect, device number 29 [ 1079.094524][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1079.246873][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.246908][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.247233][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1079.247261][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.273077][ T9] usb 1-1: config 0 descriptor?? [ 1079.712172][ T9] hid (null): bogus close delimiter [ 1079.722904][ T9] wacom 0003:056A:030C.0033: bogus close delimiter [ 1079.722927][ T9] wacom 0003:056A:030C.0033: item 0 2 2 10 parsing failed [ 1079.723730][ T9] wacom 0003:056A:030C.0033: parse failed [ 1079.723844][ T9] wacom 0003:056A:030C.0033: probe with driver wacom failed with error -22 [ 1079.925448][ T9] usb 1-1: USB disconnect, device number 20 [ 1082.439782][T14164] Bluetooth: hci0: command 0x0406 tx timeout [ 1083.485867][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1083.640314][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1083.640349][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.640371][ T43] usb 1-1: Product: syz [ 1083.640386][ T43] usb 1-1: Manufacturer: syz [ 1083.640402][ T43] usb 1-1: SerialNumber: syz [ 1083.719295][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1083.789974][T14529] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1085.464336][T14529] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1085.466731][T14529] ath9k_htc: Failed to initialize the device [ 1085.467689][ T43] usb 1-1: USB disconnect, device number 21 [ 1085.555178][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 1087.074563][T14529] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1087.230166][T14529] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.230203][T14529] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1087.230226][T14529] usb 1-1: config 1 has no interface number 0 [ 1087.230279][T14529] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1087.230308][T14529] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1087.230337][T14529] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1087.230376][T14529] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1087.230404][T14529] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.240066][T14529] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1087.240152][T14529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.240225][T14529] usb 1-1: Product: syz [ 1087.240273][T14529] usb 1-1: Manufacturer: syz [ 1087.240323][T14529] usb 1-1: SerialNumber: syz [ 1087.305993][ T916] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1087.530986][ T916] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1087.743736][ T916] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1087.957400][T14529] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 1087.957454][T14529] cdc_ncm 1-1:1.1: bind() failure [ 1087.996201][T14529] usb 1-1: USB disconnect, device number 22 [ 1089.866035][T16527] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1090.016918][T16527] usb 1-1: Using ep0 maxpacket: 32 [ 1090.019823][T16527] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1090.019858][T16527] usb 1-1: config 0 has no interface number 0 [ 1090.019915][T16527] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1090.019947][T16527] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1090.023235][T16527] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1090.023270][T16527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.023293][T16527] usb 1-1: Product: syz [ 1090.023311][T16527] usb 1-1: Manufacturer: syz [ 1090.023328][T16527] usb 1-1: SerialNumber: syz [ 1090.103527][T16527] usb 1-1: config 0 descriptor?? [ 1090.107838][ T1118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1090.529009][T16527] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1090.529345][T16527] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 1090.732200][ T805] usb 1-1: USB disconnect, device number 23 [ 1091.384635][ T1222] netlink: 'syz.0.11776': attribute type 2 has an invalid length. [ 1091.636182][ T1240] trusted_key: encrypted_key: key user:syz not found [ 1091.724416][ T993] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1091.874594][ T993] usb 10-1: Using ep0 maxpacket: 32 [ 1091.878907][ T993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1091.883382][ T993] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1091.883414][ T993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.883435][ T993] usb 10-1: Product: syz [ 1091.883449][ T993] usb 10-1: Manufacturer: syz [ 1091.883464][ T993] usb 10-1: SerialNumber: syz [ 1091.941681][ T993] usb 10-1: config 0 descriptor?? [ 1091.957167][ T993] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input36 [ 1091.980967][ T993] usbtouchscreen 10-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1092.120950][ T993] usbtouchscreen 10-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1092.186194][ T9193] usb 10-1: USB disconnect, device number 30 [ 1093.570216][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570256][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570283][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570310][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570336][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570362][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570387][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570413][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570439][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.570463][T15003] hid-generic 0081:0005:1303.0034: unknown main item tag 0x0 [ 1093.677177][T15003] hid-generic 0081:0005:1303.0034: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1093.716154][ T1343] netlink: 'syz.9.11820': attribute type 6 has an invalid length. [ 1094.484483][T15003] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1094.644505][T15003] usb 1-1: Using ep0 maxpacket: 32 [ 1094.647881][T15003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.647934][T15003] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1094.647960][T15003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.699310][T15003] usb 1-1: config 0 descriptor?? [ 1095.145008][T15003] uclogic 0003:28BD:0071.0035: interface is invalid, ignoring [ 1095.196386][ T5877] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1095.326067][ T805] usb 1-1: USB disconnect, device number 24 [ 1095.346872][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.346927][ T5877] usb 10-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1095.346952][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.353050][ T5877] usb 10-1: config 0 descriptor?? [ 1095.828601][ T5877] logitech 0003:046D:C20E.0036: rdesc size test failed for formula gp [ 1095.829503][ T5877] logitech 0003:046D:C20E.0036: ignoring exceeding usage max [ 1095.831195][ T5877] logitech 0003:046D:C20E.0036: unbalanced collection at end of report description [ 1095.832103][ T5877] logitech 0003:046D:C20E.0036: parse failed [ 1095.832222][ T5877] logitech 0003:046D:C20E.0036: probe with driver logitech failed with error -22 [ 1096.049746][ T5877] usb 10-1: USB disconnect, device number 31 [ 1097.111295][ T1551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11904'. [ 1097.794469][T15003] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1097.944381][T15003] usb 10-1: Using ep0 maxpacket: 32 [ 1097.948013][T15003] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1097.948044][T15003] usb 10-1: config 0 has no interface number 0 [ 1097.948095][T15003] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1097.951254][T15003] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1097.951287][T15003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.951309][T15003] usb 10-1: Product: syz [ 1097.951325][T15003] usb 10-1: Manufacturer: syz [ 1097.951340][T15003] usb 10-1: SerialNumber: syz [ 1098.017346][T15003] usb 10-1: config 0 descriptor?? [ 1098.558573][ T1627] syz_tun: entered promiscuous mode [ 1098.601491][ T1627] team0: Port device syz_tun added [ 1098.647048][T15003] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1098.647106][T15003] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1098.647124][T15003] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1098.647224][T15003] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1098.695322][T15003] usb 10-1: USB disconnect, device number 32 [ 1102.434502][T14529] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1102.586615][T14529] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1102.586670][T14529] usb 10-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1102.586696][T14529] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.598828][T14529] usb 10-1: config 0 descriptor?? [ 1102.600242][ T1788] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1103.019348][T14529] hid_parser_main: 237 callbacks suppressed [ 1103.019376][T14529] belkin 0003:050D:3201.0037: unknown main item tag 0x0 [ 1103.019411][T14529] belkin 0003:050D:3201.0037: unknown main item tag 0x0 [ 1103.019436][T14529] belkin 0003:050D:3201.0037: unknown main item tag 0x0 [ 1103.077855][T14529] belkin 0003:050D:3201.0037: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.9-1/input0 [ 1103.221404][ T5877] usb 10-1: USB disconnect, device number 33 [ 1104.864463][ T5877] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1105.024389][ T5877] usb 10-1: Using ep0 maxpacket: 16 [ 1105.028937][ T5877] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1105.028972][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.029003][ T5877] usb 10-1: Product: syz [ 1105.029019][ T5877] usb 10-1: Manufacturer: syz [ 1105.029034][ T5877] usb 10-1: SerialNumber: syz [ 1105.082829][ T5877] usb 10-1: config 0 descriptor?? [ 1105.093730][ T5877] visor 10-1:0.0: Sony Clie 3.5 converter detected [ 1105.517568][ T5877] usb 10-1: clie_3_5_startup: get interface number failed: -71 [ 1105.517744][ T5877] visor 10-1:0.0: probe with driver visor failed with error -71 [ 1105.548272][ T5877] usb 10-1: USB disconnect, device number 34 [ 1106.944393][ T9193] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1107.104766][ T9193] usb 10-1: Using ep0 maxpacket: 32 [ 1107.122005][ T9193] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1107.122033][ T9193] usb 10-1: config 0 has no interface number 0 [ 1107.151379][ T9193] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1107.151412][ T9193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.151435][ T9193] usb 10-1: Product: syz [ 1107.151450][ T9193] usb 10-1: Manufacturer: syz [ 1107.151466][ T9193] usb 10-1: SerialNumber: syz [ 1107.227246][ T9193] usb 10-1: config 0 descriptor?? [ 1107.239782][ T9193] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1107.239882][ T9193] usb 10-1: selecting invalid altsetting 1 [ 1107.239901][ T9193] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1107.285763][ T9193] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1107.286370][ T9193] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1107.286412][ T9193] usb 10-1: media controller created [ 1107.387373][ T9193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.626432][ T9193] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1107.626496][ T9193] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1107.629489][ T9193] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1107.820581][ T9193] usb 10-1: USB disconnect, device number 35 [ 1112.760886][T14164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.777262][T14164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.800588][T14164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.803384][T14164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.815074][T14164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1113.049762][T12092] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.616650][T12092] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.248655][T12092] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.934430][T16124] Bluetooth: hci0: command tx timeout [ 1114.977727][T12092] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.481078][ T2272] chnl_net:caif_netlink_parms(): no params data found [ 1115.604419][ T993] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1115.766921][ T993] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1115.766953][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.772537][ T993] usb 1-1: config 0 descriptor?? [ 1115.801937][ T993] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1116.409881][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.410109][ T2272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.410382][ T2272] bridge_slave_0: entered allmulticast mode [ 1116.440850][ T2272] bridge_slave_0: entered promiscuous mode [ 1116.456228][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.466888][ T2272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.467470][ T2272] bridge_slave_1: entered allmulticast mode [ 1116.472452][ T2272] bridge_slave_1: entered promiscuous mode [ 1116.610200][ T993] gspca_cpia1: usb_control_msg 02, error -71 [ 1116.611758][ T993] gspca_cpia1: usb_control_msg 05, error -71 [ 1116.612270][ T993] gspca_cpia1: usb_control_msg 04, error -71 [ 1116.612399][ T993] cpia1 1-1:0.0: probe with driver cpia1 failed with error -71 [ 1116.645195][ T993] usb 1-1: USB disconnect, device number 25 [ 1116.893505][ T2272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.928602][ T2272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.014558][T16124] Bluetooth: hci0: command tx timeout [ 1117.097556][T12092] bridge_slave_1: left allmulticast mode [ 1117.097587][T12092] bridge_slave_1: left promiscuous mode [ 1117.097855][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.179885][T12092] bridge_slave_0: left allmulticast mode [ 1117.179918][T12092] bridge_slave_0: left promiscuous mode [ 1117.180189][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.097596][T16124] Bluetooth: hci0: command tx timeout [ 1121.197923][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.201954][T14164] Bluetooth: hci0: command tx timeout [ 1121.772461][T12092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.845467][T12092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.924920][T12092] bond0 (unregistering): Released all slaves [ 1122.463198][ T2272] team0: Port device team_slave_0 added [ 1122.616797][ T2272] team0: Port device team_slave_1 added [ 1123.422447][ T2272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.422467][ T2272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.422495][ T2272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.471006][ T2272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.471025][ T2272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.471055][ T2272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.388141][ T3156] loop4: detected capacity change from 0 to 7 [ 1124.388857][ T3156] buffer_io_error: 5 callbacks suppressed [ 1124.388874][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.388919][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.388959][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.388994][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.389053][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.389102][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.389137][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.389156][ T3156] ldm_validate_partition_table(): Disk read failed. [ 1124.389186][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.389220][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.389255][ T3156] Buffer I/O error on dev loop4, logical block 0, async page read [ 1124.389294][ T3156] Dev loop4: unable to read RDB block 0 [ 1124.389372][ T3156] loop4: unable to read partition table [ 1124.389609][ T3156] loop4: partition table beyond EOD, truncated [ 1124.389628][ T3156] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 1124.826118][T12092] hsr_slave_0: left promiscuous mode [ 1124.865687][T12092] hsr_slave_1: left promiscuous mode [ 1124.866943][T12092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.866973][T12092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.930579][T12092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.930613][T12092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.210084][T12092] veth1_macvtap: left promiscuous mode [ 1125.210199][T12092] veth0_macvtap: left promiscuous mode [ 1125.210475][T12092] veth1_vlan: left promiscuous mode [ 1125.210663][T12092] veth0_vlan: left promiscuous mode [ 1131.352259][T12092] team0 (unregistering): Port device team_slave_1 removed [ 1131.945459][T12092] team0 (unregistering): Port device team_slave_0 removed [ 1137.741418][ T2272] hsr_slave_0: entered promiscuous mode [ 1137.742945][ T2272] hsr_slave_1: entered promiscuous mode [ 1137.743978][ T2272] debugfs: 'hsr0' already exists in 'hsr' [ 1137.744004][ T2272] Cannot create hsr debugfs directory [ 1137.772237][ T3241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12502'. [ 1141.755193][ T2272] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1141.809402][ T2272] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1141.936438][ T2272] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1141.997038][ T2272] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1142.232027][ T9033] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1142.448364][ T9033] usb 1-1: Using ep0 maxpacket: 16 [ 1142.451346][ T9033] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.451400][ T9033] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1142.451434][ T9033] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1142.451460][ T9033] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.511667][ T9033] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1142.511698][ T9033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.511719][ T9033] usb 1-1: Product: syz [ 1142.511733][ T9033] usb 1-1: Manufacturer: syz [ 1142.511748][ T9033] usb 1-1: SerialNumber: syz [ 1142.523420][ T2272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.558215][ T9033] usb 1-1: config 0 descriptor?? [ 1142.664458][ T9033] rc_core: IR keymap rc-xbox-dvd not found [ 1142.664481][ T9033] Registered IR keymap rc-empty [ 1142.666421][ T9033] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1142.669901][ T9033] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 1142.693073][ T2272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.757114][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.757262][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.815010][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.815130][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.976111][ T9033] usb 1-1: USB disconnect, device number 26 [ 1142.976198][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 acpid: input device has been disconnected, fd 3 [ 1143.445707][ T2272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.596850][ T4121] veth1_to_hsr: entered promiscuous mode [ 1143.596982][ T4121] macvlan2: entered promiscuous mode [ 1144.241199][ T2272] veth0_vlan: entered promiscuous mode [ 1144.284844][ T2272] veth1_vlan: entered promiscuous mode [ 1144.360057][ T2272] veth0_macvtap: entered promiscuous mode [ 1144.387126][ T2272] veth1_macvtap: entered promiscuous mode [ 1144.503229][ T2272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.540741][ T2272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.593478][ T69] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.593531][ T69] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.593569][ T69] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.593606][ T69] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.564632][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.564654][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.652611][T26066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.652633][T26066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.958307][T16124] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1146.048123][ T37] audit: type=1326 audit(1767054711.579:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4241 comm="syz.9.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1146.048789][ T37] audit: type=1326 audit(1767054711.589:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4241 comm="syz.9.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1146.048944][ T37] audit: type=1326 audit(1767054711.589:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4241 comm="syz.9.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1146.050459][ T37] audit: type=1326 audit(1767054711.589:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4241 comm="syz.9.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1146.052319][ T37] audit: type=1326 audit(1767054711.589:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4241 comm="syz.9.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1146.052505][ T37] audit: type=1326 audit(1767054711.589:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4241 comm="syz.9.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1146.054611][ T37] audit: type=1326 audit(1767054711.589:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4241 comm="syz.9.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1146.054909][ T37] audit: type=1326 audit(1767054711.599:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4241 comm="syz.9.12210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1147.264927][T19341] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1147.415407][T19341] usb 10-1: Using ep0 maxpacket: 32 [ 1147.433956][T19341] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 1147.434012][T19341] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1147.434036][T19341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.486646][T19341] usb 10-1: config 0 descriptor?? [ 1147.487572][ T4282] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1147.546717][T19341] hub 10-1:0.0: USB hub found [ 1147.696682][T19341] hub 10-1:0.0: 1 port detected [ 1148.560652][ T43] usb 10-1: reset high-speed USB device number 36 using dummy_hcd [ 1148.634469][ T993] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1148.786258][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 1148.790360][ T993] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1148.790391][ T993] usb 1-1: config 0 has no interface number 0 [ 1148.819092][ T993] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1148.819125][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.819146][ T993] usb 1-1: Product: syz [ 1148.819160][ T993] usb 1-1: Manufacturer: syz [ 1148.819175][ T993] usb 1-1: SerialNumber: syz [ 1148.857089][ T993] usb 1-1: config 0 descriptor?? [ 1148.872885][ T993] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1149.164103][ T993] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1149.221643][ T993] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1149.385778][T19341] usb 10-1: USB disconnect, device number 36 [ 1149.470841][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1149.471599][T17950] usb 1-1: USB disconnect, device number 27 [ 1149.538539][T17950] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1149.582672][T17950] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1149.597907][T17950] quatech2 1-1:0.51: device disconnected [ 1152.752309][ T4562] Bluetooth: MGMT ver 1.23 [ 1157.054364][ T5875] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1157.204434][ T5875] usb 10-1: Using ep0 maxpacket: 16 [ 1157.220078][ T5875] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.220112][ T5875] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1157.220143][ T5875] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1157.220166][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.258899][ T5875] usb 10-1: config 0 descriptor?? [ 1157.805062][ T5875] nzxt-smart2 0003:1E71:2009.0038: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 1158.273381][T17950] usb 10-1: USB disconnect, device number 37 [ 1159.744431][T15003] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1159.926796][T15003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.926833][T15003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.926856][T15003] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1159.926900][T15003] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1159.926924][T15003] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.992912][T15003] usb 10-1: config 0 descriptor?? [ 1160.427132][T15003] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xd [ 1160.464538][T15003] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1160.633221][ T4950] input: syz0 as /devices/virtual/input/input40 [ 1160.729095][ T9033] usb 10-1: USB disconnect, device number 38 acpid: input device has been disconnected, fd 3 [ 1161.155414][ T4992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13241'. [ 1163.134436][ T43] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1163.284418][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 1163.286993][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.287026][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.287067][ T43] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1163.287092][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.335489][ T43] usb 10-1: config 0 descriptor?? [ 1163.357799][ T43] hub 10-1:0.0: USB hub found [ 1163.552315][ T43] hub 10-1:0.0: 1 port detected [ 1164.158489][ T43] hub 10-1:0.0: activate --> -90 [ 1164.563504][T17950] usb 10-1: USB disconnect, device number 39 [ 1166.604031][ T5312] netlink: 96 bytes leftover after parsing attributes in process `syz.9.13383'. [ 1167.952642][ T11] blk_print_req_error: 5 callbacks suppressed [ 1167.952665][ T11] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 1168.212019][ T5387] netlink: 'syz.0.13416': attribute type 6 has an invalid length. [ 1168.276454][ T5387] netlink: 'syz.0.13416': attribute type 4 has an invalid length. [ 1168.276479][ T5387] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13416'. [ 1169.518983][ T37] audit: type=1326 audit(1767054735.059:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz.0.13445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7fc00000 [ 1170.113654][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13462'. [ 1170.184905][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13462'. [ 1170.213119][ T37] audit: type=1326 audit(1767054735.749:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz.0.13445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b5c53f749 code=0x7fc00000 [ 1172.394427][T15003] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1172.568669][T15003] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1172.568704][T15003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.597218][T15003] usb 1-1: config 0 descriptor?? [ 1172.603386][T15003] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1173.849646][T15003] usb 1-1: USB disconnect, device number 28 [ 1174.304444][T15003] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1174.469510][T15003] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1174.469541][T15003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.469562][T15003] usb 10-1: Product: syz [ 1174.469577][T15003] usb 10-1: Manufacturer: syz [ 1174.469593][T15003] usb 10-1: SerialNumber: syz [ 1174.508635][T15003] usb 10-1: config 0 descriptor?? [ 1175.537924][T15003] usb 10-1: Firmware version (0.0) predates our first public release. [ 1175.537954][T15003] usb 10-1: Please update to version 0.2 or newer [ 1175.712336][T15003] usb 10-1: USB disconnect, device number 40 [ 1176.352797][ T6010] netlink: 'syz.0.13606': attribute type 10 has an invalid length. [ 1176.352826][ T6010] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13606'. [ 1176.353082][ T6010] team0: entered promiscuous mode [ 1176.353102][ T6010] team_slave_0: entered promiscuous mode [ 1176.353341][ T6010] team_slave_1: entered promiscuous mode [ 1176.353559][ T6010] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1176.429283][ T6010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.430136][ T6010] bridge0: port 3(team0) entered blocking state [ 1176.430304][ T6010] bridge0: port 3(team0) entered disabled state [ 1176.430721][ T6010] team0: entered allmulticast mode [ 1176.430740][ T6010] team_slave_0: entered allmulticast mode [ 1176.430761][ T6010] team_slave_1: entered allmulticast mode [ 1176.430787][ T6010] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1176.438226][ T6010] syz_tun: entered allmulticast mode [ 1176.513003][ T6010] bridge0: port 3(team0) entered blocking state [ 1176.513192][ T6010] bridge0: port 3(team0) entered forwarding state [ 1177.428721][ T6069] netlink: 240 bytes leftover after parsing attributes in process `syz.9.13628'. [ 1179.034433][T15003] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1179.188624][T15003] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1179.188686][T15003] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1179.188714][T15003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1179.188741][T15003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1179.188770][T15003] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1179.188815][T15003] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1179.188840][T15003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.284539][T15003] usb 1-1: config 0 descriptor?? [ 1179.285925][ T6132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1179.724033][T15003] plantronics 0003:047F:FFFF.003A: reserved main item tag 0xd [ 1179.724074][T15003] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1179.771412][T15003] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1180.007632][ T9033] usb 1-1: USB disconnect, device number 29 [ 1182.654017][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.670370][ T6316] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1186.099320][ T6432] kvm: pic: level sensitive irq not supported [ 1186.099409][ T6432] kvm: pic: non byte read [ 1186.099588][ T6432] kvm: pic: level sensitive irq not supported [ 1186.099650][ T6432] kvm: pic: non byte read [ 1187.684867][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13823'. [ 1187.880358][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13823'. [ 1189.341200][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13856'. [ 1189.341227][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13856'. [ 1189.596245][ T5960] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1189.596521][ T5960] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1189.596565][ T5960] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1189.596603][ T5960] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1189.597029][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13856'. [ 1189.597050][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13856'. [ 1192.862056][ T8229] bridge_slave_1: left allmulticast mode [ 1192.862090][ T8229] bridge_slave_1: left promiscuous mode [ 1192.862390][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.908418][ T8229] bridge_slave_0: left allmulticast mode [ 1192.908451][ T8229] bridge_slave_0: left promiscuous mode [ 1192.908729][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.976303][ T6731] binder: 6730:6731 unknown command 0 [ 1192.976336][ T6731] binder: 6730:6731 ioctl c0306201 200000000080 returned -22 [ 1193.000226][ T6731] binder: 6730:6731 ioctl c0306201 2000000003c0 returned -14 [ 1193.294630][T17950] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1193.448672][T17950] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.448701][T17950] usb 10-1: config 0 has no interfaces? [ 1193.476521][T17950] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1193.476549][T17950] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.476563][T17950] usb 10-1: Product: syz [ 1193.476574][T17950] usb 10-1: Manufacturer: syz [ 1193.476584][T17950] usb 10-1: SerialNumber: syz [ 1193.532495][T17950] usb 10-1: config 0 descriptor?? [ 1193.814964][T17950] usb 10-1: USB disconnect, device number 41 [ 1195.157508][ T6830] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1195.392423][ T6832] kvm: pic: non byte read [ 1195.399498][ T6832] kvm: pic: level sensitive irq not supported [ 1195.402674][ T6832] kvm: pic: non byte read [ 1195.417329][ T6832] kvm: pic: level sensitive irq not supported [ 1195.509930][ T6832] kvm: pic: non byte read [ 1195.511715][ T6832] kvm: pic: level sensitive irq not supported [ 1195.511876][ T6832] kvm: pic: non byte read [ 1195.512314][ T6832] kvm: pic: level sensitive irq not supported [ 1195.512465][ T6832] kvm: pic: non byte read [ 1197.580308][ T6887] trusted_key: encrypted_key: insufficient parameters specified [ 1199.417277][ T8229] bond0 (unregistering): left promiscuous mode [ 1199.417304][ T8229] bond_slave_0: left promiscuous mode [ 1199.417983][ T8229] bond_slave_1: left promiscuous mode [ 1199.491803][ T8229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.585304][ T8229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.691220][ T8229] bond0 (unregistering): Released all slaves [ 1204.285999][ T8229] batadv0: left promiscuous mode [ 1204.686935][ T8229] hsr_slave_0: left promiscuous mode [ 1205.675615][ T8229] hsr_slave_1: left promiscuous mode [ 1205.676388][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.676408][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.766365][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.766432][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.916943][ T8229] veth1_macvtap: left promiscuous mode [ 1206.917060][ T8229] veth0_macvtap: left promiscuous mode [ 1206.920046][ T8229] veth1_vlan: left promiscuous mode [ 1206.920256][ T8229] veth0_vlan: left promiscuous mode [ 1207.156405][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14095'. [ 1216.205020][ T7352] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1216.206837][ T7352] Error validating options; rc = [-22] [ 1222.225613][ T7416] hub 1-0:1.0: USB hub found [ 1222.229060][ T7416] hub 1-0:1.0: 1 port detected [ 1222.251009][T16124] Bluetooth: hci2: command 0x0405 tx timeout [ 1222.531931][ T8229] team0 (unregistering): Port device team_slave_1 removed [ 1223.440307][ T7439] smb3: Unexpected value for 'rdma' [ 1223.441379][ T7439] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1223.441526][ T7439] CIFS mount error: No usable UNC path provided in device string! [ 1223.441526][ T7439] [ 1223.442073][ T7439] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1223.653536][ T7437] input: syz1 as /devices/virtual/input/input41 [ 1227.829014][T16124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1228.099520][T16124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1228.805894][T16124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1228.811762][T16124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1228.830640][T16124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1229.086204][ T8229] team0 (unregistering): Port device team_slave_0 removed [ 1229.544440][T16527] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1229.704093][T16527] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 1229.704124][T16527] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.704145][T16527] usb 1-1: config 0 has no interface number 0 [ 1229.708681][T16527] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1229.708713][T16527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.708742][T16527] usb 1-1: Product: syz [ 1229.708757][T16527] usb 1-1: Manufacturer: syz [ 1229.708773][T16527] usb 1-1: SerialNumber: syz [ 1230.583897][T16527] usb 1-1: config 0 descriptor?? [ 1230.935909][T16124] Bluetooth: hci1: command tx timeout [ 1233.094357][T16124] Bluetooth: hci1: command tx timeout [ 1233.167106][T16527] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 1233.167388][T16527] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82 [ 1233.169515][T16527] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 1233.169611][T16527] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 1233.169702][T16527] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 1233.263413][T16527] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1233.282013][T16527] usb 1-1: USB disconnect, device number 30 [ 1233.308945][T16527] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1233.309575][T16527] keyspan 1-1:0.133: device disconnected [ 1235.877454][T16124] Bluetooth: hci1: command tx timeout [ 1238.074418][T16124] Bluetooth: hci1: command tx timeout [ 1244.461750][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1256.663517][ T7459] chnl_net:caif_netlink_parms(): no params data found [ 1264.321017][ T8091] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1264.321017][ T8091] program syz.0.14399 not setting count and/or reply_len properly [ 1265.150539][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.150763][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.151141][ T7459] bridge_slave_0: entered allmulticast mode [ 1265.156423][ T7459] bridge_slave_0: entered promiscuous mode [ 1265.265445][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.265535][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.265760][ T7459] bridge_slave_1: entered allmulticast mode [ 1265.267673][ T7459] bridge_slave_1: entered promiscuous mode [ 1265.340469][ T8229] IPVS: stop unused estimator thread 0... [ 1267.738769][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.743416][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.045506][ T7459] team0: Port device team_slave_0 added [ 1271.065465][ T7459] team0: Port device team_slave_1 added [ 1275.002811][ T8229] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.624624][ T8308] block nbd0: shutting down sockets [ 1281.432239][ T8229] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.539406][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.539426][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.539456][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.542686][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.542704][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.542732][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.070075][ T8229] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.399095][ T7459] hsr_slave_0: entered promiscuous mode [ 1283.400628][ T7459] hsr_slave_1: entered promiscuous mode [ 1283.401650][ T7459] debugfs: 'hsr0' already exists in 'hsr' [ 1283.401676][ T7459] Cannot create hsr debugfs directory [ 1284.442587][ T8229] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.066229][ T8422] sd 0:0:1:0: device reset [ 1285.924074][ T8442] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1285.924106][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1285.924775][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 1285.962126][ T8442] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 1285.962155][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1285.962298][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 1285.977398][ T8442] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 1285.977481][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1285.977862][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 1286.022353][ T8442] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 1286.022375][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1286.050648][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 1286.074928][ T8456] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 1286.074956][ T8456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1286.155812][ T8456] vhci_hcd vhci_hcd.0: Device attached [ 1286.189078][ T8442] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 1286.189101][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1286.194430][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 1286.194440][T15003] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1286.197875][ T8442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1286.230624][ T8442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1286.409655][ T8442] vhci_hcd vhci_hcd.0: port 0 already used [ 1286.426081][ T8467] vhci_hcd: connection closed [ 1286.426405][ T69] vhci_hcd vhci_hcd.0: stop threads [ 1286.426431][ T69] vhci_hcd vhci_hcd.0: release socket [ 1286.474494][ T8457] vhci_hcd: connection closed [ 1286.477537][ T8446] vhci_hcd: connection reset by peer [ 1286.478448][ T8454] vhci_hcd: connection closed [ 1286.481407][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 1286.494576][ T8449] vhci_hcd: connection closed [ 1286.495433][ T8451] vhci_hcd: connection closed [ 1286.523422][ T69] vhci_hcd vhci_hcd.0: stop threads [ 1286.523450][ T69] vhci_hcd vhci_hcd.0: release socket [ 1286.523687][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 1286.524090][ T69] vhci_hcd vhci_hcd.0: stop threads [ 1286.524103][ T69] vhci_hcd vhci_hcd.0: release socket [ 1286.542998][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 1286.545388][ T69] vhci_hcd vhci_hcd.0: stop threads [ 1286.545463][ T69] vhci_hcd vhci_hcd.0: release socket [ 1286.545643][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 1286.546093][ T69] vhci_hcd vhci_hcd.0: stop threads [ 1286.546135][ T69] vhci_hcd vhci_hcd.0: release socket [ 1286.546221][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 1286.546545][ T69] vhci_hcd vhci_hcd.0: stop threads [ 1286.546589][ T69] vhci_hcd vhci_hcd.0: release socket [ 1286.546688][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 1287.541152][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1287.584280][ T43] IPVS: starting estimator thread 0... [ 1287.601189][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1287.622214][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1287.624825][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1287.628571][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1287.655027][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 1287.756452][ T8491] IPVS: using max 7 ests per chain, 16800 per kthread [ 1289.479208][ T8229] bridge_slave_1: left allmulticast mode [ 1289.479234][ T8229] bridge_slave_1: left promiscuous mode [ 1289.479480][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.713551][ T8229] bridge_slave_0: left allmulticast mode [ 1289.713575][ T8229] bridge_slave_0: left promiscuous mode [ 1289.713784][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.754606][T16124] Bluetooth: hci3: command tx timeout [ 1290.837624][ T8504] overlayfs: failed to clone upperpath [ 1291.324625][T15003] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1291.814485][T16124] Bluetooth: hci3: command tx timeout [ 1293.894664][T16124] Bluetooth: hci3: command tx timeout [ 1295.995103][T16124] Bluetooth: hci3: command tx timeout [ 1300.955542][ T8229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.080829][ T8229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1301.241811][ T8229] bond0 (unregistering): Released all slaves [ 1301.631407][ T8229] bond1 (unregistering): Released all slaves [ 1305.505073][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.924364][T15003] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1307.099357][T15003] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1307.099379][T15003] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.099399][T15003] usb 1-1: config 220 has no interface number 2 [ 1307.099449][T15003] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1307.099469][T15003] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1307.099482][T15003] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1307.099501][T15003] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1307.102722][T15003] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1307.102743][T15003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.102758][T15003] usb 1-1: Product: syz [ 1307.102768][T15003] usb 1-1: Manufacturer: syz [ 1307.102778][T15003] usb 1-1: SerialNumber: syz [ 1307.677648][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.677681][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.721818][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.721850][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.943939][T15003] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1307.943975][T15003] uvcvideo 1-1:220.0: No valid video chain found. [ 1307.984702][T15003] usb 1-1: USB disconnect, device number 31 [ 1308.115013][ T8229] veth1_macvtap: left promiscuous mode [ 1308.115133][ T8229] veth0_macvtap: left promiscuous mode [ 1308.115399][ T8229] veth1_vlan: left promiscuous mode [ 1308.115578][ T8229] veth0_vlan: left promiscuous mode [ 1309.124682][ T9193] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1309.326270][ T9193] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1309.326302][ T9193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.326352][ T9193] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1309.326397][ T9193] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1309.326422][ T9193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.332176][ T9193] usb 1-1: config 0 descriptor?? [ 1309.449142][ T9193] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1309.474934][ T9193] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1309.682584][ T9193] usb 1-1: USB disconnect, device number 32 [ 1316.245212][ T8229] team0 (unregistering): Port device team_slave_1 removed [ 1316.755494][ T8229] team0 (unregistering): Port device team_slave_0 removed [ 1321.947949][ T9044] vcan1: entered promiscuous mode [ 1321.980323][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 1322.976840][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.979285][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.979581][ T8485] bridge_slave_0: entered allmulticast mode [ 1322.982079][ T8485] bridge_slave_0: entered promiscuous mode [ 1322.990464][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.991627][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.991883][ T8485] bridge_slave_1: entered allmulticast mode [ 1322.998978][ T8485] bridge_slave_1: entered promiscuous mode [ 1324.090363][ T9560] netlink: 'syz.0.14890': attribute type 21 has an invalid length. [ 1324.090387][ T9560] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14890'. [ 1324.202241][ T9554] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1324.206330][ T9560] netlink: 'syz.0.14890': attribute type 4 has an invalid length. [ 1324.206385][ T9560] netlink: 'syz.0.14890': attribute type 5 has an invalid length. [ 1324.206419][ T9560] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14890'. [ 1324.529528][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.532590][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14894'. [ 1324.572818][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.876191][ T8485] team0: Port device team_slave_0 added [ 1324.880126][ T8485] team0: Port device team_slave_1 added [ 1324.991728][ T9631] netlink: 'syz.9.14902': attribute type 10 has an invalid length. [ 1324.991753][ T9631] netlink: 'syz.9.14902': attribute type 16 has an invalid length. [ 1324.991768][ T9631] netlink: 156 bytes leftover after parsing attributes in process `syz.9.14902'. [ 1325.191827][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.191847][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.191874][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.245375][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.245397][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.245426][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.742570][ T8229] bridge_slave_1: left allmulticast mode [ 1325.742602][ T8229] bridge_slave_1: left promiscuous mode [ 1325.743940][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.871317][ T8229] bridge_slave_0: left allmulticast mode [ 1325.871349][ T8229] bridge_slave_0: left promiscuous mode [ 1325.871634][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.527909][ T8229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.675343][ T8229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.780097][ T8229] bond0 (unregistering): Released all slaves [ 1327.108588][ T8485] hsr_slave_0: entered promiscuous mode [ 1327.121405][ T8485] hsr_slave_1: entered promiscuous mode [ 1327.130918][ T8485] debugfs: 'hsr0' already exists in 'hsr' [ 1327.130946][ T8485] Cannot create hsr debugfs directory [ 1327.574713][ T8229] hsr_slave_0: left promiscuous mode [ 1327.604555][ T8229] hsr_slave_1: left promiscuous mode [ 1327.605691][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.635425][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.845412][ T37] audit: type=1326 audit(1767054893.389:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9812 comm="syz.0.14961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1327.847731][ T37] audit: type=1326 audit(1767054893.389:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9812 comm="syz.0.14961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1327.910593][ T37] audit: type=1326 audit(1767054893.449:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9812 comm="syz.0.14961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1327.912388][ T37] audit: type=1326 audit(1767054893.449:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9812 comm="syz.0.14961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1327.912428][ T37] audit: type=1326 audit(1767054893.449:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9815 comm="syz.0.14961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7b5c572005 code=0x7ffc0000 [ 1328.079527][ T37] audit: type=1326 audit(1767054893.599:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9815 comm="syz.0.14961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1330.219247][ T8229] team0 (unregistering): Port device team_slave_1 removed [ 1330.546696][ T8229] team0 (unregistering): Port device team_slave_0 removed [ 1330.942674][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15006'. [ 1333.823083][ T8485] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.823123][ T8485] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.516711][T10108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15079'. [ 1335.578190][ T8485] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.578225][ T8485] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.091621][ T8485] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1336.091663][ T8485] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.370122][ T8485] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.370162][ T8485] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.167065][T26066] bridge_slave_1: left allmulticast mode [ 1339.167092][T26066] bridge_slave_1: left promiscuous mode [ 1339.167299][T26066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.296380][T26066] bridge_slave_0: left allmulticast mode [ 1339.296411][T26066] bridge_slave_0: left promiscuous mode [ 1339.296702][T26066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.443031][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15145'. [ 1341.634329][T10347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1341.784547][T10352] netlink: 'syz.9.15196': attribute type 2 has an invalid length. [ 1341.785774][T10352] netlink: 'syz.9.15196': attribute type 2 has an invalid length. [ 1344.076601][T26066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.165247][T26066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.245664][T26066] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1344.312745][T26066] bond0 (unregistering): Released all slaves [ 1345.501431][ T8485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1345.553336][ T8485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1345.705777][ T8485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1345.944442][ T8485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1346.294782][T26066] hsr_slave_0: left promiscuous mode [ 1346.341397][T26066] hsr_slave_1: left promiscuous mode [ 1346.342523][T26066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.342550][T26066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.411648][T26066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.411679][T26066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.783687][T26066] veth1_macvtap: left promiscuous mode [ 1346.808307][T26066] veth0_macvtap: left promiscuous mode [ 1346.808542][T26066] veth1_vlan: left promiscuous mode [ 1346.808735][T26066] veth0_vlan: left promiscuous mode [ 1347.115837][T14164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1347.125402][T14164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1347.131089][T14164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1347.138698][T14164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1347.139917][T14164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1349.274963][T16124] Bluetooth: hci1: command tx timeout [ 1351.368877][T16124] Bluetooth: hci1: command tx timeout [ 1352.684476][T26066] team0 (unregistering): Port device team_slave_1 removed [ 1353.255100][T26066] team0 (unregistering): Port device team_slave_0 removed [ 1353.414385][T16124] Bluetooth: hci1: command tx timeout [ 1355.534532][T16124] Bluetooth: hci1: command tx timeout [ 1356.434648][T26066] team0 (unregistering): Port device dummy0 removed [ 1358.347265][ T8485] kthread_run failed with err -4 [ 1359.851712][T10574] chnl_net:caif_netlink_parms(): no params data found [ 1360.955406][T26066] IPVS: stop unused estimator thread 0... [ 1361.387727][T10574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.390652][T10574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.390871][T10574] bridge_slave_0: entered allmulticast mode [ 1361.392776][T10574] bridge_slave_0: entered promiscuous mode [ 1361.436254][T10574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.436411][T10574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.436693][T10574] bridge_slave_1: entered allmulticast mode [ 1361.452719][T10574] bridge_slave_1: entered promiscuous mode [ 1362.753373][T10574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.776132][T10574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.528267][T10574] team0: Port device team_slave_0 added [ 1363.547743][T10574] team0: Port device team_slave_1 added [ 1364.449164][T10574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.449185][T10574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.449216][T10574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.809077][T10574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.809097][T10574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.809128][T10574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.193541][T16124] Bluetooth: hci0: unexpected event for opcode 0x204e [ 1365.250924][T10574] hsr_slave_0: entered promiscuous mode [ 1365.251923][T10574] hsr_slave_1: entered promiscuous mode [ 1365.252591][T10574] debugfs: 'hsr0' already exists in 'hsr' [ 1365.252609][T10574] Cannot create hsr debugfs directory [ 1365.665795][T21312] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1365.824331][T21312] usb 1-1: Using ep0 maxpacket: 32 [ 1365.826905][T21312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1365.826947][T21312] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1365.826972][T21312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.890280][T21312] usb 1-1: config 0 descriptor?? [ 1366.347051][T26066] bridge_slave_1: left allmulticast mode [ 1366.347082][T26066] bridge_slave_1: left promiscuous mode [ 1366.347339][T26066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.376485][T21312] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1366.376526][T21312] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1366.376554][T21312] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1366.376581][T21312] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1366.376607][T21312] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1366.422644][T21312] corsair-cpro 0003:1B1C:0C10.003B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 1366.496921][T26066] bridge_slave_0: left allmulticast mode [ 1366.496952][T26066] bridge_slave_0: left promiscuous mode [ 1366.497248][T26066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.880744][T21312] corsair-cpro 0003:1B1C:0C10.003B: probe with driver corsair-cpro failed with error -110 [ 1366.930656][T21312] usb 1-1: USB disconnect, device number 33 [ 1366.949721][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.192679][T26066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.306982][T26066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.418148][T26066] bond0 (unregistering): Released all slaves [ 1367.494375][T21312] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1367.663009][T21312] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1367.663040][T21312] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1367.663061][T21312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1367.663117][T21312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1367.663145][T21312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1367.665709][T21312] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1367.665740][T21312] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1367.665763][T21312] usb 1-1: Product: syz [ 1367.665777][T21312] usb 1-1: Manufacturer: syz [ 1367.758255][T21312] cdc_wdm 1-1:1.0: skipping garbage [ 1367.758276][T21312] cdc_wdm 1-1:1.0: skipping garbage [ 1367.878698][T21312] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1367.878743][T21312] cdc_wdm 1-1:1.0: Unknown control protocol [ 1368.294468][T26066] hsr_slave_0: left promiscuous mode [ 1368.426165][ T9193] usb 1-1: USB disconnect, device number 34 [ 1368.505685][T26066] hsr_slave_1: left promiscuous mode [ 1368.509220][T26066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.558899][T26066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.966483][T26066] team0 (unregistering): Port device team_slave_1 removed [ 1370.195304][T26066] team0 (unregistering): Port device team_slave_0 removed [ 1373.161713][T11878] netlink: 104 bytes leftover after parsing attributes in process `syz.9.15742'. [ 1373.929660][T11922] netlink: 7 bytes leftover after parsing attributes in process `syz.9.15758'. [ 1374.014388][ T9193] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1374.046731][T10574] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1374.106201][T10574] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1374.145321][T10574] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1374.174342][ T9193] usb 1-1: Using ep0 maxpacket: 32 [ 1374.176396][ T9193] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1374.176425][ T9193] usb 1-1: config 0 has no interface number 0 [ 1374.178876][ T9193] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1374.178904][ T9193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.178926][ T9193] usb 1-1: Product: syz [ 1374.178941][ T9193] usb 1-1: Manufacturer: syz [ 1374.178956][ T9193] usb 1-1: SerialNumber: syz [ 1374.196664][ T9193] usb 1-1: config 0 descriptor?? [ 1374.270309][T10574] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1374.273950][ T9193] smsc95xx v2.0.0 [ 1374.622772][ T9193] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1374.622805][ T9193] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1374.919979][T10574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.967332][T10574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.029640][ T9193] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1375.030575][ T9193] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1375.046007][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.046387][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.076297][ T9193] usb 1-1: USB disconnect, device number 35 [ 1375.115255][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.115397][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.399341][T11992] MTD: Couldn't look up './file0': -15 [ 1375.703984][T10574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.525663][T10574] veth0_vlan: entered promiscuous mode [ 1376.587056][T10574] veth1_vlan: entered promiscuous mode [ 1376.736477][T10574] veth0_macvtap: entered promiscuous mode [ 1376.762867][T10574] veth1_macvtap: entered promiscuous mode [ 1376.859419][T10574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.886791][T10574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.915471][ T37] audit: type=1326 audit(1767054942.459:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1376.922504][ T37] audit: type=1326 audit(1767054942.459:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1376.923135][ T37] audit: type=1326 audit(1767054942.459:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1376.923306][ T37] audit: type=1326 audit(1767054942.459:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1376.923942][ T37] audit: type=1326 audit(1767054942.459:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1377.039819][ T37] audit: type=1326 audit(1767054942.459:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1377.039883][ T37] audit: type=1326 audit(1767054942.589:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1377.039980][ T37] audit: type=1326 audit(1767054942.589:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1377.040130][ T37] audit: type=1326 audit(1767054942.589:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1377.070712][ T1327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.071935][ T37] audit: type=1326 audit(1767054942.609:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.0.15808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f7b5c53f749 code=0x7ffc0000 [ 1377.117654][ T1327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.167248][ T1327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.194813][ T1327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.754513][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.754538][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.890640][T26066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.890663][T26066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.551858][T12105] ptrace attach of ""[12107] was attempted by "./syz-executor exec"[12105] [ 1382.804543][ T9193] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1382.954393][ T9193] usb 1-1: Using ep0 maxpacket: 32 [ 1382.957548][ T9193] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1382.957584][ T9193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.962490][ T9193] usb 1-1: config 0 descriptor?? [ 1383.124420][ T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1383.206308][ T9193] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1383.226388][ T9193] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1383.227565][ T9193] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1383.227632][ T9193] usb 1-1: media controller created [ 1383.286431][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.286468][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.286493][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1383.286538][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1383.286562][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.348601][ T43] usb 6-1: config 0 descriptor?? [ 1383.488108][ T9193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1383.790633][ T43] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1384.185485][ T9193] az6027: usb out operation failed. (-71) [ 1384.185508][ T9193] stb0899_attach: Driver disabled by Kconfig [ 1384.185527][ T9193] az6027: no front-end attached [ 1384.185527][ T9193] [ 1384.185958][ T9193] az6027: usb out operation failed. (-71) [ 1384.185974][ T9193] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1384.189656][ T9193] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 1384.282602][ T9193] dvb-usb: schedule remote query interval to 400 msecs. [ 1384.282629][ T9193] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1384.305611][ T9193] usb 1-1: USB disconnect, device number 36 [ 1384.574456][ T9193] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1385.110649][ C0] plantronics 0003:047F:FFFF.003C: usb_submit_urb(ctrl) failed: -1 [ 1385.887001][T21312] usb 6-1: USB disconnect, device number 18 [ 1387.119507][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15929'. [ 1387.301997][T12393] netlink: 'syz.9.15934': attribute type 9 has an invalid length. [ 1387.302023][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15934'. [ 1387.399096][ T1327] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.399376][ T1327] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.399419][ T1327] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.399458][ T1327] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.399791][T12393] netlink: 'syz.9.15934': attribute type 9 has an invalid length. [ 1387.399809][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15934'. [ 1388.834491][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1388.984325][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1388.987628][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.987691][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1388.987717][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.018984][ T43] usb 6-1: config 0 descriptor?? [ 1389.041365][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1389.067149][T12464] loop8: detected capacity change from 0 to 7 [ 1389.068525][T12464] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1389.068561][T12464] loop8: partition table partially beyond EOD, truncated [ 1389.070415][T12464] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 1389.108720][T12464] loop8: p2 start 956478 is beyond EOD, truncated [ 1390.251313][ T43] gspca_vc032x: reg_w err -71 [ 1390.251411][ T43] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 1390.266773][ T43] usb 6-1: USB disconnect, device number 19 [ 1391.475940][T12557] overlayfs: failed to clone lowerpath [ 1393.175125][T16124] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1393.179132][T16124] Bluetooth: hci2: Injecting HCI hardware error event [ 1393.187640][T14164] Bluetooth: hci2: hardware error 0x00 [ 1395.335000][T14164] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1396.664347][T15003] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1396.814648][T15003] usb 6-1: Using ep0 maxpacket: 32 [ 1396.817026][T15003] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1396.817056][T15003] usb 6-1: config 0 has no interface number 0 [ 1396.817091][T15003] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1396.820193][T15003] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1396.820225][T15003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.820247][T15003] usb 6-1: Product: syz [ 1396.820263][T15003] usb 6-1: Manufacturer: syz [ 1396.820278][T15003] usb 6-1: SerialNumber: syz [ 1396.888515][T15003] usb 6-1: config 0 descriptor?? [ 1397.121572][T15003] ipheth 6-1:0.196: Unable to find endpoints [ 1397.139818][T15003] usb 6-1: USB disconnect, device number 20 [ 1397.230095][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.230300][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.230470][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.231404][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.231593][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.231761][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.231926][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.232090][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.232270][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.232438][T12773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1397.415504][T16124] Bluetooth: hci0: command 0x0406 tx timeout [ 1397.415956][T14164] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1397.505875][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16098'. [ 1397.601846][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16098'. [ 1398.184351][T15003] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1398.337228][T15003] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1398.337284][T15003] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1398.337308][T15003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.343467][T15003] usb 1-1: config 0 descriptor?? [ 1399.199014][T15003] letsketch 0003:6161:4D15.003D: Device info: 㡵 [ 1399.401436][T15003] letsketch 0003:6161:4D15.003D: Device info: 劸 [ 1399.604825][T15003] letsketch 0003:6161:4D15.003D: Device info:   [ 1400.262193][T15003] usb 1-1: Max retries (5) exceeded reading string descriptor 2 [ 1400.262287][T15003] letsketch 0003:6161:4D15.003D: probe with driver letsketch failed with error -71 [ 1400.309843][T15003] usb 1-1: USB disconnect, device number 37 [ 1400.598553][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1400.598574][ T37] audit: type=1326 audit(1767054966.139:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.598881][ T37] audit: type=1326 audit(1767054966.139:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.599290][ T37] audit: type=1326 audit(1767054966.139:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.603276][ T37] audit: type=1326 audit(1767054966.139:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.603770][ T37] audit: type=1326 audit(1767054966.139:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.618460][ T37] audit: type=1326 audit(1767054966.149:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.619775][ T37] audit: type=1326 audit(1767054966.159:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.628960][ T37] audit: type=1326 audit(1767054966.159:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.638081][ T37] audit: type=1326 audit(1767054966.179:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1400.638228][ T37] audit: type=1326 audit(1767054966.179:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12907 comm="syz.9.16151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd833f749 code=0x7ffc0000 [ 1402.157142][ T5875] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1402.326907][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10 [ 1402.326945][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.326983][ T5875] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1402.327007][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.332386][ T5875] usb 1-1: config 0 descriptor?? [ 1402.956253][ T5875] cp2112 0003:10C4:EA90.003E: unknown main item tag 0x0 [ 1402.984797][ T5875] cp2112 0003:10C4:EA90.003E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1403.158807][ T5875] cp2112 0003:10C4:EA90.003E: Part Number: 0x82 Device Version: 0xFE [ 1403.769392][T12945] cp2112 0003:10C4:EA90.003E: Error starting transaction: -38 [ 1403.785212][ T5875] cp2112 0003:10C4:EA90.003E: error reading lock byte: -71 [ 1403.792978][ T5875] usb 1-1: USB disconnect, device number 38 [ 1405.423259][T13041] overlayfs: failed to clone upperpath [ 1405.464315][ T5875] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1405.618618][ T5875] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1405.618652][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.656929][ T5875] usb 1-1: config 0 descriptor?? [ 1406.734338][ T9193] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1406.886345][ T9193] usb 6-1: Using ep0 maxpacket: 16 [ 1406.889048][ T9193] usb 6-1: config index 0 descriptor too short (expected 13860, got 36) [ 1406.889077][ T9193] usb 6-1: config 0 has too many interfaces: 246, using maximum allowed: 32 [ 1406.889100][ T9193] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 246 [ 1406.889156][ T9193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.889201][ T9193] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1406.889226][ T9193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.275063][ T9193] usb 6-1: config 0 descriptor?? [ 1407.722835][ T9193] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1407.722885][ T9193] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1407.722914][ T9193] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1407.722943][ T9193] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1407.722980][ T9193] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1407.834518][ T9193] elan 0003:04F3:0755.003F: hidraw0: USB HID v0.05 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1408.092184][ T5875] usb 1-1: Cannot set autoneg [ 1408.096266][ T5875] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1408.170082][ T5875] usb 1-1: USB disconnect, device number 39 [ 1408.172906][ T5876] usb 6-1: USB disconnect, device number 21 [ 1410.349370][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16266'. [ 1410.754534][ T9193] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1410.904330][ T9193] usb 6-1: Using ep0 maxpacket: 32 [ 1410.907180][ T9193] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1410.907209][ T9193] usb 6-1: config 0 has no interface number 0 [ 1410.910355][ T9193] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1410.910385][ T9193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.910407][ T9193] usb 6-1: Product: syz [ 1410.910421][ T9193] usb 6-1: Manufacturer: syz [ 1410.910436][ T9193] usb 6-1: SerialNumber: syz [ 1410.929911][ T9193] usb 6-1: config 0 descriptor?? [ 1410.980950][ T9193] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1411.192376][ T9193] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1411.214344][ T9193] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1411.633324][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1411.674720][ T9193] usb 6-1: USB disconnect, device number 22 [ 1411.705612][ T9193] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1411.742414][ T9193] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1411.743241][ T9193] quatech2 6-1:0.51: device disconnected [ 1415.221446][T13395] netlink: 884 bytes leftover after parsing attributes in process `syz.0.16326'. [ 1416.183353][T13426] netlink: 36 bytes leftover after parsing attributes in process `syz.9.16338'. [ 1417.227548][T13439] bridge_slave_0: left allmulticast mode [ 1417.227582][T13439] bridge_slave_0: left promiscuous mode [ 1417.227868][T13439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.381382][T13439] bridge_slave_1: left allmulticast mode [ 1418.381418][T13439] bridge_slave_1: left promiscuous mode [ 1418.381676][T13439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.295934][T13439] bond0: (slave bond_slave_0): Releasing backup interface [ 1419.685118][T13439] bond0: (slave bond_slave_1): Releasing backup interface [ 1420.638862][T13439] team0: Port device team_slave_0 removed [ 1420.783440][T13439] team0: Port device team_slave_1 removed [ 1420.788374][T13439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.788408][T13439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.050661][T13439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.050696][T13439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.972283][T13439] net_ratelimit: 44 callbacks suppressed [ 1421.972308][T13439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1431.039402][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.812950][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1434.812970][ T37] audit: type=1326 audit(1767055000.349:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.813860][ T37] audit: type=1326 audit(1767055000.349:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.864589][ T37] audit: type=1326 audit(1767055000.379:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.934539][ T37] audit: type=1326 audit(1767055000.479:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.934908][ T37] audit: type=1326 audit(1767055000.479:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.935095][ T37] audit: type=1326 audit(1767055000.479:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.935278][ T37] audit: type=1326 audit(1767055000.479:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.935674][ T37] audit: type=1326 audit(1767055000.479:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.935844][ T37] audit: type=1326 audit(1767055000.479:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1434.937051][ T37] audit: type=1326 audit(1767055000.479:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13636 comm="syz.5.16404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f077b86f749 code=0x7ffc0000 [ 1449.731050][T13774] ./file0: Can't lookup blockdev [ 1457.824644][T13830] [ 1457.824658][T13830] ====================================================== [ 1457.824667][T13830] WARNING: possible circular locking dependency detected [ 1457.824686][T13830] syzkaller #0 Tainted: G L [ 1457.824698][T13830] ------------------------------------------------------ [ 1457.824707][T13830] syz.0.16501/13830 is trying to acquire lock: [ 1457.824719][T13830] ffff888097778128 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x70e/0xe20 [ 1457.824812][T13830] [ 1457.824812][T13830] but task is already holding lock: [ 1457.824820][T13830] ffff8880388bb478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1457.824868][T13830] [ 1457.824868][T13830] which lock already depends on the new lock. [ 1457.824868][T13830] [ 1457.824875][T13830] [ 1457.824875][T13830] the existing dependency chain (in reverse order) is: [ 1457.824883][T13830] [ 1457.824883][T13830] -> #2 (&of->mutex){+.+.}-{4:4}: [ 1457.824909][T13830] mutex_lock_nested+0x5a/0x1d0 [ 1457.824941][T13830] kernfs_fop_write_iter+0x1df/0x540 [ 1457.824963][T13830] iter_file_splice_write+0x977/0x10b0 [ 1457.824997][T13830] do_splice+0xc8e/0x1680 [ 1457.825017][T13830] __se_sys_splice+0x2e1/0x460 [ 1457.825038][T13830] do_syscall_64+0xec/0xf80 [ 1457.825103][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.825163][T13830] [ 1457.825163][T13830] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1457.825192][T13830] mutex_lock_nested+0x5a/0x1d0 [ 1457.825218][T13830] anon_pipe_write+0x160/0x1460 [ 1457.825244][T13830] __kernel_write_iter+0x48a/0x920 [ 1457.825273][T13830] __kernel_write+0xef/0x150 [ 1457.825303][T13830] autofs_notify_daemon+0x721/0xe20 [ 1457.825322][T13830] autofs_wait+0x11f7/0x1900 [ 1457.825338][T13830] autofs_mount_wait+0x16b/0x390 [ 1457.825356][T13830] autofs_d_automount+0x64f/0x820 [ 1457.825388][T13830] __traverse_mounts+0x301/0x5e0 [ 1457.825408][T13830] step_into_slowpath+0x469/0x7d0 [ 1457.825428][T13830] path_lookupat+0x433/0x8c0 [ 1457.825448][T13830] filename_lookup+0x212/0x570 [ 1457.825469][T13830] user_path_at+0x3a/0x60 [ 1457.825492][T13830] __se_sys_mount+0x2d4/0x410 [ 1457.825512][T13830] do_syscall_64+0xec/0xf80 [ 1457.825529][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.825549][T13830] [ 1457.825549][T13830] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1457.825578][T13830] __lock_acquire+0x15a6/0x2cf0 [ 1457.825607][T13830] lock_acquire+0x107/0x340 [ 1457.825632][T13830] mutex_lock_nested+0x5a/0x1d0 [ 1457.825656][T13830] autofs_notify_daemon+0x70e/0xe20 [ 1457.825674][T13830] autofs_wait+0x11f7/0x1900 [ 1457.825691][T13830] autofs_mount_wait+0x16b/0x390 [ 1457.825709][T13830] autofs_d_automount+0x64f/0x820 [ 1457.825739][T13830] __traverse_mounts+0x301/0x5e0 [ 1457.825757][T13830] step_into_slowpath+0x469/0x7d0 [ 1457.825776][T13830] path_lookupat+0x433/0x8c0 [ 1457.825795][T13830] filename_lookup+0x212/0x570 [ 1457.825826][T13830] kern_path+0x35/0x50 [ 1457.825846][T13830] lookup_bdev+0xc0/0x280 [ 1457.825952][T13830] resume_store+0x169/0x480 [ 1457.825979][T13830] kernfs_fop_write_iter+0x3b0/0x540 [ 1457.826001][T13830] vfs_write+0x5d5/0xb40 [ 1457.826027][T13830] ksys_write+0x14b/0x260 [ 1457.826053][T13830] do_syscall_64+0xec/0xf80 [ 1457.826071][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.826090][T13830] [ 1457.826090][T13830] other info that might help us debug this: [ 1457.826090][T13830] [ 1457.826097][T13830] Chain exists of: [ 1457.826097][T13830] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 1457.826097][T13830] [ 1457.826131][T13830] Possible unsafe locking scenario: [ 1457.826131][T13830] [ 1457.826139][T13830] CPU0 CPU1 [ 1457.826145][T13830] ---- ---- [ 1457.826153][T13830] lock(&of->mutex); [ 1457.826167][T13830] lock(&pipe->mutex); [ 1457.826182][T13830] lock(&of->mutex); [ 1457.826198][T13830] lock(&sbi->pipe_mutex); [ 1457.826211][T13830] [ 1457.826211][T13830] *** DEADLOCK *** [ 1457.826211][T13830] [ 1457.826217][T13830] 4 locks held by syz.0.16501/13830: [ 1457.826230][T13830] #0: ffff888023764728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x253/0x320 [ 1457.826283][T13830] #1: ffff888034c7e480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1457.826346][T13830] #2: ffff8880388bb478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1457.826399][T13830] #3: ffff888141a99008 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1457.826456][T13830] [ 1457.826456][T13830] stack backtrace: [ 1457.826474][T13830] CPU: 1 UID: 0 PID: 13830 Comm: syz.0.16501 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1457.826503][T13830] Tainted: [L]=SOFTLOCKUP [ 1457.826511][T13830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1457.826525][T13830] Call Trace: [ 1457.826534][T13830] [ 1457.826544][T13830] dump_stack_lvl+0xe8/0x150 [ 1457.826580][T13830] print_circular_bug+0x2e2/0x300 [ 1457.826603][T13830] check_noncircular+0x12e/0x150 [ 1457.826643][T13830] __lock_acquire+0x15a6/0x2cf0 [ 1457.826687][T13830] ? autofs_notify_daemon+0x70e/0xe20 [ 1457.826706][T13830] lock_acquire+0x107/0x340 [ 1457.826735][T13830] ? autofs_notify_daemon+0x70e/0xe20 [ 1457.826759][T13830] ? autofs_notify_daemon+0x70e/0xe20 [ 1457.826784][T13830] ? autofs_notify_daemon+0x70e/0xe20 [ 1457.826816][T13830] mutex_lock_nested+0x5a/0x1d0 [ 1457.826844][T13830] ? autofs_notify_daemon+0x70e/0xe20 [ 1457.826868][T13830] autofs_notify_daemon+0x70e/0xe20 [ 1457.826893][T13830] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1457.826930][T13830] ? __rt_spin_lock_init+0x3e/0x50 [ 1457.826953][T13830] ? autofs_wait+0xe22/0x1900 [ 1457.826976][T13830] autofs_wait+0x11f7/0x1900 [ 1457.827003][T13830] ? __pfx_autofs_wait+0x10/0x10 [ 1457.827025][T13830] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1457.827053][T13830] ? reacquire_held_locks+0x104/0x190 [ 1457.827081][T13830] ? rt_spin_lock+0x1c1/0x3e0 [ 1457.827111][T13830] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1457.827141][T13830] ? rt_spin_unlock+0x150/0x200 [ 1457.827171][T13830] autofs_mount_wait+0x16b/0x390 [ 1457.827193][T13830] autofs_d_automount+0x64f/0x820 [ 1457.827232][T13830] __traverse_mounts+0x301/0x5e0 [ 1457.827260][T13830] step_into_slowpath+0x469/0x7d0 [ 1457.827287][T13830] ? __pfx_step_into_slowpath+0x10/0x10 [ 1457.827310][T13830] ? lookup_slow+0x5e/0x70 [ 1457.827338][T13830] ? up_read+0x23/0x40 [ 1457.827361][T13830] path_lookupat+0x433/0x8c0 [ 1457.827395][T13830] filename_lookup+0x212/0x570 [ 1457.827422][T13830] ? __pfx_filename_lookup+0x10/0x10 [ 1457.827458][T13830] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1457.827502][T13830] ? kmem_cache_alloc_noprof+0x1e4/0x6c0 [ 1457.827534][T13830] ? getname_kernel+0x146/0x2f0 [ 1457.827559][T13830] ? getname_kernel+0x20e/0x2f0 [ 1457.827583][T13830] kern_path+0x35/0x50 [ 1457.827607][T13830] lookup_bdev+0xc0/0x280 [ 1457.827638][T13830] ? trace_kmalloc+0x1f/0xb0 [ 1457.827668][T13830] ? __pfx_lookup_bdev+0x10/0x10 [ 1457.827697][T13830] ? kstrndup+0xbf/0x160 [ 1457.827727][T13830] resume_store+0x169/0x480 [ 1457.827751][T13830] ? sysfs_file_kobj+0x1a/0x230 [ 1457.827780][T13830] ? __pfx_resume_store+0x10/0x10 [ 1457.827816][T13830] ? sysfs_file_kobj+0x1a/0x230 [ 1457.827845][T13830] ? sysfs_file_kobj+0x1a/0x230 [ 1457.827871][T13830] ? sysfs_file_kobj+0x1a/0x230 [ 1457.827901][T13830] ? sysfs_file_kobj+0x1e4/0x230 [ 1457.827930][T13830] ? sysfs_kf_write+0x166/0x260 [ 1457.827963][T13830] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1457.827992][T13830] kernfs_fop_write_iter+0x3b0/0x540 [ 1457.828021][T13830] vfs_write+0x5d5/0xb40 [ 1457.828055][T13830] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1457.828082][T13830] ? __pfx_vfs_write+0x10/0x10 [ 1457.828114][T13830] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1457.828135][T13830] ? lockdep_hardirqs_on+0x7b/0x110 [ 1457.828157][T13830] ? mutex_lock_nested+0x154/0x1d0 [ 1457.828185][T13830] ? fdget_pos+0x253/0x320 [ 1457.828214][T13830] ksys_write+0x14b/0x260 [ 1457.828245][T13830] ? __pfx_ksys_write+0x10/0x10 [ 1457.828282][T13830] do_syscall_64+0xec/0xf80 [ 1457.828303][T13830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.828324][T13830] ? trace_irq_disable+0x37/0x100 [ 1457.828368][T13830] ? clear_bhb_loop+0x60/0xb0 [ 1457.828394][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.828416][T13830] RIP: 0033:0x7f7b5c53f749 [ 1457.828436][T13830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1457.828456][T13830] RSP: 002b:00007f7b5a79e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1457.828477][T13830] RAX: ffffffffffffffda RBX: 00007f7b5c795fa0 RCX: 00007f7b5c53f749 [ 1457.828494][T13830] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1457.828508][T13830] RBP: 00007f7b5c5c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1457.828522][T13830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1457.828535][T13830] R13: 00007f7b5c796038 R14: 00007f7b5c795fa0 R15: 00007ffcfeddd868 [ 1457.828562][T13830] [ 1457.904424][T13830] PM: Image not found (code -22)