last executing test programs: 31m29.098553008s ago: executing program 32 (id=125): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f0000000180)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 31m24.516253269s ago: executing program 33 (id=136): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x1000882, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="1cbb2cdd171d492deb3acb4b50f57fe03514acd1d4c838e2c6f896f7131908927bb900ea7fd140c59552b18fd7fa112f3255fd02c04423cea65c50f3f1131a9644733abcb0218bbfab259417ec021df71f9bd9568e390396358819c94ed2351551a96eeff9b964e5f961027ae3a3a71b49c7364d5ebe1d6525c6437993d4082972d57be58928184da45cbf987f0a13f648dc9a6621c8392b2f1fedc71c9d812425a68ba4edb0552df5b8e44af9249846923776c821deddd2f02d473b436ba514df04522dddad1cb5e75766d125d5eafcc652fbd3deaac0bf7eaf7ed8a586d36bffdb2f61bced8a3fd75f66c8eca0de326c41a8993c3ef39131"], 0x0, 0xc36, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkN22YXnroIUBR9JATgdYokKKB0RRFj2zrAsnFh8KnnogWNoKiB7YIkFOwxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi+fx2mq0+dw2fay9evTYzMXn7aiOpqjlQlS9/hp8/cfLUl14YP93LD6+/156K16YvnK2/vHRleaW1utqar88stueW5lv3vIXd1r/ZWHUA6ldevzp/6dJq/cRzJ2/4+troB0OPHxk9M/7Msad7ZWcmJien+8rUBj/y3m9xpxEeh6KIY5Hi2e//ODUjoojdH4u7XDv7baTqxFjViZmJyaojC+3m4lr55VTvQBQR9b5Kjd4xegDnYlcaEetl88sGj5Xdm15urjQvLrTqU82VtfZae2lxKnVbW/anHkWcThEbEbE1dOvmBqOIWqT47uHtdDEiBnrH4YvVwOA7t6PYxz7eg7Kd9cGIjeIROGcH2FAU8Wqk+Mk7RcyVxyz/xBciXi3zHyPeKvOliFReGKci3q+uo5GH3HL2Qi2K+LPy/J/ZTvPV/aB3Xzn3tfpXFi8t9ZXt3Vce+efDg3TA703DUUSzuuNvp4/+mx0AAAAAAAAAAAAAAAAA9tpIFPFUpHjl3/+gGlcc1bj0w2fGf3f05/vHjD95l+2UZZ+LiPXi3sbkHspDiKfSVEoPeSzxJ9lwFPFHefzftx92YwAAAAAAAAAAAAAAAAAAAD7RingvUrz47tG0Ef1zircXL9cvNC8udGeF7c3925szvdPpdOqpm42csznXc27k3My5lTOKXD9nI+dszvWcGzk3c27ljIFcP2cj52zO9ZwbOTdzbuWMWq6fs5FzNud6zo2cmzm3csYBmbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgifhYpvvON7RQpIhoRs9HNzaFeGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYRpKRfwgUtR/r3F9XS0iUvVv19Hyl1PROFTmp6MxXuZL0Tibs1llrfHth9B+dmcwFfGjSDE0/Pb1E57P/2D30/XLIN765s6nX6p1c6D35egHQ48fOXxmfPJXnrzTcrpdA8bOtRevXqvPTExOTvetruW9f7pv3Wjeb7E3XSciVt948/XmwkJrxcInY6HWXajFnm55JGJvN7h3C7XuQr5fxUNvzx0WGgejGTsLUd37b3vP5mOjfP6/Hyl+893/6D3we8//n+t+uv6Ej5/+8c7z/8WbN7RPz/8n+ta9mH83MliLGF67sjx4JGJ49Y03j7WvNC+3LrcWTx0//uXx8S+fPD54KGL4Unuh1be060MFAAAAAAAAAAAAAAAA8GClIn47UjR/tJ3qEXGtGq81emb8mWNPD8RANd7qhnFbr01fOFt/eenK8kprdbU1X59ZbM8tzbfudXfD1XCvmYnJfenMXY3sc/tHhl9eWn5jpX3599du+/1jw2cvrq6tNOdu/3WMRBHR6F8zVjV4ZmKyavRCu7lYVZ3ao4GZg6mI/4wUc6fq6fN5XR7/V8Z7g31l+8f/r/etr5b3afzfp27aT0pF/DRS/MafPxmfr9r5WNxyzHK5v44UY6c/l8vFobJcrw3d9wp0RwaWZf83Uvz9z24s2+v7Eztln7+/o3vwlef/cKT4wZ9+L341r7vx/Q874z/7z/9jN29on87/Z/rWPXbD+wp23XXy+T8WKV564u34tbzuw97/UUSn0/lWxNFc+Pr7Ofbp/H+2b91odPf763vXfQAAAAAAAAAAgEfWYCribyLF05O19EJedy9//2/+5g3t09//+sW+dfMPaL6iXR9UAAAAADggBlMR70WKy2tvXx9D3Tf++8bxn7+1M/f6RLrp2+rP+X6hem/AXv75X7/RvN/Z3XcbAAAAAAAAAAAAAAAAAAAADpSUinghz6c+e5f51DcjxSv//Wwul46U5XrzwI9Wvw6fX1o8dnZhYWmuuda8uNCqTy8351pl3c9Eiu2/+lyuW1Tzq/fmm+/O8T7c6c3FvhIpJv+2V7Y7F3tvbvLufODdudjLsp+KFP/1dzeW7c1j/dmdsifKsn8ZKb7+T7cve2Sn7Mmy7PcixQ+/Xu+Vfaws23s/avedpMO1WGg9N7e0cMurUAEAAAAAAAAAAAAAAAAAAOB+DaYi/iRS/M+VjVjPw/7z/P+9GfhrvbJvfbNvvv+bXKvm+R+t5v+/0/JHmf9/dM96CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj44URbwZKZbPb6fNofJz1/C59uLVazMTk7evNpKqmgNV+fJn+PkTJ0996YXx07388Pp77al4bfrC2frLS1eWV1qrq635+sxie25pvnXPW9ht/Z1D1zVWHYD6ldevzl+6tFo/8dzJG76+NvrB0ONHRs+MP3Ps6V7ZmYnJyem+MrXB+9j7fTVux6Eo4i8ixbPf/3H656GIInZ/LO5y7ey3kaoTY1UnZiYmq44stJuLa+WXU70DUUTU+yo1esfoAZyLXWlErJfNLxs8VnZverm50ry40KpPNVfW2mvtpcWp1G1t2Z96FHE6RWxExNbQrZsbjCJejxTfPbyd/mUoYqB3HL54fvqrx0/cuR3FXnWo85Fqle2sD0ZsFI/AOTvAhqKIf4gUP3nnaPzrUEQtuj/xhYhX+wu+FJHKC+NUxPu3uY54NNWiiP8rz/+Z7fTOUHk/6N1Xzn2t/pXFS0t9ZXv3lYP0fOjc/7U4sge7vXcH/N40HEX8sLrjb6d/8981AAAAAAAAAAAAAAAAwAFSxC9HihffPZqq8cHXxxS3Fy/XLzQvLnSH9fXG/tUj/rDMTqfTqaduNnLO5lzPuZFzM+dWzihy/ZyNnLM513Nu5NzMuZUzBnL9nI2csznXc27k3My5lTNqVXQ6nW9169dy/ZzrOTdqEUVZP3/eyhkHZOweAAAAAAAAAAAAAAAAAADw8VJU/6T4zje2UzWXaiNiNrq5aT7Qj73/DwAA///ofv/D") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x1008008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) 30m45.905060898s ago: executing program 34 (id=202): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f0000000180)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 29m1.486976107s ago: executing program 35 (id=398): ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x40043d04, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x200000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpgid(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800314, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x486, &(0x7f0000001440)="$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") creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000400)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 23m28.902082385s ago: executing program 6 (id=1204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000104c05740300000000000109022400010000100308040000090300030009210a00030122290009058103ff03000b04"], 0x0) setitimer(0x0, 0x0, &(0x7f0000008580)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) inotify_init1(0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r6, 0xb19, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20008080) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x4000000) getdents64(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x5, 0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5821c98b097e09f2) syz_open_dev$vcsn(0x0, 0x10000000a, 0x22c0) 23m13.797394367s ago: executing program 36 (id=1204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000104c05740300000000000109022400010000100308040000090300030009210a00030122290009058103ff03000b04"], 0x0) setitimer(0x0, 0x0, &(0x7f0000008580)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) inotify_init1(0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r6, 0xb19, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20008080) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x4000000) getdents64(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x5, 0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5821c98b097e09f2) syz_open_dev$vcsn(0x0, 0x10000000a, 0x22c0) 23m10.472243035s ago: executing program 7 (id=1244): socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x3) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) 23m8.377790251s ago: executing program 7 (id=1250): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0x11af9, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23m6.084675867s ago: executing program 7 (id=1252): unshare(0x24060400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) getsockname$netlink(r1, 0x0, 0x0) 23m5.677809857s ago: executing program 7 (id=1253): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m5.538216824s ago: executing program 7 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 23m4.281794707s ago: executing program 7 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x42000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) 22m54.146407969s ago: executing program 3 (id=1269): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 22m53.179609678s ago: executing program 3 (id=1270): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22m53.079452943s ago: executing program 3 (id=1271): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a400000", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) 22m52.674565163s ago: executing program 3 (id=1272): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000140)={[{@utf8}, {}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x6b}}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000000880)="$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") 22m51.455490824s ago: executing program 3 (id=1273): r0 = epoll_create(0xf) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x30000001}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000029c0)={0xc, {"a2e3ad214fc7529b1b5f470787f70e06d038e7ff7fc6e5539b3267078b089b3b08386c090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ed30c000000000000040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000007008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07845754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcdddd754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfbb655548cf99c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad03f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a12810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de0ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac34b308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2dd9bb96e222d8e904f6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 22m50.56295281s ago: executing program 3 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x24004004) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x782, &(0x7f0000001040)="$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") capset(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000300), 0x0}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22m47.142130072s ago: executing program 37 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x42000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) 22m35.040606293s ago: executing program 38 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x24004004) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x782, &(0x7f0000001040)="$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") capset(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000300), 0x0}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20m45.685694091s ago: executing program 4 (id=1496): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) r3 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) fcntl$setsig(r4, 0xa, 0xe) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 20m43.386018967s ago: executing program 4 (id=1498): mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x80000000) r3 = syz_socket_connect_nvme_tcp() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202000000000070000000008000300", @ANYRES32=r5, @ANYBLOB="08090000ac1414bb080002000a010100613db2d2249b78bbb22d1520efbb0264f23355c3841a61c54fb8dda48fd3588e5f46486cb41335e4617b8fd52fa3e13f2602ef893b3f207ab7f27bba23eb77"], 0x34}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000480021032cbd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0400000008000200bcd763e3c8684294da761b26"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0x4) socket$key(0xf, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000020, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_TXQLEN={0x8, 0xd, 0x40}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000801) 20m41.166185069s ago: executing program 4 (id=1501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000ffffffffffffff8100fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321", 0x4c) recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x100, &(0x7f00000001c0)={0x77359400}) 20m38.530496802s ago: executing program 4 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000700)=""/235, 0xeb}], 0x2, 0x2001, 0x2) 20m36.40525314s ago: executing program 4 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xff8c) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) 20m34.496176506s ago: executing program 4 (id=1511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x7}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x102d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) 20m19.044135086s ago: executing program 39 (id=1511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x7}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x102d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) 13m31.626893601s ago: executing program 0 (id=2825): unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x283f, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 13m29.785906627s ago: executing program 0 (id=2834): syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb1590000000109022400010800"], 0x0) 13m25.455927121s ago: executing program 0 (id=2848): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 13m24.084025425s ago: executing program 0 (id=2853): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 13m23.829441687s ago: executing program 0 (id=2857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008090, &(0x7f0000000100)={[{@nodots}, {@dots}, {@fat=@nfs}, {@fat=@uid}, {@dots}, {@dots}]}, 0x1, 0x11c3, &(0x7f0000001240)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x0, 0x11ff, &(0x7f0000002480)="$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") fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) bind$inet(r1, &(0x7f0000019080)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 13m23.33351231s ago: executing program 0 (id=2860): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x6e) 13m22.134818686s ago: executing program 40 (id=2860): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x6e) 8m57.719001815s ago: executing program 1 (id=3728): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x10040) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2f86dd664e410600083a01fe8000000000000000000000000000bb0000400000000000000000000000000080"], 0x0) 8m54.248335538s ago: executing program 1 (id=3746): socket$unix(0x1, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') pipe2(&(0x7f00000000c0), 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 8m53.951784492s ago: executing program 1 (id=3747): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42002, 0x1c7) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, &(0x7f0000000540)=ANY=[]) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000200)) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) fallocate(r5, 0x3, 0x7, 0x8000c62) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x10, 0x3, 0x0) 8m51.545558115s ago: executing program 1 (id=3751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="040000007f000000040000000700040004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="392beca00252fa4e3b000000000100000000f2ffffff200000000000"], 0x50) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r4, &(0x7f0000001b80), 0x0}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8bf}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) io_setup(0x7, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) unshare(0x22020600) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0xb1, &(0x7f0000000440)=""/177, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x0, 0xfffffcd5, 0x10, 0x8, 0x0, 0x0}}, 0x10) 8m45.305596528s ago: executing program 1 (id=3755): socket$unix(0x1, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') pipe2(&(0x7f00000000c0), 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 8m44.570605982s ago: executing program 1 (id=3757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 8m28.925727366s ago: executing program 41 (id=3757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 35.525707904s ago: executing program 5 (id=5060): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 35.357716482s ago: executing program 5 (id=5062): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x1a, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 34.737922711s ago: executing program 5 (id=5064): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f7000000000000"], 0x310) 32.087876775s ago: executing program 5 (id=5079): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 31.689396894s ago: executing program 5 (id=5080): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x3, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@replay_thresh={0x8, 0xb, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 31.426802127s ago: executing program 5 (id=5082): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000300)=0x6a) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000100)) r5 = socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 30.91887135s ago: executing program 42 (id=5082): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000300)=0x6a) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000100)) r5 = socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.97152161s ago: executing program 2 (id=5148): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) close(0x5) close(0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000060000000c00000040"], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[], 0x0) 4.655153772s ago: executing program 8 (id=5152): r0 = fsmount(0xffffffffffffffff, 0x0, 0x6) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f7000000000000"], 0x310) 2.77449748s ago: executing program 8 (id=5155): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.525758732s ago: executing program 9 (id=5156): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.525610632s ago: executing program 8 (id=5157): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 2.525506632s ago: executing program 2 (id=5158): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.522177862s ago: executing program 6 (id=5083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x5c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 2.387244108s ago: executing program 8 (id=5159): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x4, 0x0, 0x47}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 2.35573276s ago: executing program 6 (id=5160): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x100000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x3c0, 0x188, 0x188, 0xffffffff, 0xe0, 0x188, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) fallocate(r4, 0x20, 0x8, 0x4) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2.35507712s ago: executing program 9 (id=5161): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 2.061732484s ago: executing program 8 (id=5162): r0 = fsopen(0x0, 0x1) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f7000000000000"], 0x310) 1.973560967s ago: executing program 9 (id=5163): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000cc0)={&(0x7f0000000740)={0xa, 0x4e21, 0x100, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x18}, 0x800) 1.187072575s ago: executing program 6 (id=5164): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f4, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) 797.674133ms ago: executing program 9 (id=5165): bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0}) 777.569314ms ago: executing program 8 (id=5166): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) close(0x5) close(0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000060000000c00000040"], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[], 0x0) 706.149737ms ago: executing program 2 (id=5167): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 649.68492ms ago: executing program 6 (id=5168): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000001140)={&(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x6, 0x2}, 0x80, 0x0}, 0x40000) 554.607595ms ago: executing program 9 (id=5169): r0 = socket$caif_stream(0x25, 0x1, 0x3) recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x42) 522.095505ms ago: executing program 2 (id=5170): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 409.673591ms ago: executing program 6 (id=5171): socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@gettaction={0x28, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x100000001, 0x6}) 409.406251ms ago: executing program 9 (id=5172): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x100000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x3c0, 0x188, 0x188, 0xffffffff, 0xe0, 0x188, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) fallocate(r4, 0x20, 0x8, 0x4) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 332.578695ms ago: executing program 2 (id=5173): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x37, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x20006}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fb}}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @tail_call]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 0s ago: executing program 2 (id=5174): r0 = fsopen(0x0, 0x1) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f7000000000000"], 0x310) kernel console output (not intermixed with test programs): ] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1707.952649][ T7973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.962363][ T7973] usb 10-1: Product: syz [ 1707.968259][ T7973] usb 10-1: Manufacturer: syz [ 1707.983481][ T7973] usb 10-1: SerialNumber: syz [ 1708.256218][ T7973] usb 10-1: Can't get UAC3 power state for id 10 [ 1708.288218][ T7973] usb 10-1: BAAD MICROPHONE c_chmask mismatch [ 1708.302790][T22229] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1708.494418][ T7973] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 1708.503114][T22229] usb 6-1: Using ep0 maxpacket: 16 [ 1708.531273][T22229] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1708.532453][ T7973] usb 10-1: USB disconnect, device number 50 [ 1708.559636][T22229] usb 6-1: config 7 has an invalid interface number: 118 but max is 1 [ 1708.593111][T22229] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1708.653736][T22229] usb 6-1: config 7 has an invalid interface number: 230 but max is 1 [ 1708.662391][T22229] usb 6-1: config 7 has no interface number 0 [ 1708.689829][T22229] usb 6-1: config 7 has no interface number 1 [ 1708.717633][T22229] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1708.733410][T24204] udevd[24204]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1708.768906][T22229] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1708.811756][T22229] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1708.842325][T22229] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1708.887242][T22229] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1708.907795][T22229] usb 6-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1708.936421][T22229] usb 6-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1708.952942][T22229] usb 6-1: config 7 interface 118 has no altsetting 0 [ 1708.960082][T22229] usb 6-1: config 7 interface 230 has no altsetting 0 [ 1708.977046][T22229] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1708.991552][T22229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.001502][T22229] usb 6-1: Product: syz [ 1709.007064][T22229] usb 6-1: Manufacturer: syz [ 1709.012192][T22229] usb 6-1: SerialNumber: syz [ 1709.025681][T24201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1709.036900][T24201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1709.503104][ T7973] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1709.698166][T24201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.713402][T24201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.715210][ T7973] usb 10-1: Using ep0 maxpacket: 16 [ 1709.737969][ T7973] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.751232][T24201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.765634][ T7973] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1709.789979][ T7973] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1709.811437][ T7973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.814378][T24201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.838948][ T7973] usb 10-1: Product: syz [ 1709.847480][ T7973] usb 10-1: Manufacturer: syz [ 1709.858751][ T7973] usb 10-1: SerialNumber: syz [ 1709.930429][T22229] (null): radio-mr800 - initialization failed [ 1709.949713][T22229] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 1709.973366][T22229] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 1710.032760][T22229] usb 6-1: USB disconnect, device number 19 [ 1710.153588][ T7973] usb 10-1: 0:2 : does not exist [ 1710.168744][ T7973] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1710.210683][ T7973] usb 10-1: USB disconnect, device number 51 [ 1710.264734][T24204] udevd[24204]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1716.272122][T22227] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1718.903966][T24288] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1719.127906][T24288] overlayfs: failed to look up (tracing) for ino (-66) [ 1722.993421][T24316] bridge0: entered allmulticast mode [ 1723.192783][T10188] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1723.419252][T10188] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.450514][T10188] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1723.486403][T10188] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1723.533003][T10188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1723.541658][T10188] usb 9-1: SerialNumber: syz [ 1724.392242][T10188] usb 9-1: can't set config #1, error -71 [ 1724.400555][T10188] usb 9-1: USB disconnect, device number 27 [ 1724.856335][T24350] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1725.030678][T24350] overlayfs: failed to look up (tracing) for ino (-66) [ 1725.402957][ T7973] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1725.622701][ T7973] usb 9-1: Using ep0 maxpacket: 16 [ 1725.633954][ T7973] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.672816][ T7973] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1725.706596][ T7973] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1725.733014][ T7973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.766819][ T7973] usb 9-1: Product: syz [ 1725.771335][ T7973] usb 9-1: Manufacturer: syz [ 1725.806339][ T7973] usb 9-1: SerialNumber: syz [ 1726.295567][ T7973] usb 9-1: 0:2 : does not exist [ 1727.497878][ T7973] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1727.771268][ T7973] usb 9-1: USB disconnect, device number 28 [ 1727.806796][T24305] udevd[24305]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1729.161199][T24383] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1731.263310][T24392] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1731.445108][T24392] overlayfs: failed to look up (tracing) for ino (-66) [ 1731.585514][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.703669][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.592705][T24425] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1736.102863][ T7973] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1736.296016][ T7973] usb 10-1: config 4 has an invalid interface number: 121 but max is 0 [ 1736.317338][ T7973] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.342296][ T7973] usb 10-1: config 4 has no interface number 0 [ 1736.351526][ T7973] usb 10-1: config 4 interface 121 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1736.375403][ T7973] usb 10-1: config 4 interface 121 has no altsetting 0 [ 1736.398615][ T7973] usb 10-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 1736.418097][ T7973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.432123][ T7973] usb 10-1: Product: syz [ 1736.441987][ T7973] usb 10-1: Manufacturer: syz [ 1736.449845][ T7973] usb 10-1: SerialNumber: syz [ 1736.682283][ T5814] usb 10-1: USB disconnect, device number 52 [ 1739.033551][T24493] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1739.049199][T24493] overlayfs: overlapping lowerdir path [ 1742.986596][T24519] syzkaller0: entered promiscuous mode [ 1743.152623][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1743.353245][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 1743.362843][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1743.372945][ T5814] usb 3-1: config 7 has an invalid interface number: 118 but max is 1 [ 1743.382201][ T5814] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1743.403174][ T5814] usb 3-1: config 7 has an invalid interface number: 230 but max is 1 [ 1743.411834][ T5814] usb 3-1: config 7 has no interface number 0 [ 1743.431309][ T5814] usb 3-1: config 7 has no interface number 1 [ 1743.449980][ T5814] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1743.473675][ T5814] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1743.509143][ T5814] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1743.529977][ T5814] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1743.757370][ T5814] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1743.769528][ T5814] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1743.781147][ T5814] usb 3-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1743.795616][ T5814] usb 3-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1743.821434][ T5814] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1743.841197][ T5814] usb 3-1: config 7 interface 230 has no altsetting 0 [ 1743.892095][ T5814] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1743.921099][T24536] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1743.930165][T24536] overlayfs: overlapping lowerdir path [ 1743.989718][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.149902][ T5814] usb 3-1: Product: syz [ 1744.227662][ T5814] usb 3-1: Manufacturer: syz [ 1744.304639][ T5814] usb 3-1: SerialNumber: syz [ 1744.499177][T24516] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1744.529022][T24516] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1744.868834][T24543] syzkaller0: entered promiscuous mode [ 1745.269381][T24516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.320934][T24516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.398089][T24516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.443707][T24516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.545794][ T5814] (null): radio-mr800 - initialization failed [ 1745.594809][ T5814] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 1745.643400][ T5814] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1745.753523][ T5814] usb 3-1: USB disconnect, device number 10 [ 1746.809410][T24576] syzkaller0: entered promiscuous mode [ 1747.389626][T24589] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1747.398291][T24589] overlayfs: overlapping lowerdir path [ 1752.244184][T24621] syzkaller0: entered promiscuous mode [ 1754.552713][ T5814] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1754.813046][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 1754.832069][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.922790][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1755.014733][ T5814] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1755.123549][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.198180][ T5814] usb 3-1: config 0 descriptor?? [ 1755.768545][ T5814] cypress 0003:04B4:DE61.003D: ignoring exceeding usage max [ 1755.823917][ T5814] cypress 0003:04B4:DE61.003D: report_id 3177015884 is invalid [ 1755.894149][ T5814] cypress 0003:04B4:DE61.003D: item 0 4 1 8 parsing failed [ 1755.928076][ T5814] cypress 0003:04B4:DE61.003D: parse failed [ 1755.966570][ T5814] cypress: probe of 0003:04B4:DE61.003D failed with error -22 [ 1756.033101][ T5814] usb 3-1: USB disconnect, device number 11 [ 1757.926089][T24669] syzkaller0: entered promiscuous mode [ 1759.682688][T22227] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1759.892627][T22227] usb 10-1: Using ep0 maxpacket: 16 [ 1759.919497][T22227] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1759.933835][T22227] usb 10-1: config 7 has an invalid interface number: 118 but max is 1 [ 1759.942361][T22227] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1759.972622][T22227] usb 10-1: config 7 has an invalid interface number: 230 but max is 1 [ 1759.993353][T22227] usb 10-1: config 7 has no interface number 0 [ 1759.999648][T22227] usb 10-1: config 7 has no interface number 1 [ 1760.029173][T22227] usb 10-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1760.060891][T22227] usb 10-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1760.077547][T22227] usb 10-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1760.102890][T22227] usb 10-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1760.117913][T22227] usb 10-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1760.152616][T22227] usb 10-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1760.171850][T22227] usb 10-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1760.192599][T22227] usb 10-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1760.209103][T22227] usb 10-1: config 7 interface 118 has no altsetting 0 [ 1760.220816][T22227] usb 10-1: config 7 interface 230 has no altsetting 0 [ 1760.249677][T22227] usb 10-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1760.263732][T22227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.272112][T22227] usb 10-1: Product: syz [ 1760.277146][T22227] usb 10-1: Manufacturer: syz [ 1760.284400][T22227] usb 10-1: SerialNumber: syz [ 1760.528200][T24693] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1760.542968][T24693] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1762.196209][T24708] syzkaller0: entered promiscuous mode [ 1762.340933][T24693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.367392][T24693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.398208][T24693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.437828][T24693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.502633][T22227] (null): radio-mr800 - initialization failed [ 1762.509193][T22227] radio-mr800: probe of 10-1:7.118 failed with error -71 [ 1762.517420][T22227] usbhid 10-1:7.118: couldn't find an input interrupt endpoint [ 1762.551798][T22227] usb 10-1: USB disconnect, device number 53 [ 1764.849316][T24737] syzkaller0: entered promiscuous mode [ 1765.662629][T22227] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1765.732837][ T5814] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1765.869481][T22227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1765.898613][T22227] usb 3-1: New USB device found, idVendor=0499, idProduct=105b, bcdDevice= 0.40 [ 1765.911638][T22227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.922803][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 1765.935117][ T5814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.952683][T22227] usb 3-1: Product: syz [ 1765.957332][ T5814] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1765.973627][T22227] usb 3-1: Manufacturer: syz [ 1765.978636][T22227] usb 3-1: SerialNumber: syz [ 1765.991625][ T5814] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1766.019088][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.028760][ T5814] usb 6-1: Product: syz [ 1766.033561][ T5814] usb 6-1: Manufacturer: syz [ 1766.043696][T24753] binder: 24752:24753 ioctl 40046205 0 returned -22 [ 1766.050548][ T5814] usb 6-1: SerialNumber: syz [ 1766.278236][ T5814] usb 6-1: 0:2 : does not exist [ 1766.308562][ T5814] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1766.367678][ T5814] usb 6-1: USB disconnect, device number 20 [ 1766.391680][T22227] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1766.468187][T22227] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 1766.492082][T22227] usb 3-1: USB disconnect, device number 12 [ 1766.520551][T24635] udevd[24635]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.576241][T24712] udevd[24712]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1767.027764][T24770] syzkaller0: entered promiscuous mode [ 1767.667400][T24783] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4446'. [ 1767.686151][ T28] audit: type=1326 audit(1774648181.071:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1767.817227][ T28] audit: type=1326 audit(1774648181.071:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1767.958210][ T28] audit: type=1326 audit(1774648181.101:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1768.050563][ T28] audit: type=1326 audit(1774648181.101:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1768.080205][ T28] audit: type=1326 audit(1774648181.101:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1768.212299][ T28] audit: type=1326 audit(1774648181.101:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1768.236282][ T28] audit: type=1326 audit(1774648181.111:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1768.283729][ T28] audit: type=1326 audit(1774648181.111:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1768.342790][ T28] audit: type=1326 audit(1774648181.111:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1768.407670][ T28] audit: type=1326 audit(1774648181.111:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.8.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f7cad39c799 code=0x7ffc0000 [ 1768.633129][T24793] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.850870][T24793] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.017458][T24793] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.141459][T24793] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.389080][T24793] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.433280][T24793] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.471295][T24793] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.508236][T24793] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.731828][T24803] syzkaller0: entered promiscuous mode [ 1770.786147][T24815] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1771.363578][T24819] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1772.044427][T24828] syzkaller0: entered promiscuous mode [ 1772.786080][T24840] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1772.918357][T24840] overlayfs: failed to look up (tracing) for ino (-66) [ 1774.342135][T24852] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1776.002279][T24871] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.4480' resets device [ 1776.018299][T22229] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1776.212791][T22229] usb 10-1: Using ep0 maxpacket: 16 [ 1776.224812][T22229] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.246007][T22229] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1776.269373][T22229] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1776.280631][T22229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.299330][T22229] usb 10-1: Product: syz [ 1776.305299][T22229] usb 10-1: Manufacturer: syz [ 1776.311268][T22229] usb 10-1: SerialNumber: syz [ 1776.637815][T22229] usb 10-1: 0:2 : does not exist [ 1776.692967][T22229] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1776.808401][T22229] usb 10-1: USB disconnect, device number 54 [ 1776.888381][T24881] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1776.948524][T24869] udevd[24869]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1777.821524][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1777.874868][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1777.934633][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1777.981230][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.007675][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.031327][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.066584][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.095383][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.122789][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.149453][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.168298][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.186555][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.205440][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.218144][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.229532][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.242016][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.259273][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.357126][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.366263][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.376479][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.384263][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.391818][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.407229][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.422764][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.430390][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.482861][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.490514][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.510763][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.527906][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.556031][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.566581][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1778.566598][ T28] audit: type=1326 audit(1774648191.941:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c759c799 code=0x7ffc0000 [ 1778.607888][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.642881][T22227] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1778.664730][ T28] audit: type=1326 audit(1774648191.941:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c759c799 code=0x7ffc0000 [ 1778.711763][T22227] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1778.747655][ T28] audit: type=1326 audit(1774648191.941:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c759c799 code=0x7ffc0000 [ 1778.843052][ T28] audit: type=1326 audit(1774648191.951:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c759c799 code=0x7ffc0000 [ 1778.914042][ T28] audit: type=1326 audit(1774648191.951:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f91c759c799 code=0x7ffc0000 [ 1778.993229][ T28] audit: type=1326 audit(1774648192.011:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91c755cfce code=0x7ffc0000 [ 1779.052091][ T28] audit: type=1326 audit(1774648192.011:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91c755cfce code=0x7ffc0000 [ 1779.132783][ T28] audit: type=1326 audit(1774648192.021:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91c755cfce code=0x7ffc0000 [ 1779.201524][ T28] audit: type=1326 audit(1774648192.031:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91c755cfce code=0x7ffc0000 [ 1779.246414][ T28] audit: type=1326 audit(1774648192.041:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24891 comm="syz.9.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91c755cfce code=0x7ffc0000 [ 1781.312822][T22233] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1781.441105][T24915] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1783.493599][T22233] usb 3-1: Using ep0 maxpacket: 32 [ 1783.506042][T22233] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1783.516231][T22233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.533058][T22233] usb 3-1: Product: syz [ 1783.537954][T22233] usb 3-1: Manufacturer: syz [ 1783.552923][T22233] usb 3-1: SerialNumber: syz [ 1783.569914][T22233] usb 3-1: config 0 descriptor?? [ 1783.586331][T22233] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1783.605488][T22233] dvb-usb: bulk message failed: -22 (4/0) [ 1783.625053][T22233] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1783.678336][T22233] dvb-usb: bulk message failed: -22 (5/0) [ 1783.704925][T22233] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1783.799565][T22233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1783.817262][T22233] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1784.645148][T22233] usb 3-1: media controller created [ 1784.782359][T22233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1784.810066][T22233] usb 3-1: selecting invalid altsetting 3 [ 1784.816409][T22233] ttusb2: set interface to alts=3 failed [ 1784.947844][T22233] DVB: Unable to find symbol tda10086_attach() [ 1784.963903][T22233] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1784.993845][T22233] dvb-usb: bulk message failed: -22 (4/0) [ 1784.999822][T22233] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1785.020592][T22233] dvb-usb: bulk message failed: -22 (5/0) [ 1785.028812][T22233] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1785.040082][T22233] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1785.091681][T22233] usb 3-1: USB disconnect, device number 13 [ 1785.172874][T22233] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1785.212586][T10188] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1785.415072][T10188] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1785.423764][T10188] usb 9-1: config 0 has no interface number 0 [ 1785.430035][T10188] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.441704][T10188] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.885433][T10188] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1785.896700][T10188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.908472][T10188] usb 9-1: config 0 descriptor?? [ 1785.989466][T24950] bridge0: port 3(syz_tun) entered blocking state [ 1785.997161][T24950] bridge0: port 3(syz_tun) entered disabled state [ 1786.004562][T24950] syz_tun: entered allmulticast mode [ 1786.024615][T24950] syz_tun: entered promiscuous mode [ 1786.441411][T10188] input: HID 04d9:a055 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:04D9:A055.003F/input/input33 [ 1787.422057][T10188] holtek_kbd 0003:04D9:A055.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.8-1/input1 [ 1787.508183][T10188] usb 9-1: USB disconnect, device number 29 [ 1787.731431][T24962] fido_id[24962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1792.283397][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.290566][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.982640][ T5814] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1794.182677][ T5814] usb 10-1: Using ep0 maxpacket: 16 [ 1794.209922][ T5814] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.242553][ T5814] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1794.313224][ T5814] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1794.347451][ T5814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.376590][ T5814] usb 10-1: Product: syz [ 1794.422698][ T5814] usb 10-1: Manufacturer: syz [ 1794.427483][ T5814] usb 10-1: SerialNumber: syz [ 1794.691358][ T5814] usb 10-1: 0:2 : does not exist [ 1794.751985][ T5814] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1794.915753][ T5814] usb 10-1: USB disconnect, device number 55 [ 1795.058337][T24869] udevd[24869]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1795.210506][T25015] syz.2.4523 (25015): drop_caches: 2 [ 1795.814502][T25004] syz.8.4520: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1796.012743][T25004] CPU: 1 PID: 25004 Comm: syz.8.4520 Not tainted syzkaller #0 [ 1796.020842][T25004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1796.031567][T25004] Call Trace: [ 1796.035318][T25004] [ 1796.038497][T25004] dump_stack_lvl+0x18c/0x250 [ 1796.043349][T25004] ? show_regs_print_info+0x20/0x20 [ 1796.048729][T25004] ? load_image+0x400/0x400 [ 1796.053477][T25004] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1796.060257][T25004] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1796.066855][T25004] warn_alloc+0x246/0x340 [ 1796.071387][T25004] ? zone_watermark_ok_safe+0x230/0x230 [ 1796.077020][T25004] ? _raw_spin_unlock+0x28/0x40 [ 1796.082037][T25004] __vmalloc_node_range+0x662/0x1330 [ 1796.087434][T25004] ? free_vm_area+0x50/0x50 [ 1796.092005][T25004] ? _raw_spin_unlock+0x28/0x40 [ 1796.097506][T25004] ? __kasan_kmalloc+0x8f/0xa0 [ 1796.102606][T25004] __vmalloc_node_range+0x568/0x1330 [ 1796.107965][T25004] ? hash_ipmac_create+0x361/0xfe0 [ 1796.113219][T25004] ? __asan_memset+0x22/0x40 [ 1796.118165][T25004] ? free_vm_area+0x50/0x50 [ 1796.122750][T25004] ? kvmalloc_node+0x70/0x180 [ 1796.127497][T25004] ? rcu_is_watching+0x15/0xb0 [ 1796.132663][T25004] ? kvmalloc_node+0x70/0x180 [ 1796.137683][T25004] ? trace_kmalloc+0x1f/0x90 [ 1796.142356][T25004] kvmalloc_node+0x13f/0x180 [ 1796.147102][T25004] ? hash_ipmac_create+0x361/0xfe0 [ 1796.152281][T25004] hash_ipmac_create+0x361/0xfe0 [ 1796.157293][T25004] ? __lock_acquire+0x7d40/0x7d40 [ 1796.162471][T25004] ? __nla_parse+0x40/0x50 [ 1796.167020][T25004] ? hash_ip6_gc+0x5b0/0x5b0 [ 1796.171684][T25004] ip_set_create+0xad3/0x1970 [ 1796.176574][T25004] ? ip_set_create+0x4fe/0x1970 [ 1796.181755][T25004] ? ip_set_protocol+0x5b0/0x5b0 [ 1796.187040][T25004] ? trace_contention_end+0x39/0xe0 [ 1796.192342][T25004] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 1796.197453][T25004] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1796.203589][T25004] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 1796.208875][T25004] ? nfnetlink_unbind+0x160/0x160 [ 1796.214104][T25004] ? __dev_queue_xmit+0x19a3/0x3660 [ 1796.219449][T25004] ? __netlink_deliver_tap+0x5ab/0x830 [ 1796.224983][T25004] ? netlink_deliver_tap+0x19c/0x1b0 [ 1796.230419][T25004] ? netlink_unicast+0x72c/0x8d0 [ 1796.235504][T25004] ? netlink_sendmsg+0x8d0/0xbf0 [ 1796.240534][T25004] ? ____sys_sendmsg+0x5ba/0x960 [ 1796.245977][T25004] ? ___sys_sendmsg+0x2a6/0x360 [ 1796.251147][T25004] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 1796.256400][T25004] ? do_syscall_64+0x55/0xa0 [ 1796.261064][T25004] netlink_rcv_skb+0x241/0x4d0 [ 1796.265995][T25004] ? nfnetlink_unbind+0x160/0x160 [ 1796.271086][T25004] ? netlink_ack+0x1180/0x1180 [ 1796.275925][T25004] ? apparmor_capable+0x137/0x1a0 [ 1796.281190][T25004] ? bpf_lsm_capable+0x9/0x10 [ 1796.286223][T25004] ? security_capable+0x89/0xb0 [ 1796.291352][T25004] nfnetlink_rcv+0x2c9/0x24a0 [ 1796.296405][T25004] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1796.302104][T25004] ? lockdep_hardirqs_on+0x98/0x150 [ 1796.307713][T25004] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1796.313317][T25004] ? _local_bh_enable+0xa0/0xa0 [ 1796.318403][T25004] ? __dev_queue_xmit+0x265/0x3660 [ 1796.323569][T25004] ? __dev_queue_xmit+0x265/0x3660 [ 1796.329001][T25004] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1796.334607][T25004] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1796.340316][T25004] ? __dev_queue_xmit+0x265/0x3660 [ 1796.345753][T25004] ? ref_tracker_free+0x690/0x840 [ 1796.351135][T25004] ? refcount_inc+0x70/0x70 [ 1796.356358][T25004] ? __asan_memcpy+0x40/0x70 [ 1796.361016][T25004] ? __skb_clone+0x63/0x790 [ 1796.365671][T25004] ? __skb_clone+0x480/0x790 [ 1796.370450][T25004] ? __netlink_deliver_tap+0x7e8/0x830 [ 1796.376092][T25004] ? netlink_deliver_tap+0x2e/0x1b0 [ 1796.381373][T25004] ? __lock_acquire+0x7d40/0x7d40 [ 1796.386693][T25004] ? netlink_deliver_tap+0x2e/0x1b0 [ 1796.392042][T25004] netlink_unicast+0x751/0x8d0 [ 1796.396877][T25004] netlink_sendmsg+0x8d0/0xbf0 [ 1796.401754][T25004] ? netlink_getsockopt+0x590/0x590 [ 1796.407113][T25004] ? aa_sock_msg_perm+0x94/0x150 [ 1796.412105][T25004] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1796.417451][T25004] ? security_socket_sendmsg+0x80/0xa0 [ 1796.423581][T25004] ? netlink_getsockopt+0x590/0x590 [ 1796.428948][T25004] ____sys_sendmsg+0x5ba/0x960 [ 1796.433828][T25004] ? __asan_memset+0x22/0x40 [ 1796.438614][T25004] ? __sys_sendmsg_sock+0x30/0x30 [ 1796.443877][T25004] ? __import_iovec+0x5f2/0x850 [ 1796.448788][T25004] ? import_iovec+0x73/0xa0 [ 1796.453575][T25004] ___sys_sendmsg+0x2a6/0x360 [ 1796.458328][T25004] ? __sys_sendmsg+0x2a0/0x2a0 [ 1796.463220][T25004] __se_sys_sendmsg+0x1c2/0x2b0 [ 1796.468221][T25004] ? __x64_sys_sendmsg+0x80/0x80 [ 1796.473242][T25004] ? lockdep_hardirqs_on+0x98/0x150 [ 1796.478712][T25004] do_syscall_64+0x55/0xa0 [ 1796.483361][T25004] ? clear_bhb_loop+0x40/0x90 [ 1796.488178][T25004] ? clear_bhb_loop+0x40/0x90 [ 1796.493016][T25004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1796.499852][T25004] RIP: 0033:0x7f7cad39c799 [ 1796.504408][T25004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.524568][T25004] RSP: 002b:00007f7cae2ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1796.533129][T25004] RAX: ffffffffffffffda RBX: 00007f7cad615fa0 RCX: 00007f7cad39c799 [ 1796.541245][T25004] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1796.549434][T25004] RBP: 00007f7cad432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1796.558076][T25004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.566285][T25004] R13: 00007f7cad616038 R14: 00007f7cad615fa0 R15: 00007ffcbd170878 [ 1796.575034][T25004] [ 1796.810129][T25004] Mem-Info: [ 1796.813573][T25004] active_anon:26582 inactive_anon:0 isolated_anon:0 [ 1796.813573][T25004] active_file:6032 inactive_file:50950 isolated_file:0 [ 1796.813573][T25004] unevictable:768 dirty:150 writeback:0 [ 1796.813573][T25004] slab_reclaimable:11649 slab_unreclaimable:104840 [ 1796.813573][T25004] mapped:25880 shmem:19492 pagetables:982 [ 1796.813573][T25004] sec_pagetables:0 bounce:0 [ 1796.813573][T25004] kernel_misc_reclaimable:0 [ 1796.813573][T25004] free:1271630 free_pcp:13243 free_cma:0 [ 1796.863362][T25004] Node 0 active_anon:107028kB inactive_anon:0kB active_file:24128kB inactive_file:203600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104220kB dirty:600kB writeback:0kB shmem:77132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12452kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no [ 1796.933658][T25004] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1797.043885][T25004] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.147770][T25004] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1797.154364][T25004] Node 0 DMA32 free:1168048kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:117592kB inactive_anon:0kB active_file:24128kB inactive_file:202772kB unevictable:1536kB writepending:600kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:31776kB local_pcp:11000kB free_cma:0kB [ 1797.294109][T25004] lowmem_reserve[]: 0 0 0 0 0 [ 1797.380597][T25004] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1797.735982][T25004] lowmem_reserve[]: 0 0 0 0 0 [ 1797.760493][T25004] Node 1 Normal free:3893820kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21636kB local_pcp:11304kB free_cma:0kB [ 1797.879312][T25004] lowmem_reserve[]: 0 0 0 0 0 [ 1797.900143][T25004] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1797.978813][T25004] Node 0 DMA32: 1933*4kB (ME) 497*8kB (UME) 168*16kB (ME) 318*32kB (UME) 185*64kB (ME) 233*128kB (ME) 98*256kB (UME) 61*512kB (UME) 16*1024kB (UME) 4*2048kB (ME) 253*4096kB (UM) = 1183420kB [ 1797.999048][T25004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1798.014728][T25004] Node 1 Normal: 253*4kB (UME) 57*8kB (UME) 52*16kB (UME) 88*32kB (UME) 15*64kB (UE) 5*128kB (UME) 0*256kB 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3893820kB [ 1798.036871][T25004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1798.047753][T25004] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1798.057588][T25004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1798.082909][T25004] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1798.129642][T25004] 77462 total pagecache pages [ 1798.148102][T25004] 1 pages in swap cache [ 1798.152357][T25004] Free swap = 124544kB [ 1798.185101][T25004] Total swap = 124996kB [ 1798.189435][T25004] 2097051 pages RAM [ 1798.202962][T25004] 0 pages HighMem/MovableOnly [ 1798.238684][T25004] 416926 pages reserved [ 1798.254620][T25004] 0 pages cma reserved [ 1801.338040][T25074] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1803.412741][T22229] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1804.356902][T22229] usb 6-1: Using ep0 maxpacket: 16 [ 1804.375465][T22229] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1804.394394][T22229] usb 6-1: config 7 has an invalid interface number: 118 but max is 1 [ 1804.403619][T22229] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1804.936554][T22229] usb 6-1: config 7 has an invalid interface number: 230 but max is 1 [ 1804.953081][T22229] usb 6-1: config 7 has no interface number 0 [ 1804.959443][T22229] usb 6-1: config 7 has no interface number 1 [ 1804.965966][T22229] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1804.977117][T22229] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1804.987355][T22229] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1804.998368][T22229] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1805.009711][T22229] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1805.638085][T22229] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1805.650223][T22229] usb 6-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1805.661639][T22229] usb 6-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1805.672313][T22229] usb 6-1: config 7 interface 118 has no altsetting 0 [ 1805.679721][T22229] usb 6-1: config 7 interface 230 has no altsetting 0 [ 1805.692988][T22229] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1805.702255][T22229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.722567][T22229] usb 6-1: Product: syz [ 1805.727289][T22229] usb 6-1: Manufacturer: syz [ 1805.732101][T22229] usb 6-1: SerialNumber: syz [ 1805.749254][T25080] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1805.791516][T25080] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1806.792817][T25105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.831139][T25105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.866176][T25105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.885037][T25105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.008733][T22229] (null): radio-mr800 - initialization failed [ 1807.045334][T22229] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 1807.078332][T22229] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 1807.143210][T22229] usb 6-1: USB disconnect, device number 21 [ 1808.080357][T25125] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1809.294279][T18589] block nbd5: Receive control failed (result -107) [ 1809.330161][T25130] nbd5: detected capacity change from 0 to 8589934592 [ 1809.345138][ T96] block nbd5: Dead connection, failed to find a fallback [ 1809.353934][ T96] block nbd5: shutting down sockets [ 1809.360189][ T96] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.378536][ T96] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.392914][ T96] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.402883][ T96] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.411761][ T96] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.422412][ T96] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.463784][ T96] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.473223][ T96] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.490395][ T96] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.502138][ T96] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.511069][ T96] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.520780][ T96] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.529005][ T96] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.538769][ T96] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.547055][ T96] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.557240][ T96] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.568496][T25082] ldm_validate_partition_table(): Disk read failed. [ 1809.610332][T25133] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.620861][T25133] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.629432][T25133] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1809.638858][T25133] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1809.649039][T25082] Dev nbd5: unable to read RDB block 0 [ 1809.700845][T25082] nbd5: unable to read partition table [ 1809.918519][T25132] ldm_validate_partition_table(): Disk read failed. [ 1809.955434][T25132] Dev nbd5: unable to read RDB block 0 [ 1809.974488][T25132] nbd5: unable to read partition table [ 1809.984460][T25082] ldm_validate_partition_table(): Disk read failed. [ 1810.099295][T25082] Dev nbd5: unable to read RDB block 0 [ 1810.116062][T25082] nbd5: unable to read partition table [ 1810.156463][T25141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1810.217216][T25141] unsupported nlmsg_type 40 [ 1810.263598][T25082] ldm_validate_partition_table(): Disk read failed. [ 1810.294770][T25082] Dev nbd5: unable to read RDB block 0 [ 1810.301518][T25082] nbd5: unable to read partition table [ 1810.320534][T25082] ldm_validate_partition_table(): Disk read failed. [ 1810.329183][T25082] Dev nbd5: unable to read RDB block 0 [ 1810.350019][T25082] nbd5: unable to read partition table [ 1815.205743][T25183] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1820.982917][T18589] block nbd5: Receive control failed (result -107) [ 1820.999982][T25235] block nbd5: shutting down sockets [ 1824.232572][T22233] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1824.403035][ T5814] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1824.459237][T22233] usb 9-1: Using ep0 maxpacket: 16 [ 1824.504211][T22233] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.532990][T25258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1824.543480][T22233] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1824.575941][T22233] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1824.583800][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 1824.600337][ T5814] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1824.613024][T22233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.621798][T22233] usb 9-1: Product: syz [ 1824.629539][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.644701][ T5814] usb 3-1: Product: syz [ 1824.649186][ T5814] usb 3-1: Manufacturer: syz [ 1824.662560][T22233] usb 9-1: Manufacturer: syz [ 1824.672816][T22233] usb 9-1: SerialNumber: syz [ 1824.690951][ T5814] usb 3-1: SerialNumber: syz [ 1824.767397][ T5814] usb 3-1: config 0 descriptor?? [ 1824.786920][ T5814] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1824.803204][ T5814] dvb-usb: bulk message failed: -22 (4/0) [ 1824.820614][ T5814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1824.852812][ T5814] dvb-usb: bulk message failed: -22 (5/0) [ 1824.859877][ T5814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1824.922157][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1824.929973][T22233] usb 9-1: 0:2 : does not exist [ 1824.953260][ T5814] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1824.972068][ T5814] usb 3-1: media controller created [ 1825.034379][T22233] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1825.066171][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1825.142805][T22233] usb 9-1: USB disconnect, device number 30 [ 1825.200177][ T5814] usb 3-1: selecting invalid altsetting 3 [ 1825.219186][ T5814] ttusb2: set interface to alts=3 failed [ 1825.267320][T25215] udevd[25215]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1825.405986][ T5814] DVB: Unable to find symbol tda10086_attach() [ 1825.429257][ T5814] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1825.452138][ T5814] dvb-usb: bulk message failed: -22 (4/0) [ 1825.460391][ T5814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1825.502248][ T5814] dvb-usb: bulk message failed: -22 (5/0) [ 1825.512821][ T5814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1825.549792][ T5814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1825.579870][ T5814] usb 3-1: USB disconnect, device number 14 [ 1826.958924][T25318] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1827.129229][T25318] overlayfs: failed to look up (tracing) for ino (-66) [ 1827.391939][ T5814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1832.558989][T25354] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1834.652880][T22227] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1835.056207][T22227] usb 10-1: Using ep0 maxpacket: 16 [ 1835.095715][T22227] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.143099][T22227] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1835.166060][T22227] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1835.182599][T22227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.190938][T22227] usb 10-1: Product: syz [ 1835.206644][T22227] usb 10-1: Manufacturer: syz [ 1835.211573][T22227] usb 10-1: SerialNumber: syz [ 1835.319358][T25393] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1836.562423][T22227] usb 10-1: 0:2 : does not exist [ 1836.592033][T22227] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1837.589192][T22227] usb 10-1: USB disconnect, device number 56 [ 1840.683026][T25428] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4618'. [ 1841.622931][ T5814] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1842.055038][ T5814] usb 9-1: Using ep0 maxpacket: 16 [ 1842.111009][ T5814] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.263929][ T5814] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1842.746598][ T5814] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1842.759159][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.768190][ T5814] usb 9-1: Product: syz [ 1842.772877][ T5814] usb 9-1: Manufacturer: syz [ 1842.777539][ T5814] usb 9-1: SerialNumber: syz [ 1843.007696][ T5814] usb 9-1: 0:2 : does not exist [ 1843.039100][ T5814] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1843.085822][ T5814] usb 9-1: USB disconnect, device number 31 [ 1843.156900][T25388] udevd[25388]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1845.373382][ T789] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1846.212967][ T789] usb 9-1: Using ep0 maxpacket: 16 [ 1846.233466][ T789] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.497114][ T789] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1846.521294][ T789] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1846.540706][ T789] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.574979][ T789] usb 9-1: Product: syz [ 1846.579560][ T789] usb 9-1: Manufacturer: syz [ 1846.611632][ T789] usb 9-1: SerialNumber: syz [ 1847.203167][ T789] usb 9-1: 0:2 : does not exist [ 1847.294694][ T789] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1847.425402][ T789] usb 9-1: USB disconnect, device number 32 [ 1847.713496][T22233] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1847.897919][T25496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1848.024697][T25496] overlayfs: failed to look up (tracing) for ino (-66) [ 1849.952652][T22233] usb 6-1: Using ep0 maxpacket: 16 [ 1849.979565][T22233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.021253][T22233] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1850.066540][T22233] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1850.093596][T22233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.127976][T22233] usb 6-1: Product: syz [ 1850.132220][T22233] usb 6-1: Manufacturer: syz [ 1850.167699][T22233] usb 6-1: SerialNumber: syz [ 1850.504460][T22233] usb 6-1: 0:2 : does not exist [ 1850.580904][T22233] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1851.926994][T22233] usb 6-1: USB disconnect, device number 22 [ 1851.979439][T25522] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1852.153585][T25388] udevd[25388]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1853.665642][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.672273][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.719706][ T5775] kworker/dying (5775) used greatest stack depth: 13576 bytes left [ 1855.129792][T25538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4649'. [ 1856.841440][T25554] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1856.967118][T25554] overlayfs: failed to look up (tracing) for ino (-66) [ 1860.108367][T25567] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1863.878601][T25588] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4661'. [ 1864.552752][ T789] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1864.742576][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 1864.760863][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.781395][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1864.799725][ T789] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1864.809106][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.817953][ T789] usb 3-1: Product: syz [ 1864.822280][ T789] usb 3-1: Manufacturer: syz [ 1864.827184][ T789] usb 3-1: SerialNumber: syz [ 1865.321971][ T789] usb 3-1: 0:2 : does not exist [ 1865.334348][ T789] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1865.390195][ T789] usb 3-1: USB disconnect, device number 15 [ 1865.423959][T25616] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1865.671240][T25616] overlayfs: failed to look up (tracing) for ino (-66) [ 1865.718056][T25601] udevd[25601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1866.429209][T25618] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1870.357077][T25654] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1870.483215][T25654] overlayfs: failed to look up (tracing) for ino (-66) [ 1871.453234][ T5814] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1872.279672][T25660] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1872.352659][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 1872.508858][ T5814] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1872.539921][ T5814] usb 6-1: config 7 has an invalid interface number: 118 but max is 1 [ 1872.562596][ T5814] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1872.577476][ T5814] usb 6-1: config 7 has an invalid interface number: 230 but max is 1 [ 1872.597408][ T5814] usb 6-1: config 7 has no interface number 0 [ 1872.616802][ T5814] usb 6-1: config 7 has no interface number 1 [ 1872.642716][ T5814] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1872.669779][ T5814] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1872.692344][T25664] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4682'. [ 1872.712107][ T5814] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1872.757971][ T5814] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1872.803321][ T5814] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1872.857998][ T5814] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1873.125471][ T5814] usb 6-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1874.386831][ T5814] usb 6-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1874.572597][ T5814] usb 6-1: config 7 interface 118 has no altsetting 0 [ 1874.590748][ T5814] usb 6-1: config 7 interface 230 has no altsetting 0 [ 1874.611685][ T5814] usb 6-1: string descriptor 0 read error: -71 [ 1874.622655][ T5814] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1874.662562][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.775970][ T5814] usb 6-1: can't set config #7, error -71 [ 1874.813340][ T5814] usb 6-1: USB disconnect, device number 23 [ 1876.378830][T25695] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1876.564313][T25695] overlayfs: failed to look up (tracing) for ino (-66) [ 1877.315359][T25701] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4692'. [ 1878.016818][T25705] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1878.562836][ T789] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1878.722570][T22233] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1878.922635][T22233] usb 6-1: Using ep0 maxpacket: 16 [ 1878.931357][T22233] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1878.946964][ T789] usb 10-1: Using ep0 maxpacket: 16 [ 1878.961039][ T789] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.966689][T22233] usb 6-1: config 7 has an invalid interface number: 118 but max is 1 [ 1878.975555][ T789] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1878.992292][ T789] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1879.001604][T22233] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1879.001636][T22233] usb 6-1: config 7 has an invalid interface number: 230 but max is 1 [ 1879.001659][T22233] usb 6-1: config 7 has no interface number 0 [ 1879.001676][T22233] usb 6-1: config 7 has no interface number 1 [ 1879.001746][T22233] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1879.001771][T22233] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1879.001797][T22233] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1879.032666][ T789] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.495650][ T789] usb 10-1: Product: syz [ 1879.642534][ T789] usb 10-1: Manufacturer: syz [ 1879.657514][ T789] usb 10-1: SerialNumber: syz [ 1879.845304][T22233] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1879.856226][T22233] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1879.867277][T22233] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1879.878505][T22233] usb 6-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1879.900055][T22233] usb 6-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1879.924161][T22233] usb 6-1: config 7 interface 118 has no altsetting 0 [ 1879.931037][T22233] usb 6-1: config 7 interface 230 has no altsetting 0 [ 1879.938878][ T789] usb 10-1: 0:2 : does not exist [ 1879.965620][T22233] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1879.966924][ T789] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1879.994479][T22233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.020672][T22233] usb 6-1: Product: syz [ 1880.031727][T22233] usb 6-1: Manufacturer: syz [ 1880.036425][ T789] usb 10-1: USB disconnect, device number 57 [ 1880.050290][T22233] usb 6-1: SerialNumber: syz [ 1880.080440][T25711] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1880.104655][T25711] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1880.140797][T25708] udevd[25708]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1880.781108][T25711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.803105][T25711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.820968][T25711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.849962][T25711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.909959][T22233] (null): radio-mr800 - initialization failed [ 1880.930564][T22233] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 1880.948634][T22233] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 1881.003140][T22233] usb 6-1: USB disconnect, device number 24 [ 1881.155178][T25730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4701'. [ 1882.489140][T25748] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1882.619709][T25748] overlayfs: failed to look up (tracing) for ino (-66) [ 1885.292534][T22229] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1885.482715][T22229] usb 9-1: Using ep0 maxpacket: 16 [ 1885.500577][T22229] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.515848][T25772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4711'. [ 1885.532073][T22229] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1885.555054][T22229] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1885.564748][T22229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.582797][T22229] usb 9-1: Product: syz [ 1885.592595][T22229] usb 9-1: Manufacturer: syz [ 1885.600750][T22229] usb 9-1: SerialNumber: syz [ 1885.833548][T22229] usb 9-1: 0:2 : does not exist [ 1885.867398][T22229] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1885.932053][T22229] usb 9-1: USB disconnect, device number 33 [ 1885.952741][T22233] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1886.024288][T25708] udevd[25708]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1886.152556][T22233] usb 3-1: Using ep0 maxpacket: 16 [ 1886.161297][T22233] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1886.178296][T22233] usb 3-1: config 7 has an invalid interface number: 118 but max is 1 [ 1886.189585][T22233] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1886.204783][T22233] usb 3-1: config 7 has an invalid interface number: 230 but max is 1 [ 1886.218585][T22233] usb 3-1: config 7 has no interface number 0 [ 1886.229598][T22233] usb 3-1: config 7 has no interface number 1 [ 1886.240810][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1886.262709][T22233] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1886.280495][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1886.292739][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1886.312265][T22233] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1886.331009][T22233] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1886.362035][T22233] usb 3-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1886.386816][T22233] usb 3-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1886.402194][T22233] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1886.412845][T22233] usb 3-1: config 7 interface 230 has no altsetting 0 [ 1886.430364][T22233] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1886.441614][T22233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.456512][T22233] usb 3-1: Product: syz [ 1886.461049][T22233] usb 3-1: Manufacturer: syz [ 1886.473687][T25780] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1886.492343][T22233] usb 3-1: SerialNumber: syz [ 1886.510914][T25774] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1886.529447][T25774] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1887.160482][T25786] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1887.242259][T25786] overlayfs: failed to look up (tracing) for ino (-66) [ 1887.312803][T25774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.462793][T25774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.671979][T25774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.723296][T25774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.586709][T22233] (null): radio-mr800 - initialization failed [ 1889.548858][T22233] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 1889.556673][T22233] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1889.588668][T22233] usb 3-1: USB disconnect, device number 16 [ 1889.872276][T25801] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4720'. [ 1891.949872][T25820] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1892.077076][T25820] overlayfs: failed to look up (tracing) for ino (-66) [ 1894.183499][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1894.372883][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1894.390586][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1894.666580][ T27] usb 3-1: config 7 has an invalid interface number: 118 but max is 1 [ 1894.913231][ T27] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1894.952591][ T27] usb 3-1: config 7 has an invalid interface number: 230 but max is 1 [ 1895.001385][ T27] usb 3-1: config 7 has no interface number 0 [ 1895.019392][ T27] usb 3-1: config 7 has no interface number 1 [ 1895.048924][ T27] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1895.122905][ T27] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1895.169326][ T27] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1895.209705][ T27] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1895.229171][ T27] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1895.241968][ T27] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1895.265377][T25839] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4731'. [ 1895.273537][ T27] usb 3-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1895.291079][ T27] usb 3-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1895.303874][ T27] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1895.530924][ T27] usb 3-1: config 7 interface 230 has no altsetting 0 [ 1895.559533][ T27] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1895.569117][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.580712][ T27] usb 3-1: Product: syz [ 1895.592850][ T27] usb 3-1: Manufacturer: syz [ 1895.597688][ T27] usb 3-1: SerialNumber: syz [ 1895.729494][T25827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1896.239967][T25827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1896.523751][T22229] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1896.722515][T22229] usb 10-1: Using ep0 maxpacket: 16 [ 1896.736590][T22229] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.756311][T22229] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1896.780982][T22229] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1896.801350][T22229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.830732][T22229] usb 10-1: Product: syz [ 1896.848069][T22229] usb 10-1: Manufacturer: syz [ 1896.862488][T22229] usb 10-1: SerialNumber: syz [ 1896.917546][T25827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.933460][T25827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.975528][T25827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.000254][T25827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.048754][ T27] (null): radio-mr800 - initialization failed [ 1897.062813][ T27] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 1897.070967][ T27] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1897.095347][T22229] usb 10-1: 0:2 : does not exist [ 1897.141799][T22229] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1897.165521][ T27] usb 3-1: USB disconnect, device number 17 [ 1897.242920][T22229] usb 10-1: USB disconnect, device number 58 [ 1897.319379][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1898.062861][T22233] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1898.273796][T22233] usb 3-1: Using ep0 maxpacket: 16 [ 1898.282223][T22233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.302750][T22233] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1898.320638][T22233] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1898.337329][T22233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.352290][T22233] usb 3-1: Product: syz [ 1898.360391][T22233] usb 3-1: Manufacturer: syz [ 1898.370903][T22233] usb 3-1: SerialNumber: syz [ 1900.001925][T22233] usb 3-1: 0:2 : does not exist [ 1900.012135][T22233] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1900.052614][T22233] usb 3-1: USB disconnect, device number 18 [ 1900.130239][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1900.214176][T25886] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1900.632584][T22233] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1900.854578][T22233] usb 6-1: Using ep0 maxpacket: 16 [ 1900.867618][T22233] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1900.888401][T22233] usb 6-1: config 7 has an invalid interface number: 118 but max is 1 [ 1900.907615][T22233] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1900.927880][T22233] usb 6-1: config 7 has an invalid interface number: 230 but max is 1 [ 1900.952561][T22233] usb 6-1: config 7 has no interface number 0 [ 1900.958764][T22233] usb 6-1: config 7 has no interface number 1 [ 1900.966917][T22233] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1900.978739][T22233] usb 6-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1901.009702][T22233] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1901.032669][T22233] usb 6-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1901.062569][T22233] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1901.092678][T22233] usb 6-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1901.122776][T22233] usb 6-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1901.142616][T22233] usb 6-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1901.172597][T22233] usb 6-1: config 7 interface 118 has no altsetting 0 [ 1901.179481][T22233] usb 6-1: config 7 interface 230 has no altsetting 0 [ 1901.210167][T22233] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1901.220312][T22233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.248128][T22233] usb 6-1: Product: syz [ 1901.262843][T22233] usb 6-1: Manufacturer: syz [ 1901.272612][T22233] usb 6-1: SerialNumber: syz [ 1901.286703][T25890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1901.304358][T25890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1901.813443][T10188] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1901.997306][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.018577][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.032677][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.044314][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.056201][T10188] usb 3-1: Using ep0 maxpacket: 16 [ 1902.075016][T22233] (null): radio-mr800 - initialization failed [ 1902.086009][T22233] radio-mr800: probe of 6-1:7.118 failed with error -71 [ 1902.094890][T10188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.107189][T22233] usbhid 6-1:7.118: couldn't find an input interrupt endpoint [ 1902.119383][T10188] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1902.148879][T10188] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1902.171645][T22233] usb 6-1: USB disconnect, device number 25 [ 1902.183419][T10188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.200467][T10188] usb 3-1: Product: syz [ 1902.320420][T10188] usb 3-1: Manufacturer: syz [ 1902.325322][T10188] usb 3-1: SerialNumber: syz [ 1902.579450][T10188] usb 3-1: 0:2 : does not exist [ 1902.630511][T10188] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1902.708116][T10188] usb 3-1: USB disconnect, device number 19 [ 1903.609642][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1904.583911][T25916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1904.973112][T22229] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1905.202669][T22229] usb 10-1: Using ep0 maxpacket: 16 [ 1905.216815][T22229] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.237514][T22229] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1905.267634][T22229] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1905.290996][T22229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.316612][T22229] usb 10-1: Product: syz [ 1905.331369][T22229] usb 10-1: Manufacturer: syz [ 1905.346026][T22229] usb 10-1: SerialNumber: syz [ 1905.611013][T22229] usb 10-1: 0:2 : does not exist [ 1905.637965][T22229] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1905.800324][T22229] usb 10-1: USB disconnect, device number 59 [ 1905.864376][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1908.121324][ T5814] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1908.453135][ T5814] usb 9-1: Using ep0 maxpacket: 16 [ 1908.667195][ T5814] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.724486][ T5814] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1908.766231][ T5814] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1908.788551][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.817839][ T5814] usb 9-1: Product: syz [ 1908.859737][ T5814] usb 9-1: Manufacturer: syz [ 1908.880666][ T5814] usb 9-1: SerialNumber: syz [ 1909.388275][T25961] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1909.455220][ T5814] usb 9-1: 0:2 : does not exist [ 1909.478798][ T5814] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1910.074566][ T5814] usb 9-1: USB disconnect, device number 34 [ 1910.821198][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1912.563122][T22233] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1913.562569][T22233] usb 6-1: Using ep0 maxpacket: 16 [ 1913.583213][T22233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.614825][T22233] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1913.666799][T22233] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1913.707728][T22233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.749705][T22233] usb 6-1: Product: syz [ 1913.765894][T22233] usb 6-1: Manufacturer: syz [ 1913.781055][T22233] usb 6-1: SerialNumber: syz [ 1914.041611][T22233] usb 6-1: 0:2 : does not exist [ 1914.071330][T22233] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1914.137910][T22233] usb 6-1: USB disconnect, device number 26 [ 1914.428875][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1914.853013][T26010] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1915.122855][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.129675][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.692875][T10188] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1917.043455][T10188] usb 9-1: Using ep0 maxpacket: 16 [ 1917.075169][T10188] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.113322][T10188] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1917.156925][T10188] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1917.198008][T10188] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.228627][T10188] usb 9-1: Product: syz [ 1917.248871][T10188] usb 9-1: Manufacturer: syz [ 1917.276693][T10188] usb 9-1: SerialNumber: syz [ 1917.564937][T10188] usb 9-1: 0:2 : does not exist [ 1917.627501][T10188] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1918.618184][T10188] usb 9-1: USB disconnect, device number 35 [ 1918.699794][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1919.222915][T22233] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1919.432671][T22233] usb 6-1: Using ep0 maxpacket: 16 [ 1920.303435][T22233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.322531][T22233] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1920.386702][T22233] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1920.412595][T22233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.433193][T22233] usb 6-1: Product: syz [ 1920.437642][T22233] usb 6-1: Manufacturer: syz [ 1920.442285][T22233] usb 6-1: SerialNumber: syz [ 1920.701487][T22233] usb 6-1: 0:2 : does not exist [ 1920.749274][T22233] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1920.855544][T22233] usb 6-1: USB disconnect, device number 27 [ 1920.935719][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1921.039678][T26062] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1923.567977][T26099] netlink: 212 bytes leftover after parsing attributes in process `syz.9.4814'. [ 1923.603049][T22229] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1923.812836][T22229] usb 3-1: Using ep0 maxpacket: 16 [ 1923.837955][T22229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.894297][T22229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1923.959649][T22229] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1923.995281][T22229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.320762][T22229] usb 3-1: Product: syz [ 1924.664182][T22229] usb 3-1: Manufacturer: syz [ 1924.669117][T22229] usb 3-1: SerialNumber: syz [ 1924.904835][T22229] usb 3-1: 0:2 : does not exist [ 1924.972868][T22229] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1925.059141][T22229] usb 3-1: USB disconnect, device number 20 [ 1925.149802][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1926.700415][T26125] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4823'. [ 1928.677819][ T5814] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1928.856334][T26163] netlink: 212 bytes leftover after parsing attributes in process `syz.8.4834'. [ 1928.954458][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 1929.015090][T26135] Bluetooth: hci2: command 0x0c1a tx timeout [ 1929.393475][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.431686][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1929.664135][ T5814] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1929.682527][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.690890][ T5814] usb 3-1: Product: syz [ 1929.702527][ T5814] usb 3-1: Manufacturer: syz [ 1929.707278][ T5814] usb 3-1: SerialNumber: syz [ 1929.758616][T26176] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1930.186310][ T5814] usb 3-1: 0:2 : does not exist [ 1930.208632][ T5814] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1930.630322][ T5814] usb 3-1: USB disconnect, device number 21 [ 1930.737709][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1931.110454][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 1933.372866][ T27] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1933.392563][ T5814] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1933.562685][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 1933.580023][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 1933.589114][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.611911][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.632530][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.643230][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1933.656979][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1933.682762][ T27] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1933.704168][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.713092][ T5814] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1933.732589][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.753196][ T27] usb 6-1: config 0 descriptor?? [ 1933.759296][ T5814] usb 3-1: Product: syz [ 1933.765459][ T5814] usb 3-1: Manufacturer: syz [ 1933.770532][ T5814] usb 3-1: SerialNumber: syz [ 1934.012723][ T5814] usb 3-1: 0:2 : does not exist [ 1934.043850][ T5814] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1934.108549][ T5814] usb 3-1: USB disconnect, device number 22 [ 1934.168255][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1934.208359][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.232533][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.260801][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.272710][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.280771][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.321581][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.339837][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.353135][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.361570][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.393429][ T27] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 1934.413288][ T27] HID 045e:07da: Invalid code 65791 type 1 [ 1934.438264][ T27] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0040/input/input34 [ 1934.476570][ T27] microsoft 0003:045E:07DA.0040: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1934.524106][T26226] netlink: 212 bytes leftover after parsing attributes in process `syz.9.4856'. [ 1934.542883][ T27] usb 6-1: USB disconnect, device number 28 [ 1934.661656][T26227] fido_id[26227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1934.932951][T26135] Bluetooth: hci0: command 0x0406 tx timeout [ 1935.898385][T26249] netlink: 212 bytes leftover after parsing attributes in process `syz.9.4865'. [ 1936.101611][T26135] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 1937.596965][T26272] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1938.155701][ T5779] block nbd2: Receive control failed (result -107) [ 1938.209061][T25829] block nbd2: shutting down sockets [ 1939.923878][T26135] Bluetooth: hci2: command 0x0c1a tx timeout [ 1940.790386][T26135] block nbd2: Receive control failed (result -107) [ 1940.835846][T25829] block nbd2: shutting down sockets [ 1941.652874][T22233] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1941.852690][T22233] usb 3-1: Using ep0 maxpacket: 16 [ 1941.895171][T22233] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1941.939142][T22233] usb 3-1: config 7 has an invalid interface number: 118 but max is 1 [ 1941.970402][T22233] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1941.991073][T22233] usb 3-1: config 7 has an invalid interface number: 230 but max is 1 [ 1942.803566][T22233] usb 3-1: config 7 has no interface number 0 [ 1942.809945][T22233] usb 3-1: config 7 has no interface number 1 [ 1942.816974][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1942.828259][T22233] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1942.839187][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1942.851827][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1942.863712][T22233] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1942.875028][T22233] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1942.887095][T22233] usb 3-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1942.912605][T22233] usb 3-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1942.932615][T22233] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1942.939586][T22233] usb 3-1: config 7 interface 230 has no altsetting 0 [ 1942.967566][T22233] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1942.987888][T22233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.006393][T22233] usb 3-1: Product: syz [ 1943.016800][T22233] usb 3-1: Manufacturer: syz [ 1943.026668][T22233] usb 3-1: SerialNumber: syz [ 1943.135891][T26315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1943.175985][T26315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1943.856755][T26315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.885638][T26315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.915742][T26315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.946819][T26315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.982884][T22233] (null): radio-mr800 - initialization failed [ 1943.989602][T22233] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 1944.022921][T22233] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1944.088175][T22233] usb 3-1: USB disconnect, device number 23 [ 1945.022586][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1945.035288][T26135] block nbd8: Receive control failed (result -107) [ 1945.069321][T25829] block nbd8: shutting down sockets [ 1945.435328][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1945.450917][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.472498][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1945.515680][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1945.526738][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.535934][ T27] usb 3-1: Product: syz [ 1945.540353][ T27] usb 3-1: Manufacturer: syz [ 1945.545945][ T27] usb 3-1: SerialNumber: syz [ 1945.784284][ T27] usb 3-1: 0:2 : does not exist [ 1945.796839][ T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1945.842767][ T27] usb 3-1: USB disconnect, device number 24 [ 1945.921056][T25829] udevd[25829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1946.689480][T26360] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1946.813118][T10188] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1947.045261][T10188] usb 3-1: Using ep0 maxpacket: 16 [ 1948.192728][T26342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1948.418736][T10188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1948.428538][T10188] usb 3-1: config 7 has an invalid interface number: 118 but max is 1 [ 1948.437500][T10188] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1948.446459][T10188] usb 3-1: config 7 has an invalid interface number: 230 but max is 1 [ 1948.456217][T10188] usb 3-1: config 7 has no interface number 0 [ 1948.462844][T10188] usb 3-1: config 7 has no interface number 1 [ 1948.469056][T10188] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1948.480254][T10188] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1948.490762][T10188] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1948.552474][T10188] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1948.577364][T10188] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1948.616049][T10188] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1948.652571][T10188] usb 3-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1948.692539][T10188] usb 3-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1948.722461][T10188] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1948.729621][T10188] usb 3-1: config 7 interface 230 has no altsetting 0 [ 1948.777967][T10188] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1948.789489][T10188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.798592][T10188] usb 3-1: Product: syz [ 1948.802975][T10188] usb 3-1: Manufacturer: syz [ 1948.814221][T10188] usb 3-1: SerialNumber: syz [ 1948.836699][T26358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1948.853377][T26358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1948.864148][T26135] block nbd8: Receive control failed (result -107) [ 1948.874914][T26373] block nbd8: shutting down sockets [ 1949.632076][T26358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.656646][T26358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.683149][T26358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.716035][T26358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.788889][T10188] (null): radio-mr800 - initialization failed [ 1949.808641][T10188] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 1949.838249][T10188] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1950.711821][T10188] usb 3-1: USB disconnect, device number 25 [ 1951.237131][T26405] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1952.102671][ T5814] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1952.157006][T26410] program syz.2.4920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1952.305964][ T5814] usb 10-1: config 0 has no interfaces? [ 1952.313755][ T5814] usb 10-1: New USB device found, idVendor=056e, idProduct=ff0d, bcdDevice= 0.ff [ 1952.341195][ T5814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.370922][ T5814] usb 10-1: config 0 descriptor?? [ 1952.613013][ T27] usb 10-1: USB disconnect, device number 60 [ 1953.582993][T22229] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1953.782923][T22229] usb 10-1: Using ep0 maxpacket: 16 [ 1953.792860][T22229] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1953.806486][T22229] usb 10-1: config 7 has an invalid interface number: 118 but max is 1 [ 1953.816577][T22229] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1953.832979][T22229] usb 10-1: config 7 has an invalid interface number: 230 but max is 1 [ 1953.852343][T22229] usb 10-1: config 7 has no interface number 0 [ 1953.859455][T22229] usb 10-1: config 7 has no interface number 1 [ 1953.868359][T22229] usb 10-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1953.890278][T22229] usb 10-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1953.915531][T22229] usb 10-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1953.933797][T22229] usb 10-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1953.952517][T22229] usb 10-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1953.972622][T22229] usb 10-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1953.990549][T22229] usb 10-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1954.010645][T22229] usb 10-1: config 7 interface 118 has no altsetting 0 [ 1954.028469][T22229] usb 10-1: config 7 interface 230 has no altsetting 0 [ 1954.044299][T22229] usb 10-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1954.054857][T22229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.071543][T22229] usb 10-1: Product: syz [ 1954.081775][T22229] usb 10-1: Manufacturer: syz [ 1954.092472][T22229] usb 10-1: SerialNumber: syz [ 1954.116805][T26419] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1954.761943][T26419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.803411][T26419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.854101][T26419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.907186][T26419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.797324][T22229] (null): radio-mr800 - initialization failed [ 1955.805146][T22229] radio-mr800: probe of 10-1:7.118 failed with error -71 [ 1955.813715][T22229] usbhid 10-1:7.118: couldn't find an input interrupt endpoint [ 1955.835644][T22229] usb 10-1: USB disconnect, device number 61 [ 1958.212581][T22229] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1958.406163][T22229] usb 9-1: Using ep0 maxpacket: 16 [ 1958.427882][T22229] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1958.447588][T22229] usb 9-1: config 7 has an invalid interface number: 118 but max is 1 [ 1958.466566][T22229] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1958.498319][T22229] usb 9-1: config 7 has an invalid interface number: 230 but max is 1 [ 1958.519656][T22229] usb 9-1: config 7 has no interface number 0 [ 1958.548607][T22229] usb 9-1: config 7 has no interface number 1 [ 1958.563495][T22229] usb 9-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1958.592585][T22229] usb 9-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1958.608562][T22229] usb 9-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1958.620331][T22229] usb 9-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1958.631806][T22229] usb 9-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1958.652885][T22229] usb 9-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1958.687686][T22229] usb 9-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1958.713036][T22229] usb 9-1: config 7 interface 118 has no altsetting 0 [ 1958.727941][T22229] usb 9-1: config 7 interface 230 has no altsetting 0 [ 1958.772107][T22229] usb 9-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1958.810950][T22229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.840148][T22229] usb 9-1: Product: syz [ 1958.875791][T22229] usb 9-1: Manufacturer: syz [ 1958.891113][T22229] usb 9-1: SerialNumber: syz [ 1958.910346][T26454] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1960.008116][T26469] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1960.135372][T26454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.166703][T26454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.206679][T26454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.241509][T26454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.646485][T22229] (null): radio-mr800 - initialization failed [ 1961.653386][T22229] radio-mr800: probe of 9-1:7.118 failed with error -71 [ 1961.661214][T22229] usbhid 9-1:7.118: couldn't find an input interrupt endpoint [ 1961.681452][T22229] usb 9-1: USB disconnect, device number 36 [ 1964.333128][T22229] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1964.712604][T22229] usb 3-1: Using ep0 maxpacket: 16 [ 1964.733688][T22229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1964.743860][T22229] usb 3-1: config 7 has an invalid interface number: 118 but max is 1 [ 1964.752906][T22229] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1964.761950][T22229] usb 3-1: config 7 has an invalid interface number: 230 but max is 1 [ 1964.780989][T22229] usb 3-1: config 7 has no interface number 0 [ 1964.789536][T22229] usb 3-1: config 7 has no interface number 1 [ 1964.818176][T26513] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1964.847913][T22229] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1964.934259][T22229] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1965.102967][T22229] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1965.293771][T22229] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1965.443261][T22229] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1965.494465][T22229] usb 3-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1965.549619][T22229] usb 3-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1965.600699][T22229] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1965.625423][T22229] usb 3-1: config 7 interface 230 has no altsetting 0 [ 1965.695290][T22229] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1965.722596][T22229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.749858][T22229] usb 3-1: Product: syz [ 1965.777220][T22229] usb 3-1: Manufacturer: syz [ 1965.782035][T22229] usb 3-1: SerialNumber: syz [ 1965.826736][T26499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1966.495045][T26499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.533711][T26499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.604506][T26499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.648006][T26499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.962700][T22229] (null): radio-mr800 - initialization failed [ 1966.969270][T22229] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 1967.022346][T22229] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1967.863635][T22229] usb 3-1: USB disconnect, device number 26 [ 1972.782712][T10186] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1973.762658][T10186] usb 3-1: Using ep0 maxpacket: 16 [ 1973.781452][T10186] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1973.795746][T10186] usb 3-1: config 7 has an invalid interface number: 118 but max is 1 [ 1973.805514][T10186] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1973.823052][T10186] usb 3-1: config 7 has an invalid interface number: 230 but max is 1 [ 1973.837683][T10186] usb 3-1: config 7 has no interface number 0 [ 1973.852462][T10186] usb 3-1: config 7 has no interface number 1 [ 1973.869287][T10186] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1973.901314][T10186] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1973.918594][T10186] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1973.950156][T10186] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1973.991610][T10186] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1974.011300][T10186] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1974.032983][T10186] usb 3-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1974.054838][T10186] usb 3-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1974.075766][T10186] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1974.093809][T10186] usb 3-1: config 7 interface 230 has no altsetting 0 [ 1974.105331][T10186] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1974.119990][T10186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.152608][T10186] usb 3-1: Product: syz [ 1974.162800][T10186] usb 3-1: Manufacturer: syz [ 1974.178055][T10186] usb 3-1: SerialNumber: syz [ 1974.195245][T26571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1974.213921][T26571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1975.343673][T26605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.364624][T26605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.442800][T26571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.475742][T26571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.538375][T10186] (null): radio-mr800 - initialization failed [ 1975.557049][T10186] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 1975.586047][T10186] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1975.642100][T10186] usb 3-1: USB disconnect, device number 27 [ 1976.583327][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.590174][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.682738][T22233] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1978.892638][T22233] usb 10-1: Using ep0 maxpacket: 16 [ 1978.901723][T22233] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1978.930123][T22233] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1978.962046][T22233] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1978.982464][T22233] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.990647][T22233] usb 10-1: Product: syz [ 1979.026948][T22233] usb 10-1: Manufacturer: syz [ 1979.039481][T22233] usb 10-1: SerialNumber: syz [ 1979.346367][T22233] usb 10-1: 0:2 : does not exist [ 1979.399320][T22233] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1979.469617][T22233] usb 10-1: USB disconnect, device number 62 [ 1979.571086][T26572] udevd[26572]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1979.940117][T26669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5005'. [ 1982.192711][T22233] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1982.422476][T22233] usb 9-1: Using ep0 maxpacket: 16 [ 1982.434769][T22233] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.457361][T22233] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1982.486116][T22233] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1982.508998][T22233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.527972][T22233] usb 9-1: Product: syz [ 1982.532321][T22233] usb 9-1: Manufacturer: syz [ 1982.542626][T22233] usb 9-1: SerialNumber: syz [ 1982.785321][T22233] usb 9-1: 0:2 : does not exist [ 1983.609154][T22233] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1983.640771][T22233] usb 9-1: USB disconnect, device number 37 [ 1983.685161][T26572] udevd[26572]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1986.142773][T22233] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1987.142480][T22233] usb 3-1: Using ep0 maxpacket: 16 [ 1987.165456][T22233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1987.176017][T22233] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1987.196335][T22233] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1987.205935][T22233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.232581][T22233] usb 3-1: Product: syz [ 1987.237297][T22233] usb 3-1: Manufacturer: syz [ 1987.242192][T22233] usb 3-1: SerialNumber: syz [ 1987.503966][T22233] usb 3-1: 0:2 : does not exist [ 1987.530695][T22233] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1987.591590][T22233] usb 3-1: USB disconnect, device number 28 [ 1987.658454][T26572] udevd[26572]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1990.688368][T26816] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1990.715123][T26816] overlayfs: failed to look up (tracing) for ino (-66) [ 1991.484526][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5059'. [ 1991.512502][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5059'. [ 1991.543867][T26833] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5059'. [ 1991.572069][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5059'. [ 1993.108897][T26863] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1993.136782][T26863] overlayfs: failed to look up (tracing) for ino (-66) [ 1993.395585][T26873] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5070'. [ 1995.466508][T18586] syz_tun (unregistering): left allmulticast mode [ 1995.480778][T18586] syz_tun (unregistering): left promiscuous mode [ 1995.488675][T18586] bridge0: port 3(syz_tun) entered disabled state [ 1996.102704][T22233] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1996.365918][T22233] usb 3-1: Using ep0 maxpacket: 16 [ 1996.412837][T22233] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1996.451866][T22233] usb 3-1: config 7 has an invalid interface number: 118 but max is 1 [ 1996.471292][T22233] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1996.515409][T22233] usb 3-1: config 7 has an invalid interface number: 230 but max is 1 [ 1996.534892][T22233] usb 3-1: config 7 has no interface number 0 [ 1996.556759][T22233] usb 3-1: config 7 has no interface number 1 [ 1996.572556][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1996.596700][T22233] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1996.627162][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1996.651519][T22233] usb 3-1: config 7 interface 118 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1996.675589][T22233] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1996.699646][T22233] usb 3-1: config 7 interface 118 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1996.723826][T22233] usb 3-1: config 7 interface 230 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1996.753553][T22233] usb 3-1: config 7 interface 230 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 1996.790216][T22233] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1996.813028][T22233] usb 3-1: config 7 interface 230 has no altsetting 0 [ 1996.835163][T22233] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1996.850102][T22233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.873296][T22233] usb 3-1: Product: syz [ 1996.883642][T22233] usb 3-1: Manufacturer: syz [ 1996.898922][T22233] usb 3-1: SerialNumber: syz [ 1997.143399][T26901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1997.151845][T26901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1998.092858][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1998.110337][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1998.178985][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1998.192925][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1998.201367][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1998.209531][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1998.301958][T26901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.340782][T26901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.394895][T26901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.487007][T26901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.964539][T22233] (null): radio-mr800 - initialization failed [ 1998.988164][T22233] radio-mr800: probe of 3-1:7.118 failed with error -71 [ 1999.000844][T22233] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1999.058375][T26924] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.5090'. [ 1999.205321][T22233] usb 3-1: USB disconnect, device number 29 [ 2000.315493][ T5779] Bluetooth: hci0: command tx timeout [ 2001.793621][T26918] chnl_net:caif_netlink_parms(): no params data found [ 2002.384063][ T5779] Bluetooth: hci0: command tx timeout [ 2002.638610][T26918] bridge0: port 1(bridge_slave_0) entered blocking state [ 2002.655990][T26918] bridge0: port 1(bridge_slave_0) entered disabled state [ 2002.680663][T26918] bridge_slave_0: entered allmulticast mode [ 2002.725178][T26918] bridge_slave_0: entered promiscuous mode [ 2002.764975][T26918] bridge0: port 2(bridge_slave_1) entered blocking state [ 2002.808537][T26918] bridge0: port 2(bridge_slave_1) entered disabled state [ 2002.842913][T26918] bridge_slave_1: entered allmulticast mode [ 2002.884009][T26918] bridge_slave_1: entered promiscuous mode [ 2003.066884][T22793] hsr_slave_0: left promiscuous mode [ 2003.102951][T22793] hsr_slave_1: left promiscuous mode [ 2003.172779][T22793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2003.194796][T22793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2003.231908][T22793] bridge_slave_1: left allmulticast mode [ 2003.242708][T22793] bridge_slave_1: left promiscuous mode [ 2003.269281][T22793] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.306304][T22793] bridge_slave_0: left allmulticast mode [ 2003.346201][T22793] bridge_slave_0: left promiscuous mode [ 2003.352345][T22793] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.453949][ T5779] Bluetooth: hci0: command tx timeout [ 2005.907766][T22793] team0 (unregistering): Port device team_slave_1 removed [ 2006.060481][T22793] team0 (unregistering): Port device team_slave_0 removed [ 2006.213738][T22793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2006.325020][T22793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2006.555975][ T5779] Bluetooth: hci0: command tx timeout [ 2007.200108][T22793] bond0 (unregistering): Released all slaves [ 2007.415523][T26918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2007.468874][T26918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2007.503124][T27037] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.5108'. [ 2007.728122][T26918] team0: Port device team_slave_0 added [ 2007.834662][T26918] team0: Port device team_slave_1 added [ 2007.985838][T26918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2008.045956][T26918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2008.139680][T26918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2008.220906][T26918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.268794][T26918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2008.341151][T26918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.508337][T26918] hsr_slave_0: entered promiscuous mode [ 2008.528999][T26918] hsr_slave_1: entered promiscuous mode [ 2015.724289][T10186] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2015.913753][T10186] usb 9-1: device descriptor read/64, error -71 [ 2016.243323][T10186] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2016.352672][T27123] netlink: 'syz.2.5127': attribute type 4 has an invalid length. [ 2016.404439][T10186] usb 9-1: device descriptor read/64, error -71 [ 2016.522763][T10186] usb usb9-port1: attempt power cycle [ 2016.964675][T10186] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2017.013887][T10186] usb 9-1: device descriptor read/8, error -71 [ 2017.292754][T10186] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2017.333833][T10186] usb 9-1: device descriptor read/8, error -71 [ 2017.463541][T10186] usb usb9-port1: unable to enumerate USB device [ 2017.516435][T26918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2017.533995][T26918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2017.570417][T26918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2017.581978][T26918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2017.704675][T27164] tun0: tun_chr_ioctl cmd 1074812118 [ 2017.792712][T26918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2017.845124][T26918] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.867885][ T679] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.875551][ T679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.900076][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.907602][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2018.599370][T26918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2020.401614][T27215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2021.683099][ T789] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2021.763301][T26918] veth0_vlan: entered promiscuous mode [ 2021.830708][T26918] veth1_vlan: entered promiscuous mode [ 2021.862654][ T789] usb 3-1: device descriptor read/64, error -71 [ 2022.044882][T26918] veth0_macvtap: entered promiscuous mode [ 2022.098276][T26918] veth1_macvtap: entered promiscuous mode [ 2022.133352][ T789] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2022.178143][T26918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.462496][T26918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.482283][T26918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.504770][T26918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.531816][T26918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.577923][T26918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.607686][T26918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.648711][T26918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.690274][T26918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2022.737110][T26918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.770247][T26918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.815911][T26918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.841800][T26918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.875966][T26918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.902206][T26918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.936069][ T789] usb 3-1: device descriptor read/64, error -71 [ 2022.951864][T26918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2022.969485][T26918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.001263][T26918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2023.119826][T26918] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.131655][ T789] usb usb3-port1: attempt power cycle [ 2023.177925][T26918] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.188960][T26918] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.198505][T26918] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.449149][T27251] netlink: 'syz.9.5153': attribute type 21 has an invalid length. [ 2023.552537][T27251] netlink: 'syz.9.5153': attribute type 2 has an invalid length. [ 2023.703921][T27251] netlink: 16114 bytes leftover after parsing attributes in process `syz.9.5153'. [ 2024.094272][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.139461][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.353181][ T789] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2024.363636][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.388205][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.412838][ T789] usb 3-1: device descriptor read/8, error -71 [ 2026.973758][T22226] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2027.132711][T22226] usb 9-1: device descriptor read/64, error -71 [ 2027.402687][T22226] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2027.562831][T22226] usb 9-1: device descriptor read/64, error -71 [ 2027.807126][T22226] usb usb9-port1: attempt power cycle [ 2028.242597][T22226] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 2028.312779][T22226] usb 9-1: device descriptor read/8, error -71 [ 2028.593882][T22226] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 2028.673184][T22226] usb 9-1: device descriptor read/8, error -71 [ 2028.802731][T22226] usb usb9-port1: unable to enumerate USB device [ 2037.980194][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.986831][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.418640][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.426394][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2121.972720][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 2160.858748][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.866541][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2186.462797][ C0] ------------[ cut here ]------------ [ 2186.469425][ C0] ODEBUG: free active (active state 0) object: ffff888030140490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 2186.483251][ C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 2186.493297][ C0] Modules linked in: [ 2186.497244][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 2186.504712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2186.514877][ C0] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 2186.521352][ C0] Code: 4c 8b 4d 00 48 c7 c7 60 93 1c 8b 48 c7 c6 c0 8f 1c 8b 48 c7 c2 e0 94 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 8e 91 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 b3 f0 59 [ 2186.541176][ C0] RSP: 0018:ffffc90000007a50 EFLAGS: 00010296 [ 2186.547339][ C0] RAX: 7b2a28e8040e0800 RBX: ffffffff975006d8 RCX: ffffffff8ce93440 [ 2186.555661][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2186.563911][ C0] RBP: ffffffff8accac00 R08: ffffc90000007647 R09: 1ffff92000000ec8 [ 2186.572126][ C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: ffff888030140600 [ 2186.580611][ C0] R13: ffffffff897ac5a0 R14: ffff888030140000 R15: ffff888030140490 [ 2186.588716][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2186.597740][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2186.604494][ C0] CR2: 000055674838a168 CR3: 00000000786ce000 CR4: 00000000003506f0 [ 2186.612747][ C0] Call Trace: [ 2186.616179][ C0] [ 2186.619091][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 2186.624565][ C0] ? rose_timer_expiry+0x4c6/0x5f0 [ 2186.629809][ C0] __kmem_cache_free+0xba/0x1e0 [ 2186.634822][ C0] rose_timer_expiry+0x4c6/0x5f0 [ 2186.639904][ C0] ? call_timer_fn+0x171/0x540 [ 2186.644779][ C0] call_timer_fn+0x189/0x540 [ 2186.649514][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2186.654726][ C0] ? call_timer_fn+0xd2/0x540 [ 2186.659470][ C0] ? __run_timers+0x800/0x800 [ 2186.664347][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2186.669668][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2186.674985][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2186.680070][ C0] __run_timers+0x542/0x800 [ 2186.684686][ C0] ? detach_timer+0x2b0/0x2b0 [ 2186.689704][ C0] ? lock_chain_count+0x20/0x20 [ 2186.694935][ C0] run_timer_softirq+0x67/0xf0 [ 2186.699873][ C0] handle_softirqs+0x280/0x820 [ 2186.704828][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2186.709666][ C0] ? do_softirq+0x1a0/0x1a0 [ 2186.714619][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2186.720055][ C0] __irq_exit_rcu+0xd3/0x190 [ 2186.724742][ C0] ? irq_exit_rcu+0x20/0x20 [ 2186.729306][ C0] irq_exit_rcu+0x9/0x20 [ 2186.733743][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2186.739486][ C0] [ 2186.742604][ C0] [ 2186.745881][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2186.752134][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 2186.758363][ C0] Code: 6f 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 39 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 2186.778955][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 2186.785375][ C0] RAX: 7b2a28e8040e0800 RBX: ffffffff8162a9dd RCX: 7b2a28e8040e0800 [ 2186.793979][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 2186.802200][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 2186.810307][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 2186.818779][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 2186.827144][ C0] ? do_idle+0x33d/0x590 [ 2186.831553][ C0] default_idle+0x13/0x20 [ 2186.836205][ C0] default_idle_call+0x6c/0xa0 [ 2186.841033][ C0] do_idle+0x33d/0x590 [ 2186.845338][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2186.850714][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2186.857084][ C0] cpu_startup_entry+0x43/0x60 [ 2186.862117][ C0] rest_init+0x2e2/0x300 [ 2186.866801][ C0] ? time_init+0x40/0x40 [ 2186.871258][ C0] arch_call_rest_init+0xe/0x10 [ 2186.876257][ C0] start_kernel+0x459/0x4e0 [ 2186.881012][ C0] x86_64_start_reservations+0x2a/0x30 [ 2186.886624][ C0] x86_64_start_kernel+0x60/0x60 [ 2186.891809][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 2186.898047][ C0] [ 2186.901148][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2186.909069][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 2186.916497][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2186.926617][ C0] Call Trace: [ 2186.930022][ C0] [ 2186.932910][ C0] dump_stack_lvl+0x18c/0x250 [ 2186.937667][ C0] ? show_regs_print_info+0x20/0x20 [ 2186.942938][ C0] ? load_image+0x400/0x400 [ 2186.947625][ C0] panic+0x2dc/0x730 [ 2186.951741][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 2186.956376][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 2186.962948][ C0] __warn+0x2e0/0x470 [ 2186.967183][ C0] ? debug_check_no_obj_freed+0x446/0x540 [ 2186.973332][ C0] ? debug_check_no_obj_freed+0x446/0x540 [ 2186.979625][ C0] report_bug+0x2be/0x4f0 [ 2186.984268][ C0] ? debug_check_no_obj_freed+0x446/0x540 [ 2186.990154][ C0] ? debug_check_no_obj_freed+0x446/0x540 [ 2186.996294][ C0] ? debug_check_no_obj_freed+0x448/0x540 [ 2187.002519][ C0] handle_bug+0xcf/0x120 [ 2187.006880][ C0] exc_invalid_op+0x1a/0x50 [ 2187.011415][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2187.016310][ C0] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 2187.022972][ C0] Code: 4c 8b 4d 00 48 c7 c7 60 93 1c 8b 48 c7 c6 c0 8f 1c 8b 48 c7 c2 e0 94 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 8e 91 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 b3 f0 59 [ 2187.042896][ C0] RSP: 0018:ffffc90000007a50 EFLAGS: 00010296 [ 2187.049097][ C0] RAX: 7b2a28e8040e0800 RBX: ffffffff975006d8 RCX: ffffffff8ce93440 [ 2187.057478][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2187.065490][ C0] RBP: ffffffff8accac00 R08: ffffc90000007647 R09: 1ffff92000000ec8 [ 2187.073853][ C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: ffff888030140600 [ 2187.081946][ C0] R13: ffffffff897ac5a0 R14: ffff888030140000 R15: ffff888030140490 [ 2187.090231][ C0] ? rose_transmit_link+0x740/0x740 [ 2187.095592][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 2187.101075][ C0] ? rose_timer_expiry+0x4c6/0x5f0 [ 2187.106442][ C0] __kmem_cache_free+0xba/0x1e0 [ 2187.111463][ C0] rose_timer_expiry+0x4c6/0x5f0 [ 2187.116503][ C0] ? call_timer_fn+0x171/0x540 [ 2187.121329][ C0] call_timer_fn+0x189/0x540 [ 2187.125965][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2187.131020][ C0] ? call_timer_fn+0xd2/0x540 [ 2187.135758][ C0] ? __run_timers+0x800/0x800 [ 2187.140695][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2187.146260][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2187.151815][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2187.157064][ C0] __run_timers+0x542/0x800 [ 2187.161706][ C0] ? detach_timer+0x2b0/0x2b0 [ 2187.166525][ C0] ? lock_chain_count+0x20/0x20 [ 2187.171511][ C0] run_timer_softirq+0x67/0xf0 [ 2187.176310][ C0] handle_softirqs+0x280/0x820 [ 2187.181375][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2187.186219][ C0] ? do_softirq+0x1a0/0x1a0 [ 2187.191141][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2187.196624][ C0] __irq_exit_rcu+0xd3/0x190 [ 2187.201264][ C0] ? irq_exit_rcu+0x20/0x20 [ 2187.205801][ C0] irq_exit_rcu+0x9/0x20 [ 2187.210162][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2187.215861][ C0] [ 2187.219079][ C0] [ 2187.222049][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2187.228074][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 2187.233937][ C0] Code: 6f 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 39 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 2187.253838][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 2187.260215][ C0] RAX: 7b2a28e8040e0800 RBX: ffffffff8162a9dd RCX: 7b2a28e8040e0800 [ 2187.268425][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 2187.276615][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 2187.284639][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 2187.293262][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 2187.301663][ C0] ? do_idle+0x33d/0x590 [ 2187.306239][ C0] default_idle+0x13/0x20 [ 2187.310729][ C0] default_idle_call+0x6c/0xa0 [ 2187.315910][ C0] do_idle+0x33d/0x590 [ 2187.320046][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2187.325375][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2187.331636][ C0] cpu_startup_entry+0x43/0x60 [ 2187.336567][ C0] rest_init+0x2e2/0x300 [ 2187.340986][ C0] ? time_init+0x40/0x40 [ 2187.345440][ C0] arch_call_rest_init+0xe/0x10 [ 2187.350775][ C0] start_kernel+0x459/0x4e0 [ 2187.355320][ C0] x86_64_start_reservations+0x2a/0x30 [ 2187.361129][ C0] x86_64_start_kernel+0x60/0x60 [ 2187.366244][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 2187.372536][ C0] [ 2187.376255][ C0] Kernel Offset: disabled [ 2187.380806][ C0] Rebooting in 86400 seconds..