last executing test programs: 5m9.611458447s ago: executing program 3 (id=530): syz_open_dev$vim2m(&(0x7f0000000240), 0x1000, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_io_uring_setup(0x5e2, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 5m8.547927048s ago: executing program 3 (id=535): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x42c03) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd29) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mlock(&(0x7f0000d9a000/0x10000)=nil, 0x10000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, 0xffffffffffffffff, 0x11, 0x0, r7, @void, @value}, 0x14) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) 5m7.311853982s ago: executing program 3 (id=542): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000001500)='4\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x4) 5m6.953580086s ago: executing program 3 (id=544): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x5, 0x36fd}, {0x6}]}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x219) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a0e000000000a030000000000000000000000000309000100764de0070000000034000000030a00020000000000000000010000000900010073797a300000000008000a40000000050900010073797a3000000000140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x101) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r10 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)}, 0x44000) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 5m3.368399218s ago: executing program 3 (id=557): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x6, 0x0, 0x0, 0xdb, 0x6, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, [0xffffffff, 0x89ff]}}) 5m3.280164019s ago: executing program 3 (id=558): r0 = gettid() prlimit64(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bee) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_delete(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x14) 4m48.062024637s ago: executing program 32 (id=558): r0 = gettid() prlimit64(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bee) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_delete(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x14) 2m57.519225989s ago: executing program 2 (id=987): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = dup(r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000740)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ftruncate(0xffffffffffffffff, 0xdcb) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) 2m51.344986504s ago: executing program 2 (id=1001): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) 2m49.541029383s ago: executing program 2 (id=1007): io_uring_setup(0x79bf, &(0x7f0000000180)={0x0, 0x888c, 0x20}) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newlink={0x40, 0x10, 0x401, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xe}]}}}]}, 0x40}}, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x8, 0x1) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_usb_connect(0x0, 0xf5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000714cca102c105161ae2c010203010902e30001000000000904"], 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m45.673354213s ago: executing program 2 (id=1017): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = semget$private(0x0, 0x3, 0x83) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) semctl$SEM_STAT(r5, 0x3, 0x12, &(0x7f0000000300)=""/146) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2802, 0x0) read$proc_mixer(r6, &(0x7f0000000400)=""/182, 0xb6) 2m44.227268731s ago: executing program 2 (id=1021): socket$nl_generic(0x11, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$kcm(0xa, 0x2, 0x11) r0 = socket(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r0], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 2m43.991729604s ago: executing program 2 (id=1025): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000100)={0x20}, 0xfdef) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000280)=0x6e, 0xc1800) read$FUSE(r4, &(0x7f0000001940)={0x2020}, 0x2020) 2m32.263747128s ago: executing program 1 (id=1111): creat(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mkdir(&(0x7f0000000340)='./cgroup/../file0\x00', 0x1d6) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) bind$pptp(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x2, {0x1}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x11e, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) shmget(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xc, 0x39, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 2m31.736426564s ago: executing program 1 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0xb0010000], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0xf0, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) 2m29.556071776s ago: executing program 1 (id=1119): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="e0d8010004a701004800128009000100626f6e640000000038000280050015000400000005001b005400000008000f00050000000480050001000600000005001100090000"], 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2m28.892158888s ago: executing program 33 (id=1025): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000100)={0x20}, 0xfdef) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000280)=0x6e, 0xc1800) read$FUSE(r4, &(0x7f0000001940)={0x2020}, 0x2020) 2m28.05870942s ago: executing program 1 (id=1124): creat(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mkdir(&(0x7f0000000340)='./cgroup/../file0\x00', 0x1d6) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) bind$pptp(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x2, {0x1}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x11e, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) shmget(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xc, 0x39, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 2m27.679524169s ago: executing program 1 (id=1125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000700)=@newchain={0x80, 0x64, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xd, 0x1}, {0xd, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x6, 0x43, 0x7, 0x800, 0x0, 0x2a, 0x3, [{0x46, 0x0, 0x0, 0xd}]}}, @TCA_U32_LINK={0x8, 0x3, 0x534}, @TCA_U32_DIVISOR={0x8, 0x4, 0x95}]}}]}, 0x80}}, 0x0) r4 = io_uring_setup(0x5b2e, &(0x7f0000000500)) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r6 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x0) keyctl$describe(0x11, r6, 0x0, 0x0) close(r0) 2m26.189354648s ago: executing program 1 (id=1129): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x8) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 2m10.202130695s ago: executing program 34 (id=1129): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x8) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 1m13.452924043s ago: executing program 6 (id=1330): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) 1m13.203354436s ago: executing program 6 (id=1331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r4 = fanotify_init(0x10, 0x101000) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r4, 0x1, 0x40001010, r5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000540)={0x1, 0x6}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 1m11.85304975s ago: executing program 6 (id=1335): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0xb0010000], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0xf0, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) chdir(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) 1m10.924802042s ago: executing program 6 (id=1337): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x29, 0x80b, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="7c000000060603000000000000000000010000060500"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x4, 0xfa00, {r5, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) 1m7.825885354s ago: executing program 6 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m5.220867008s ago: executing program 6 (id=1352): r0 = gettid() prlimit64(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bee) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_delete(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) 49.971105842s ago: executing program 35 (id=1352): r0 = gettid() prlimit64(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bee) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_delete(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) 13.84281313s ago: executing program 7 (id=1481): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000040)=0x5a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x881) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000180)={{@host, 0x9}, @hyper, 0x5, 0x4, 0x140000000000000, 0x3, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r1, &(0x7f00000000c0)=0x58, 0x5) socket$nl_route(0x10, 0x3, 0x0) 12.573549376s ago: executing program 7 (id=1484): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000230000002000018008000100", @ANYRES32, @ANYBLOB="140002006970766c616e3000000000005b197ca6e7dc14cedf85"], 0x34}}, 0x0) 10.862174256s ago: executing program 7 (id=1487): ioperm(0x0, 0x4, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x20) 10.760380253s ago: executing program 7 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006366e240f30c7593c9310000000109022d00010000000009040000032fadc60009050396b2", @ANYRESHEX=r0], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xffc9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000040)=0x10bff545, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001400)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) writev(r2, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987", 0x1d}], 0x1) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xb, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000a80)={0x0, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) 10.600736245s ago: executing program 8 (id=1489): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) 10.019182939s ago: executing program 5 (id=1492): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup(r4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000740)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000140)={0x1, r7}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]}) 8.735638229s ago: executing program 5 (id=1493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = io_uring_setup(0x3e45, &(0x7f00000001c0)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(r1, 0xffffffffffffffff, 0x0) write$tun(r0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) 8.468055906s ago: executing program 0 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000d971910d00f626f5b505148300b59d6827c9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000) keyctl$update(0x2, 0x0, &(0x7f0000000340)="39aafad7", 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1c, 0x2, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9, 0x1, 0x0, 0x8000}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0]) 7.576525641s ago: executing program 5 (id=1496): syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x181000, 0x12) socket$inet6(0xa, 0x80002, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x19, 0x20000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000280)=0x280501, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 7.57443973s ago: executing program 8 (id=1497): syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) rename(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x100000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002a80)="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", 0x2000, &(0x7f00000009c0)={&(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1, 0x2008c30}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000042d50100002020702500000000f51f20207b1af8ff00000000bfa10000000000000700eb00f8ffffffb702000005000000b70300000000000085000000730000001801000020786c2500000000002020207b1af8ff00000000bfa100000000001907010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 6.779762006s ago: executing program 0 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) 6.755457828s ago: executing program 0 (id=1500): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.340046099s ago: executing program 7 (id=1502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000001c0)={@private0}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7040000080000008500000049000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.320075696s ago: executing program 4 (id=1503): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000740)=0xfffffffffffffede) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000040)=0x5a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x881) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000180)={{@host, 0x9}, @hyper, 0x5, 0x4, 0x140000000000000, 0x3, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0)=0x58, 0x5) 5.187794418s ago: executing program 8 (id=1504): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000024c0)={0x84, &(0x7f0000002080)={0x20, 0x3, 0x2a, "e6cfd14a9d797a1e9a63c26de75266553bb3873bf9cbdc7b406c984e366ac414eb03b3d5114e4d0a9354"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.187369265s ago: executing program 5 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0x9, 0x6, 0xae, 0x1000, 0xfab9, 0x1000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.572111824s ago: executing program 5 (id=1506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) 4.520991736s ago: executing program 5 (id=1507): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) 3.971795854s ago: executing program 4 (id=1508): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x10000, 0xf1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 3.807900434s ago: executing program 4 (id=1509): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = dup(0xffffffffffffffff) ioctl$TIOCGSOFTCAR(r6, 0x4bfb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.787972808s ago: executing program 4 (id=1510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000d971910d00f626f5b505148300b59d6827c9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000) keyctl$update(0x2, 0x0, &(0x7f0000000340)="39aafad7", 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1c, 0x2, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9, 0x1, 0x0, 0x8000}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0]) 2.76241106s ago: executing program 7 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006366e240f30c7593c9310000000109022d00010000000009040000032fadc60009050396b2", @ANYRESHEX=r0], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xffc9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000040)=0x10bff545, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001400)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000a80)={0x0, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) 2.133455515s ago: executing program 4 (id=1512): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xd]}, 0x8, 0x81800) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r4, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 1.890175369s ago: executing program 8 (id=1513): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r0, r0, 0x3, 0x8000000000, 0x4001}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r0, 0x0, &(0x7f0000000300)='o', 0x1, 0x6}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r0, 0x0, &(0x7f0000000200)="f0", 0x1, 0x6}) 1.846261753s ago: executing program 0 (id=1514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 1.659711901s ago: executing program 8 (id=1515): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x58) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0xf2cb) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380001, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) capset(0x0, &(0x7f0000000140)) syz_open_dev$vim2m(0x0, 0xc909, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb3c3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1, 0x0, 0x43}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) 1.640483687s ago: executing program 0 (id=1516): syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x181000, 0x12) socket$inet6(0xa, 0x80002, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x19, 0x20000000, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000280)=0x280501, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 244.428419ms ago: executing program 4 (id=1517): r0 = socket$inet6(0xa, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000580)=0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x1000, 0x10, 0x76, 0x9, 0x0, "23f555d9ad9506000000000000beaa82dc1ecf", 0xa4, 0xfffffffe}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x10001, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 151.80724ms ago: executing program 8 (id=1518): syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x181000, 0x12) socket$inet6(0xa, 0x80002, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0x40103e05, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r5 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x19, 0x20000000, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x280501, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 0s ago: executing program 0 (id=1519): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x15, 0x805, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89e1, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.788793][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.984756][ T5884] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 200.075636][ T5884] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 200.305345][ T5884] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 200.905395][ T7852] Invalid ELF header magic: != ELF [ 200.907501][ T29] audit: type=1804 audit(1732751938.090:300): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.655" name="/newroot/136/bus/bus" dev="overlay" ino=740 res=1 errno=0 [ 203.227837][ T5675] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.241709][ T5675] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.386955][ T5881] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 203.550260][ T5675] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 204.008587][ T5881] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 204.019165][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12466, setting to 1024 [ 204.034588][ T5881] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 204.045267][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.067789][ T5881] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 204.079490][ T7855] syz.1.656 (7855) used greatest stack depth: 16944 bytes left [ 204.087178][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.130292][ T5881] usb 6-1: config 0 descriptor?? [ 204.142778][ T7885] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 207.789833][ T5881] ath6kl: Failed to submit usb control message: -71 [ 207.796525][ T5881] ath6kl: unable to send the bmi data to the device: -71 [ 207.803854][ T5881] ath6kl: Unable to send get target info: -71 [ 207.813716][ T5881] ath6kl: Failed to init ath6kl core: -71 [ 207.820463][ T5881] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 207.833250][ T5881] usb 6-1: USB disconnect, device number 2 [ 208.494203][ T5675] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 208.509306][ T5675] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 208.641488][ T5675] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 209.532473][ T7948] xt_socket: unknown flags 0x8 [ 210.367925][ T29] audit: type=1804 audit(1732751946.770:301): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.680" name="/newroot/164/bus/bus" dev="overlay" ino=886 res=1 errno=0 [ 212.567618][ T5881] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 212.817900][ T5881] usb 6-1: device descriptor read/64, error -71 [ 213.765595][ T5675] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 213.773665][ T5675] hid-generic 0000:0000:0000.000A: unknown main item tag 0x1 [ 213.829720][ T5675] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 213.978735][ T5881] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 214.157664][ T5881] usb 6-1: device descriptor read/64, error -71 [ 214.425317][ T5881] usb usb6-port1: attempt power cycle [ 216.842380][ T29] audit: type=1326 audit(1732751953.436:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 216.865696][ T8016] loop5: detected capacity change from 0 to 256 [ 216.872782][ T8016] msdos: Bad value for 'tz' [ 216.880551][ T8016] loop6: detected capacity change from 0 to 7 [ 216.890468][ T8016] buffer_io_error: 4 callbacks suppressed [ 216.890489][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.912401][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.947600][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.967531][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.016404][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.085222][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.117189][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.127647][ T8016] ldm_validate_partition_table(): Disk read failed. [ 217.187496][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.219587][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.247534][ T8016] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.321982][ T8016] Dev loop6: unable to read RDB block 0 [ 217.329735][ T8016] loop6: unable to read partition table [ 217.335702][ T8016] loop6: partition table beyond EOD, truncated [ 217.342047][ T8016] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 217.342047][ T8016] ) failed (rc=-5) [ 217.370142][ T29] audit: type=1326 audit(1732751953.436:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 217.713892][ T29] audit: type=1326 audit(1732751953.436:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 217.880311][ T29] audit: type=1326 audit(1732751953.436:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 217.903176][ T29] audit: type=1326 audit(1732751953.446:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 217.925750][ T29] audit: type=1326 audit(1732751953.446:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 217.948805][ T29] audit: type=1326 audit(1732751953.446:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 217.971772][ T29] audit: type=1326 audit(1732751953.446:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 217.995578][ T29] audit: type=1326 audit(1732751953.446:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 218.018120][ T29] audit: type=1326 audit(1732751953.446:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 218.254275][ T8026] bond0: entered promiscuous mode [ 218.338211][ T5913] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.512209][ T5881] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.537097][ T5881] hid-generic 0000:0000:0000.000B: unknown main item tag 0x1 [ 218.549331][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 218.572509][ T8026] bond_slave_0: entered promiscuous mode [ 218.605627][ T5913] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 218.654314][ T8026] bond_slave_1: entered promiscuous mode [ 218.688871][ T5913] usb 5-1: config 4 has no interface number 0 [ 218.714235][ T5881] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 219.217759][ T5913] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.286200][ T5913] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.344850][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 219.407570][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.473114][ T5913] hub 5-1:4.128: USB hub found [ 220.721285][ T3075] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 220.771768][ T5913] hub 5-1:4.128: 2 ports detected [ 220.782711][ T5913] hub 5-1:4.128: Using single TT (err -22) [ 220.897967][ T3075] usb 1-1: device descriptor read/64, error -71 [ 221.064542][ T5913] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 221.071735][ T5913] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 221.160354][ T3075] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 221.396362][ T3075] usb 1-1: device descriptor read/64, error -71 [ 221.428432][ T5913] usb 5-1: USB disconnect, device number 6 [ 221.612304][ T3075] usb usb1-port1: attempt power cycle [ 221.977912][ T3075] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 222.073257][ T3075] usb 1-1: device descriptor read/8, error -71 [ 222.487573][ T8066] lo speed is unknown, defaulting to 1000 [ 222.500434][ T8066] lo speed is unknown, defaulting to 1000 [ 222.712845][ T8069] loop4: detected capacity change from 0 to 256 [ 222.722562][ T8069] msdos: Bad value for 'tz' [ 222.739921][ T8069] loop6: detected capacity change from 0 to 7 [ 222.747708][ T8069] buffer_io_error: 4 callbacks suppressed [ 222.747745][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.762366][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.770907][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.779398][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.787675][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.796081][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.804986][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.813264][ T8069] ldm_validate_partition_table(): Disk read failed. [ 222.820338][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.828981][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.837286][ T8069] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.846587][ T8069] Dev loop6: unable to read RDB block 0 [ 222.853540][ T8069] loop6: unable to read partition table [ 222.860212][ T8069] loop6: partition table beyond EOD, truncated [ 222.866500][ T8069] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 222.866500][ T8069] ) failed (rc=-5) [ 222.920999][ T8066] lo speed is unknown, defaulting to 1000 [ 223.018633][ T8066] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 223.033495][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 223.033514][ T29] audit: type=1326 audit(1732751959.797:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.075926][ T3075] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 223.107539][ T29] audit: type=1326 audit(1732751959.807:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.153777][ T3075] usb 1-1: device descriptor read/8, error -71 [ 223.176652][ T8066] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 223.232979][ T29] audit: type=1326 audit(1732751959.807:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.243475][ T8066] lo speed is unknown, defaulting to 1000 [ 223.276192][ T8073] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 223.283300][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.285265][ T8066] lo speed is unknown, defaulting to 1000 [ 223.309653][ T3075] usb usb1-port1: unable to enumerate USB device [ 223.334380][ T29] audit: type=1326 audit(1732751959.807:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.335446][ T8066] lo speed is unknown, defaulting to 1000 [ 223.381199][ T29] audit: type=1326 audit(1732751959.807:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.382168][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 223.404323][ T8078] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 223.415711][ T8078] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.423583][ T29] audit: type=1326 audit(1732751959.807:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.448391][ T8078] vhci_hcd vhci_hcd.0: Device attached [ 223.467308][ T8076] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 223.473979][ T8076] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.493492][ T8066] lo speed is unknown, defaulting to 1000 [ 223.500574][ T8066] lo speed is unknown, defaulting to 1000 [ 223.507660][ T8066] lo speed is unknown, defaulting to 1000 [ 223.517257][ T8073] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 223.523924][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.532462][ T29] audit: type=1326 audit(1732751959.807:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.554831][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.555159][ T8076] vhci_hcd vhci_hcd.0: Device attached [ 223.581769][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 223.601706][ T29] audit: type=1326 audit(1732751959.807:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.624677][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.637650][ T9] vhci_hcd: vhci_device speed not set [ 223.657595][ T8078] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 223.664348][ T8078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.683561][ T29] audit: type=1326 audit(1732751959.807:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.706959][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.717623][ T8078] vhci_hcd vhci_hcd.0: Device attached [ 223.734682][ T8080] vhci_hcd: connection closed [ 223.734939][ T8074] vhci_hcd: connection closed [ 223.738587][ T29] audit: type=1326 audit(1732751959.817:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 223.740710][ T8077] vhci_hcd: connection closed [ 223.744538][ T62] vhci_hcd: stop threads [ 223.788386][ T8085] vhci_hcd: connection closed [ 223.788587][ T8087] vhci_hcd: connection closed [ 223.796160][ T9] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 223.816188][ T8075] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 223.827269][ T62] vhci_hcd: release socket [ 223.840603][ T62] vhci_hcd: disconnect device [ 223.845511][ T62] vhci_hcd: stop threads [ 223.856048][ T62] vhci_hcd: release socket [ 223.862006][ T62] vhci_hcd: disconnect device [ 223.887194][ T62] vhci_hcd: stop threads [ 223.901996][ T62] vhci_hcd: release socket [ 223.924516][ T62] vhci_hcd: disconnect device [ 223.949847][ T62] vhci_hcd: stop threads [ 223.977449][ T62] vhci_hcd: release socket [ 223.996105][ T62] vhci_hcd: disconnect device [ 224.007867][ T62] vhci_hcd: stop threads [ 224.013357][ T62] vhci_hcd: release socket [ 224.018433][ T62] vhci_hcd: disconnect device [ 224.048449][ T5881] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 225.137592][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 225.148351][ T5881] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 225.162099][ T5881] usb 6-1: config 0 has no interface number 0 [ 225.169553][ T5881] usb 6-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 226.145196][ T5881] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 226.154486][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.176997][ T5881] usb 6-1: Product: syz [ 226.186312][ T5881] usb 6-1: Manufacturer: syz [ 226.196039][ T8118] loop0: detected capacity change from 0 to 256 [ 226.599883][ T8118] msdos: Bad value for 'tz' [ 226.615506][ T5881] usb 6-1: SerialNumber: syz [ 226.617226][ T8114] loop6: detected capacity change from 0 to 7 [ 226.629751][ T8114] ldm_validate_partition_table(): Disk read failed. [ 226.636903][ T8114] Dev loop6: unable to read RDB block 0 [ 226.643503][ T8114] loop6: unable to read partition table [ 226.649908][ T8114] loop6: partition table beyond EOD, truncated [ 226.656799][ T8114] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 226.656799][ T8114] ) failed (rc=-5) [ 227.188143][ T5881] usb 6-1: config 0 descriptor?? [ 227.194692][ T5881] usb 6-1: can't set config #0, error -71 [ 227.202768][ T5881] usb 6-1: USB disconnect, device number 6 [ 227.548370][ T8141] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(16) [ 227.555161][ T8141] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.575245][ T8141] vhci_hcd vhci_hcd.0: Device attached [ 227.600792][ T8139] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 227.607478][ T8139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.674362][ T8147] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(18) [ 227.681300][ T8147] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.696907][ T8139] vhci_hcd vhci_hcd.0: Device attached [ 227.703405][ T8147] vhci_hcd vhci_hcd.0: Device attached [ 227.722908][ T8139] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 227.729618][ T8139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.737823][ T8139] vhci_hcd vhci_hcd.0: Device attached [ 227.749019][ T8139] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 227.755774][ T8139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.853171][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 227.862976][ T8139] vhci_hcd vhci_hcd.0: Device attached [ 228.137701][ T8148] vhci_hcd: connection closed [ 228.138849][ T8154] vhci_hcd: connection closed [ 228.170294][ T8142] vhci_hcd: connection closed [ 228.175765][ T11] vhci_hcd: stop threads [ 228.189976][ T11] vhci_hcd: release socket [ 228.195402][ T11] vhci_hcd: disconnect device [ 228.257740][ T8140] vhci_hcd: connection closed [ 228.267017][ T11] vhci_hcd: stop threads [ 228.377976][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 228.383480][ T5881] vhci_hcd: vhci_device speed not set [ 228.398176][ T11] vhci_hcd: release socket [ 228.402695][ T11] vhci_hcd: disconnect device [ 228.431288][ T8156] vhci_hcd: connection closed [ 228.447524][ T11] vhci_hcd: stop threads [ 228.456671][ T11] vhci_hcd: release socket [ 228.461814][ T11] vhci_hcd: disconnect device [ 228.504006][ T11] vhci_hcd: stop threads [ 228.508497][ T25] usb 3-1: config 0 has no interfaces? [ 228.514104][ T11] vhci_hcd: release socket [ 228.527843][ T11] vhci_hcd: disconnect device [ 228.543598][ T11] vhci_hcd: stop threads [ 228.548440][ T11] vhci_hcd: release socket [ 228.553027][ T11] vhci_hcd: disconnect device [ 228.567805][ T5881] usb 43-2: new full-speed USB device number 2 using vhci_hcd [ 228.577539][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 228.586880][ T5881] usb 43-2: enqueue for inactive port 1 [ 228.597765][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.612964][ T25] usb 3-1: Product: syz [ 228.617196][ T25] usb 3-1: Manufacturer: syz [ 228.632539][ T25] usb 3-1: SerialNumber: syz [ 228.666000][ T25] usb 3-1: config 0 descriptor?? [ 228.667799][ T5881] vhci_hcd: vhci_device speed not set [ 228.938599][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 228.947745][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 228.956622][ T8125] vlan2: entered promiscuous mode [ 228.967236][ T8125] bridge0: entered promiscuous mode [ 228.976170][ T8125] vlan2: entered allmulticast mode [ 229.007273][ T9] vhci_hcd: vhci_device speed not set [ 229.137787][ T8125] bridge0: entered allmulticast mode [ 229.668230][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 229.690040][ T8125] bridge0: port 3(vlan2) entered blocking state [ 229.713032][ T8125] bridge0: port 3(vlan2) entered disabled state [ 230.001978][ T8125] bridge0: left allmulticast mode [ 230.329859][ T8125] bridge0: left promiscuous mode [ 230.842100][ T25] usb 3-1: USB disconnect, device number 7 [ 231.536412][ T8196] cgroup: fork rejected by pids controller in /syz0 [ 231.567707][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 231.757506][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 231.765347][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.793428][ T25] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 231.939099][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 231.985586][ T8250] loop1: detected capacity change from 0 to 128 [ 232.002666][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.011814][ T25] usb 6-1: Product: syz [ 232.016022][ T25] usb 6-1: Manufacturer: syz [ 232.020910][ T25] usb 6-1: SerialNumber: syz [ 232.027986][ T25] usb 6-1: config 0 descriptor?? [ 232.035635][ T25] gspca_main: etoms-2.14.0 probing 102c:6151 [ 232.059882][ T8250] xt_hashlimit: max too large, truncated to 1048576 [ 232.069218][ T8250] Cannot find set identified by id 0 to match [ 232.906207][ T25] usb 6-1: USB disconnect, device number 7 [ 233.614974][ T8273] loop2: detected capacity change from 0 to 256 [ 233.625191][ T8273] msdos: Bad value for 'tz' [ 235.145515][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 235.145536][ T29] audit: type=1326 audit(1732751970.697:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 235.267963][ T29] audit: type=1326 audit(1732751970.697:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 235.317721][ T29] audit: type=1326 audit(1732751970.697:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 235.379237][ T29] audit: type=1326 audit(1732751970.697:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 235.959255][ T29] audit: type=1326 audit(1732751970.697:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 236.032650][ T29] audit: type=1326 audit(1732751970.707:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 236.087109][ T29] audit: type=1326 audit(1732751970.707:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 236.120277][ T29] audit: type=1326 audit(1732751970.707:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 236.215117][ T29] audit: type=1326 audit(1732751970.707:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 236.246580][ T29] audit: type=1326 audit(1732751970.707:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f285d780809 code=0x7ffc0000 [ 236.346411][ T8300] netlink: 128 bytes leftover after parsing attributes in process `syz.5.776'. [ 237.939113][ T8311] xt_cgroup: xt_cgroup: no path or classid specified [ 240.977781][ T5675] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 241.198033][ T5675] usb 5-1: Using ep0 maxpacket: 16 [ 241.246361][ T5675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.298153][ T5675] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 241.323541][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.361463][ T5675] usb 5-1: Product: syz [ 241.427611][ T5675] usb 5-1: Manufacturer: syz [ 241.432436][ T5675] usb 5-1: SerialNumber: syz [ 241.473558][ T5675] usb 5-1: config 0 descriptor?? [ 241.497970][ T5675] gspca_main: etoms-2.14.0 probing 102c:6151 [ 242.527949][ T5913] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 242.854023][ T5675] usb 5-1: USB disconnect, device number 7 [ 242.868183][ T5913] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 242.877600][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.888330][ T5913] usb 3-1: config 0 descriptor?? [ 242.967768][ T8367] netlink: 128 bytes leftover after parsing attributes in process `syz.0.798'. [ 243.304408][ T5913] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 243.425614][ T8384] ax25_connect(): syz.1.801 uses autobind, please contact jreuter@yaina.de [ 244.139723][ T5913] usb 3-1: USB disconnect, device number 8 [ 246.107678][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 246.178142][ T8415] netlink: 128 bytes leftover after parsing attributes in process `syz.2.814'. [ 246.267575][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 246.281860][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.309209][ T9] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 246.326465][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.331448][ T8425] @ÿ: renamed from vlan0 (while UP) [ 246.357761][ T9] usb 1-1: Product: syz [ 246.362000][ T9] usb 1-1: Manufacturer: syz [ 246.387059][ T9] usb 1-1: SerialNumber: syz [ 246.399156][ T9] usb 1-1: config 0 descriptor?? [ 246.418123][ T9] gspca_main: etoms-2.14.0 probing 102c:6151 [ 246.836909][ T8434] xt_bpf: check failed: parse error [ 246.853336][ T9] usb 1-1: USB disconnect, device number 10 [ 247.801335][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 247.849663][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 247.907772][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 250.772748][ T8486] xt_bpf: check failed: parse error [ 252.329363][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 252.355744][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 252.365083][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 252.647541][ T3075] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 252.948395][ T3075] usb 1-1: Using ep0 maxpacket: 16 [ 252.958487][ T3075] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.971647][ T3075] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 252.981244][ T3075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.989994][ T3075] usb 1-1: Product: syz [ 253.000877][ T3075] usb 1-1: Manufacturer: syz [ 253.011926][ T3075] usb 1-1: SerialNumber: syz [ 253.131532][ T3075] usb 1-1: config 0 descriptor?? [ 253.651975][ T3075] gspca_main: etoms-2.14.0 probing 102c:6151 [ 253.854026][ T3075] usb 1-1: USB disconnect, device number 11 [ 253.936062][ T8536] netlink: 128 bytes leftover after parsing attributes in process `syz.4.855'. [ 254.217562][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 254.320942][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 254.329787][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 254.338868][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 254.439577][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 254.449483][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.461099][ T9] usb 3-1: config 0 descriptor?? [ 254.727853][ T5885] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 255.029229][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.051148][ T5885] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.065332][ T5885] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 255.091994][ T9] gs_usb 3-1:0.0: Configuring for 75 interfaces [ 255.098430][ T9] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 255.106804][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.107812][ T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 255.141636][ T5885] usb 1-1: Product: syz [ 255.145963][ T5885] usb 1-1: Manufacturer: syz [ 255.152087][ T5885] usb 1-1: SerialNumber: syz [ 255.164250][ T5885] usb 1-1: config 0 descriptor?? [ 255.306657][ T3075] usb 3-1: USB disconnect, device number 9 [ 255.377388][ T5885] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 255.400141][ T5885] usb 1-1: USB disconnect, device number 12 [ 255.425788][ T8570] netlink: 128 bytes leftover after parsing attributes in process `syz.5.869'. [ 255.773430][ T8583] ebtables: ebtables: counters copy to user failed while replacing table [ 255.792566][ T8590] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 255.799227][ T8590] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 255.827736][ T8590] vhci_hcd vhci_hcd.0: Device attached [ 256.020124][ T8590] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 256.027090][ T8590] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 256.208452][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.222719][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.306466][ T8590] vhci_hcd vhci_hcd.0: Device attached [ 256.423993][ T8597] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(17) [ 256.430665][ T8597] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 256.598292][ T8597] vhci_hcd vhci_hcd.0: Device attached [ 256.605803][ T8599] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16) [ 256.612466][ T8599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 256.694870][ T8599] vhci_hcd vhci_hcd.0: Device attached [ 256.729250][ T8590] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 256.735923][ T8590] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.783116][ T8590] vhci_hcd vhci_hcd.0: Device attached [ 256.818257][ T8606] vhci_hcd: connection closed [ 256.819867][ T8603] vhci_hcd: connection closed [ 256.825104][ T8598] vhci_hcd: connection closed [ 256.846129][ T6124] vhci_hcd: stop threads [ 256.857205][ T8591] vhci_hcd: connection closed [ 256.857611][ T8595] vhci_hcd: connection closed [ 256.906585][ T6124] vhci_hcd: release socket [ 257.842323][ T9] vhci_hcd: vhci_device speed not set [ 257.851862][ T6124] vhci_hcd: disconnect device [ 257.854548][ T5913] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 257.862537][ T6124] vhci_hcd: stop threads [ 257.874301][ T6124] vhci_hcd: release socket [ 257.924775][ T6124] vhci_hcd: disconnect device [ 257.938810][ T9] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 257.946832][ T8592] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 257.997090][ T6124] vhci_hcd: stop threads [ 258.022043][ T6124] vhci_hcd: release socket [ 258.039028][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 258.050526][ T6124] vhci_hcd: disconnect device [ 258.058664][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.072201][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 258.090673][ T6124] vhci_hcd: stop threads [ 258.097474][ T6124] vhci_hcd: release socket [ 258.103921][ T6124] vhci_hcd: disconnect device [ 258.114222][ T5913] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 258.126327][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.135233][ T6124] vhci_hcd: stop threads [ 258.139910][ T6124] vhci_hcd: release socket [ 258.147446][ T6124] vhci_hcd: disconnect device [ 258.157025][ T5913] usb 2-1: Product: syz [ 258.165686][ T5913] usb 2-1: Manufacturer: syz [ 258.175745][ T5913] usb 2-1: SerialNumber: syz [ 258.195110][ T5913] usb 2-1: config 0 descriptor?? [ 258.810083][ T5913] usb 2-1: USB disconnect, device number 8 [ 260.444212][ T8662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 260.450883][ T8662] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.475719][ T8662] vhci_hcd vhci_hcd.0: Device attached [ 261.127571][ T8670] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 261.134338][ T8670] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.208820][ T8670] vhci_hcd vhci_hcd.0: Device attached [ 261.250924][ T8662] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 261.257599][ T8662] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.275538][ T8670] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 261.282635][ T8670] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.290482][ T5913] vhci_hcd: vhci_device speed not set [ 261.316396][ T8662] vhci_hcd vhci_hcd.0: Device attached [ 261.347548][ T5913] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 261.357268][ T8670] vhci_hcd vhci_hcd.0: Device attached [ 261.360218][ T8686] veth1: entered promiscuous mode [ 261.491445][ T8688] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 261.498112][ T8688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.565593][ T8686] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 261.591565][ T8688] vhci_hcd vhci_hcd.0: Device attached [ 261.681441][ T8689] vhci_hcd: connection closed [ 261.682754][ T6124] vhci_hcd: stop threads [ 261.710838][ T8671] vhci_hcd: connection closed [ 261.712225][ T8666] vhci_hcd: connection reset by peer [ 261.797833][ T8675] vhci_hcd: connection closed [ 261.798758][ T8677] vhci_hcd: connection closed [ 261.815837][ T6124] vhci_hcd: release socket [ 261.908936][ T6124] vhci_hcd: disconnect device [ 261.971430][ T6124] vhci_hcd: stop threads [ 262.012335][ T6124] vhci_hcd: release socket [ 262.065330][ T6124] vhci_hcd: disconnect device [ 262.116003][ T6124] vhci_hcd: stop threads [ 262.132947][ T6124] vhci_hcd: release socket [ 262.141522][ T6124] vhci_hcd: disconnect device [ 262.165542][ T6124] vhci_hcd: stop threads [ 262.169939][ T6124] vhci_hcd: release socket [ 262.174705][ T6124] vhci_hcd: disconnect device [ 262.180074][ T6124] vhci_hcd: stop threads [ 262.184349][ T6124] vhci_hcd: release socket [ 262.189757][ T6124] vhci_hcd: disconnect device [ 263.257607][ T9] vhci_hcd: vhci_device speed not set [ 264.321453][ T5675] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.329945][ T5881] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 264.566774][ T8741] netlink: 200 bytes leftover after parsing attributes in process `syz.4.915'. [ 264.658859][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 264.743681][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 264.743757][ T29] audit: type=1326 audit(1732752001.907:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 264.842049][ T8747] loop5: detected capacity change from 0 to 256 [ 264.858963][ T8747] msdos: Bad value for 'tz' [ 264.881453][ T8747] loop6: detected capacity change from 0 to 7 [ 264.889971][ T8747] buffer_io_error: 18 callbacks suppressed [ 264.890041][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.904464][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.913331][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.922285][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.931482][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.940014][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.948691][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.956897][ T8747] ldm_validate_partition_table(): Disk read failed. [ 264.963941][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.972809][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.981421][ T8747] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.990242][ T8747] Dev loop6: unable to read RDB block 0 [ 264.997306][ T8747] loop6: unable to read partition table [ 265.004105][ T8747] loop6: partition table beyond EOD, truncated [ 265.010672][ T8747] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 265.010672][ T8747] ) failed (rc=-5) [ 265.099707][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.114877][ T5675] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 265.127820][ T8744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 265.128200][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12466, setting to 1024 [ 265.134469][ T8744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 265.147730][ T29] audit: type=1326 audit(1732752001.917:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 265.154996][ T5675] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 265.187000][ T5675] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.200017][ T5675] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 265.209487][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.223540][ T8744] vhci_hcd vhci_hcd.0: Device attached [ 265.272633][ T29] audit: type=1326 audit(1732752001.917:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 265.312599][ T5675] usb 3-1: config 0 descriptor?? [ 265.318587][ T8725] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 265.331795][ T5881] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 265.341927][ T8744] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 265.342889][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.348587][ T8744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 265.365099][ T5881] usb 2-1: Product: syz [ 265.370484][ T5881] usb 2-1: Manufacturer: syz [ 265.375171][ T5881] usb 2-1: SerialNumber: syz [ 265.382588][ T5881] usb 2-1: config 0 descriptor?? [ 265.387597][ T8751] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 265.391575][ T5881] gspca_main: etoms-2.14.0 probing 102c:6151 [ 265.394328][ T8751] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 265.394744][ T29] audit: type=1326 audit(1732752001.917:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 265.400901][ T8748] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 265.436801][ T8748] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 265.444222][ T5885] vhci_hcd: vhci_device speed not set [ 265.450150][ T8744] vhci_hcd vhci_hcd.0: Device attached [ 265.469364][ T29] audit: type=1326 audit(1732752001.917:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 265.477682][ T8748] vhci_hcd vhci_hcd.0: Device attached [ 265.497967][ T8751] vhci_hcd vhci_hcd.0: Device attached [ 265.507943][ T29] audit: type=1326 audit(1732752001.927:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 265.531774][ T5885] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 265.541491][ T29] audit: type=1326 audit(1732752001.927:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 265.701095][ T3075] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 265.744363][ T8754] vhci_hcd: connection closed [ 265.746120][ T8753] vhci_hcd: connection closed [ 265.784156][ T1211] vhci_hcd: stop threads [ 266.135020][ T1211] vhci_hcd: release socket [ 266.357764][ T8762] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 266.364451][ T8762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.367706][ T29] audit: type=1326 audit(1732752001.927:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 266.372980][ T5675] ath6kl: Failed to submit usb control message: -110 [ 266.405036][ T1211] vhci_hcd: disconnect device [ 266.420473][ T1211] vhci_hcd: stop threads [ 266.428077][ T8745] vhci_hcd: connection reset by peer [ 266.430423][ T5881] usb 2-1: USB disconnect, device number 9 [ 266.464919][ T3075] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.479199][ T5913] vhci_hcd: vhci_device speed not set [ 266.500336][ T1211] vhci_hcd: release socket [ 266.563657][ T1211] vhci_hcd: disconnect device [ 266.582999][ T3075] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.615451][ T8763] vhci_hcd: connection closed [ 266.619517][ T8762] vhci_hcd vhci_hcd.0: Device attached [ 266.624523][ T5675] ath6kl: unable to send the bmi data to the device: -110 [ 266.662828][ T1211] vhci_hcd: stop threads [ 266.691319][ T1211] vhci_hcd: release socket [ 266.713388][ T29] audit: type=1326 audit(1732752001.927:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 266.726056][ T5675] ath6kl: Unable to send get target info: -110 [ 266.755961][ T1211] vhci_hcd: disconnect device [ 266.795865][ T3075] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 266.825156][ T1211] vhci_hcd: stop threads [ 266.836972][ T3075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.846342][ T1211] vhci_hcd: release socket [ 266.869798][ T1211] vhci_hcd: disconnect device [ 266.874434][ T8750] vhci_hcd: connection closed [ 266.874908][ T3075] usb 5-1: Product: syz [ 266.888944][ T29] audit: type=1326 audit(1732752001.927:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d3780809 code=0x7ffc0000 [ 266.916473][ T1211] vhci_hcd: stop threads [ 266.921101][ T1211] vhci_hcd: release socket [ 266.921970][ T5675] ath6kl: Failed to init ath6kl core: -110 [ 266.932326][ T3075] usb 5-1: Manufacturer: syz [ 266.937307][ T3075] usb 5-1: SerialNumber: syz [ 266.944337][ T1211] vhci_hcd: disconnect device [ 267.014781][ T3075] usb 5-1: config 0 descriptor?? [ 267.049366][ T5675] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 268.244805][ T5675] usb 3-1: USB disconnect, device number 10 [ 268.261570][ T3075] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 268.272292][ T3075] usb 5-1: USB disconnect, device number 8 [ 271.096031][ T8810] loop1: detected capacity change from 0 to 256 [ 271.103053][ T8810] msdos: Bad value for 'tz' [ 271.112942][ T8810] loop6: detected capacity change from 0 to 7 [ 271.119498][ T8810] buffer_io_error: 4 callbacks suppressed [ 271.119513][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.133340][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.141323][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.149305][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.157227][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.165879][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.174120][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.182193][ T8810] ldm_validate_partition_table(): Disk read failed. [ 271.189652][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.197846][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.205870][ T8810] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.214219][ T8810] Dev loop6: unable to read RDB block 0 [ 271.220346][ T8810] loop6: unable to read partition table [ 271.226330][ T8810] loop6: partition table beyond EOD, truncated [ 271.232705][ T8810] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 271.232705][ T8810] ) failed (rc=-5) [ 271.528636][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 271.528701][ T29] audit: type=1326 audit(1732752008.227:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.563345][ T29] audit: type=1326 audit(1732752008.227:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.586091][ T29] audit: type=1326 audit(1732752008.227:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.609496][ T29] audit: type=1326 audit(1732752008.227:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.634314][ T29] audit: type=1326 audit(1732752008.227:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.656844][ T29] audit: type=1326 audit(1732752008.227:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.679633][ T29] audit: type=1326 audit(1732752008.227:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.702310][ T29] audit: type=1326 audit(1732752008.227:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.725081][ T29] audit: type=1326 audit(1732752008.237:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.747771][ T29] audit: type=1326 audit(1732752008.237:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061580809 code=0x7ffc0000 [ 271.837641][ T5885] vhci_hcd: vhci_device speed not set [ 272.049649][ T8821] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 272.056289][ T8821] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.085708][ T8821] vhci_hcd vhci_hcd.0: Device attached [ 272.109416][ T8827] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 272.116055][ T8827] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.139623][ T8827] vhci_hcd vhci_hcd.0: Device attached [ 272.150521][ T8821] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 272.157158][ T8821] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.165125][ T8821] vhci_hcd vhci_hcd.0: Device attached [ 272.175734][ T8821] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 272.182382][ T8821] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.195930][ T8821] vhci_hcd vhci_hcd.0: Device attached [ 272.203872][ T8821] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 272.210645][ T8821] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 272.211718][ T8821] vhci_hcd vhci_hcd.0: Device attached [ 272.213649][ T8832] vhci_hcd: connection closed [ 272.216343][ T8836] vhci_hcd: connection closed [ 272.216519][ T8830] vhci_hcd: connection closed [ 272.227980][ T35] vhci_hcd: stop threads [ 272.230787][ T8828] vhci_hcd: connection closed [ 272.235097][ T35] vhci_hcd: release socket [ 272.239888][ T8822] vhci_hcd: connection closed [ 272.244793][ T35] vhci_hcd: disconnect device [ 272.267536][ T5913] vhci_hcd: vhci_device speed not set [ 272.269135][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 272.290606][ T35] vhci_hcd: stop threads [ 272.290628][ T35] vhci_hcd: release socket [ 272.290713][ T35] vhci_hcd: disconnect device [ 272.291212][ T35] vhci_hcd: stop threads [ 272.291225][ T35] vhci_hcd: release socket [ 272.291301][ T35] vhci_hcd: disconnect device [ 272.291455][ T35] vhci_hcd: stop threads [ 272.291466][ T35] vhci_hcd: release socket [ 272.291537][ T35] vhci_hcd: disconnect device [ 272.291663][ T35] vhci_hcd: stop threads [ 272.291674][ T35] vhci_hcd: release socket [ 272.291743][ T35] vhci_hcd: disconnect device [ 272.341621][ T5913] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 272.346964][ T5883] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 272.371662][ T5913] usb 35-1: enqueue for inactive port 0 [ 272.439048][ T5884] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 272.447566][ T5913] vhci_hcd: vhci_device speed not set [ 272.449661][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12466, setting to 1024 [ 272.465860][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 272.476087][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.489487][ T5884] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 272.499594][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.507711][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 272.514605][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.528031][ T5884] usb 5-1: config 0 descriptor?? [ 272.533684][ T8817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.543988][ T5883] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 272.554152][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.563814][ T5883] usb 6-1: Product: syz [ 272.569435][ T5883] usb 6-1: Manufacturer: syz [ 272.574208][ T5883] usb 6-1: SerialNumber: syz [ 272.581393][ T5883] usb 6-1: config 0 descriptor?? [ 272.589623][ T5883] gspca_main: etoms-2.14.0 probing 102c:6151 [ 272.667672][ T3075] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 272.828213][ T3075] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.846172][ T3075] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.875612][ T3075] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 272.889301][ T5883] usb 6-1: USB disconnect, device number 8 [ 272.931691][ T3075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.969082][ T3075] usb 1-1: Product: syz [ 272.973352][ T3075] usb 1-1: Manufacturer: syz [ 272.998335][ T3075] usb 1-1: SerialNumber: syz [ 273.790117][ T5884] ath6kl: Failed to submit usb control message: -110 [ 273.797494][ T5884] ath6kl: unable to send the bmi data to the device: -110 [ 273.804651][ T5884] ath6kl: Unable to send get target info: -110 [ 273.812873][ T3075] usb 1-1: config 0 descriptor?? [ 273.846295][ T5884] ath6kl: Failed to init ath6kl core: -110 [ 273.878085][ T5884] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 274.221292][ T3075] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 274.242407][ T3075] usb 1-1: USB disconnect, device number 13 [ 274.456223][ T8861] loop1: detected capacity change from 0 to 256 [ 274.465626][ T8861] msdos: Bad value for 'tz' [ 274.480815][ T8861] loop6: detected capacity change from 0 to 7 [ 274.489893][ T8861] ldm_validate_partition_table(): Disk read failed. [ 274.497747][ T8861] Dev loop6: unable to read RDB block 0 [ 274.504306][ T8861] loop6: unable to read partition table [ 274.510775][ T8861] loop6: partition table beyond EOD, truncated [ 274.517380][ T8861] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 274.517380][ T8861] ) failed (rc=-5) [ 275.083817][ T5913] usb 5-1: USB disconnect, device number 9 [ 275.330350][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 277.184850][ T8890] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 277.191447][ T8890] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 277.199394][ T8903] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 277.206097][ T8903] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 277.214208][ T8890] vhci_hcd vhci_hcd.0: Device attached [ 277.215252][ T8903] vhci_hcd vhci_hcd.0: Device attached [ 277.472467][ T8909] loop4: detected capacity change from 0 to 256 [ 277.482047][ T8909] msdos: Bad value for 'tz' [ 277.498329][ T8909] loop6: detected capacity change from 0 to 7 [ 277.506033][ T8909] buffer_io_error: 18 callbacks suppressed [ 277.506070][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.521354][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.529653][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.538143][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.546546][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.555072][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.563397][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.571527][ T8909] ldm_validate_partition_table(): Disk read failed. [ 277.578497][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.586789][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.595100][ T8909] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.603567][ T8909] Dev loop6: unable to read RDB block 0 [ 277.610198][ T8909] loop6: unable to read partition table [ 277.617035][ T8909] loop6: partition table beyond EOD, truncated [ 277.624165][ T8909] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 277.624165][ T8909] ) failed (rc=-5) [ 277.652748][ T5881] vhci_hcd: vhci_device speed not set [ 277.700542][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 277.700588][ T29] audit: type=1326 audit(1732752014.577:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 277.745080][ T29] audit: type=1326 audit(1732752014.577:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 277.767830][ T29] audit: type=1326 audit(1732752014.577:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 277.790118][ T29] audit: type=1326 audit(1732752014.577:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 277.812702][ T29] audit: type=1326 audit(1732752014.577:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 277.924923][ T29] audit: type=1326 audit(1732752014.577:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 277.947326][ T29] audit: type=1326 audit(1732752014.577:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 277.969884][ T29] audit: type=1326 audit(1732752014.577:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 277.992214][ T29] audit: type=1326 audit(1732752014.577:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 278.015155][ T29] audit: type=1326 audit(1732752014.577:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b580809 code=0x7ffc0000 [ 278.064863][ T8903] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 278.071523][ T8903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.079003][ T8897] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 278.085631][ T8897] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 278.093607][ T8897] vhci_hcd vhci_hcd.0: Device attached [ 278.094997][ T8903] vhci_hcd vhci_hcd.0: Device attached [ 278.116936][ T8890] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 278.123601][ T8890] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 278.134343][ T8890] vhci_hcd vhci_hcd.0: Device attached [ 278.141113][ T5881] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 278.165015][ T8899] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 278.180004][ T8918] vhci_hcd: connection closed [ 278.183327][ T8904] vhci_hcd: connection closed [ 278.183362][ T8912] vhci_hcd: connection closed [ 278.188388][ T8900] vhci_hcd: connection closed [ 278.227638][ T2962] vhci_hcd: stop threads [ 278.240115][ T2962] vhci_hcd: release socket [ 278.252137][ T2962] vhci_hcd: disconnect device [ 278.258304][ T2962] vhci_hcd: stop threads [ 278.263006][ T2962] vhci_hcd: release socket [ 278.273898][ T2962] vhci_hcd: disconnect device [ 278.283158][ T2962] vhci_hcd: stop threads [ 278.293653][ T2962] vhci_hcd: release socket [ 278.300990][ T2962] vhci_hcd: disconnect device [ 278.306332][ T2962] vhci_hcd: stop threads [ 278.319657][ T2962] vhci_hcd: release socket [ 278.324355][ T2962] vhci_hcd: disconnect device [ 278.336123][ T2962] vhci_hcd: stop threads [ 278.344545][ T2962] vhci_hcd: release socket [ 278.353861][ T2962] vhci_hcd: disconnect device [ 278.367653][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 279.327483][ T8] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 279.360643][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12466, setting to 1024 [ 279.372897][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 279.390574][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.403737][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 279.412867][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.381105][ T8] usb 3-1: config 0 descriptor?? [ 280.387992][ T8921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 280.532186][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 281.654002][ T8] ath6kl: Failed to submit usb control message: -110 [ 281.661008][ T8] ath6kl: unable to send the bmi data to the device: -110 [ 281.668409][ T8] ath6kl: Unable to send get target info: -110 [ 281.676156][ T8] ath6kl: Failed to init ath6kl core: -110 [ 281.683076][ T8] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 282.486035][ T8964] netlink: 200 bytes leftover after parsing attributes in process `syz.1.970'. [ 282.895566][ T8972] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 282.902236][ T8972] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.175094][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.972'. [ 283.184323][ T8979] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 283.655962][ T8977] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 283.662644][ T8977] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.671796][ T8977] vhci_hcd vhci_hcd.0: Device attached [ 283.679916][ T8972] vhci_hcd vhci_hcd.0: Device attached [ 283.687590][ T5675] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 283.697614][ T5881] vhci_hcd: vhci_device speed not set [ 283.740115][ T8977] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 283.747122][ T8977] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.756784][ T8977] vhci_hcd vhci_hcd.0: Device attached [ 283.776024][ T8972] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 283.782682][ T8972] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.793611][ T8972] vhci_hcd vhci_hcd.0: Device attached [ 283.799896][ T8977] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15) [ 283.806544][ T8977] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.815204][ T8977] vhci_hcd vhci_hcd.0: Device attached [ 283.822267][ T8992] vhci_hcd: connection closed [ 283.822369][ T8988] vhci_hcd: connection closed [ 283.822450][ T8984] vhci_hcd: connection closed [ 283.834851][ T8976] vhci_hcd: connection closed [ 283.834873][ T1211] vhci_hcd: stop threads [ 283.840325][ T8982] vhci_hcd: connection closed [ 283.857493][ T1211] vhci_hcd: release socket [ 283.857570][ T5913] vhci_hcd: vhci_device speed not set [ 283.875522][ T1211] vhci_hcd: disconnect device [ 283.883251][ T1211] vhci_hcd: stop threads [ 283.887829][ T1211] vhci_hcd: release socket [ 283.893872][ T1211] vhci_hcd: disconnect device [ 283.903261][ T5675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 283.906382][ T1211] vhci_hcd: stop threads [ 283.915539][ T5675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 283.918996][ T1211] vhci_hcd: release socket [ 283.930202][ T5913] usb 41-2: new full-speed USB device number 2 using vhci_hcd [ 283.934503][ T1211] vhci_hcd: disconnect device [ 283.953226][ T8983] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 283.953414][ T1211] vhci_hcd: stop threads [ 283.959579][ T5675] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.963929][ T1211] vhci_hcd: release socket [ 283.963972][ T1211] vhci_hcd: disconnect device [ 283.986893][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 283.987936][ T1211] vhci_hcd: stop threads [ 283.995343][ T5675] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.998924][ T1211] vhci_hcd: release socket [ 284.008265][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.025240][ T5675] usb 6-1: config 0 descriptor?? [ 284.031574][ T8967] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 284.043473][ T1211] vhci_hcd: disconnect device [ 284.214449][ T5882] usb 3-1: USB disconnect, device number 11 [ 284.230813][ T8] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 284.314245][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12466, setting to 1024 [ 284.336632][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 284.346949][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 285.048844][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 285.058020][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.081023][ T5675] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 285.091941][ T5675] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 285.101816][ T8] usb 1-1: config 0 descriptor?? [ 285.111362][ T8986] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 285.124263][ T5675] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 286.290314][ T8] ath6kl: Failed to submit usb control message: -110 [ 286.313061][ T8] ath6kl: unable to send the bmi data to the device: -110 [ 287.006364][ T8] ath6kl: Unable to send get target info: -110 [ 287.014015][ T8] ath6kl: Failed to init ath6kl core: -110 [ 287.020304][ T8] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 287.214910][ T8] usb 6-1: USB disconnect, device number 9 [ 288.167499][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 288.799309][ T8] usb 1-1: USB disconnect, device number 14 [ 289.527230][ T5913] vhci_hcd: vhci_device speed not set [ 290.033088][ T9046] binder: BINDER_SET_CONTEXT_MGR already set [ 290.039630][ T9046] binder: 9045:9046 ioctl 4018620d 20000100 returned -16 [ 290.426455][ T9049] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 290.433128][ T9049] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.467665][ T9046] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 290.474243][ T9046] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.539277][ T9049] vhci_hcd vhci_hcd.0: Device attached [ 291.308570][ T9046] vhci_hcd vhci_hcd.0: Device attached [ 291.316250][ T9058] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 291.322923][ T9058] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 291.508219][ T5882] vhci_hcd: vhci_device speed not set [ 292.193490][ T5882] usb 37-2: new full-speed USB device number 2 using vhci_hcd [ 292.349787][ T9058] vhci_hcd vhci_hcd.0: Device attached [ 292.386372][ T9046] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 292.393045][ T9046] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 292.458951][ T9046] vhci_hcd vhci_hcd.0: Device attached [ 292.463335][ T9049] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 292.471090][ T9049] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 292.478952][ T9049] vhci_hcd vhci_hcd.0: Device attached [ 293.309761][ T9061] vhci_hcd: connection closed [ 293.310123][ T6160] vhci_hcd: stop threads [ 293.328110][ T9071] vhci_hcd: connection closed [ 293.332677][ T9050] vhci_hcd: connection reset by peer [ 293.343207][ T9067] vhci_hcd: connection closed [ 293.344660][ T9048] vhci_hcd: connection closed [ 293.351038][ T6160] vhci_hcd: release socket [ 293.361336][ T6160] vhci_hcd: disconnect device [ 293.366226][ T6160] vhci_hcd: stop threads [ 293.371322][ T6160] vhci_hcd: release socket [ 293.375894][ T6160] vhci_hcd: disconnect device [ 293.507780][ T9088] devpts: called with bogus options [ 294.008018][ T6160] vhci_hcd: stop threads [ 294.012330][ T6160] vhci_hcd: release socket [ 294.018834][ T6160] vhci_hcd: disconnect device [ 294.064231][ T6160] vhci_hcd: stop threads [ 294.069105][ T6160] vhci_hcd: release socket [ 294.073975][ T6160] vhci_hcd: disconnect device [ 294.081146][ T6160] vhci_hcd: stop threads [ 294.085718][ T6160] vhci_hcd: release socket [ 294.273575][ T6160] vhci_hcd: disconnect device [ 294.971338][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 295.682364][ T5883] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 295.689921][ T5883] hid-generic 0000:0000:0000.000D: unknown main item tag 0x1 [ 295.887992][ T5883] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 297.534779][ T5882] vhci_hcd: vhci_device speed not set [ 297.546009][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1004'. [ 298.728621][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1004'. [ 298.750092][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1004'. [ 300.491874][ T5913] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 300.876888][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 301.225909][ T5913] usb 3-1: device descriptor read/all, error -71 [ 302.427353][ T5885] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 302.435740][ T5885] hid-generic 0000:0000:0000.000E: unknown main item tag 0x1 [ 302.523236][ T5885] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 304.614058][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 304.698094][ T5885] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 304.898321][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 305.027299][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.232638][ T5885] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 305.279764][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.357483][ T5885] usb 1-1: Product: syz [ 305.368512][ T5885] usb 1-1: Manufacturer: syz [ 305.375535][ T5885] usb 1-1: SerialNumber: syz [ 305.382943][ T5885] usb 1-1: config 0 descriptor?? [ 305.393244][ T5885] gspca_main: etoms-2.14.0 probing 102c:6151 [ 305.635623][ T5885] usb 1-1: USB disconnect, device number 15 [ 306.594146][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1040'. [ 306.603935][ T9242] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 306.764762][ T9243] ax25_connect(): syz.0.1041 uses autobind, please contact jreuter@yaina.de [ 307.765461][ T9255] bond0: entered promiscuous mode [ 307.782047][ T9255] bond_slave_0: entered promiscuous mode [ 307.796565][ T9255] bond_slave_1: entered promiscuous mode [ 307.802734][ T9255] macvlan2: entered promiscuous mode [ 308.061005][ T9272] ax25_connect(): syz.0.1053 uses autobind, please contact jreuter@yaina.de [ 308.122834][ T9275] overlayfs: missing 'lowerdir' [ 308.471290][ T9280] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 308.908914][ T9301] overlayfs: missing 'lowerdir' [ 309.047064][ T9310] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 309.063113][ T9309] ax25_connect(): syz.1.1070 uses autobind, please contact jreuter@yaina.de [ 309.521897][ T5885] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 309.927562][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 309.949492][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.979239][ T5885] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 310.007553][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.015619][ T5885] usb 2-1: Product: syz [ 310.020882][ T5885] usb 2-1: Manufacturer: syz [ 310.025630][ T5885] usb 2-1: SerialNumber: syz [ 310.043928][ T5885] usb 2-1: config 0 descriptor?? [ 310.057966][ T5885] gspca_main: etoms-2.14.0 probing 102c:6151 [ 310.308863][ T5885] usb 2-1: USB disconnect, device number 10 [ 310.377190][ T9348] team_slave_0: entered promiscuous mode [ 310.383010][ T9348] team_slave_1: entered promiscuous mode [ 310.397978][ T9348] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 310.406702][ T9348] macvlan3: entered promiscuous mode [ 310.420998][ T9348] team0: entered promiscuous mode [ 310.430772][ T9348] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 311.489378][ T5885] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 311.648909][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 311.660810][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 311.671951][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.683588][ T5885] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 311.692819][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.701090][ T5885] usb 6-1: Product: syz [ 311.705327][ T5885] usb 6-1: Manufacturer: syz [ 311.711990][ T5885] usb 6-1: SerialNumber: syz [ 311.719656][ T5885] usb 6-1: config 0 descriptor?? [ 311.747640][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 311.914794][ T8] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 311.924954][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.942872][ T5885] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 311.954412][ T8] usb 1-1: config 0 descriptor?? [ 311.968131][ T5885] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 311.981901][ T5885] usb 6-1: USB disconnect, device number 10 [ 312.009580][ T9384] team_slave_0: entered promiscuous mode [ 312.015438][ T9384] team_slave_1: entered promiscuous mode [ 312.022637][ T9384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.031120][ T9384] macvlan2: entered promiscuous mode [ 312.036481][ T9384] team0: entered promiscuous mode [ 312.057879][ T9384] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 312.373478][ T8] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 312.567960][ T5913] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 312.627428][ T8] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 312.643764][ T8] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 312.783772][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 312.796683][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.815215][ T5913] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 312.825596][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.838262][ T8] usb 1-1: USB disconnect, device number 16 [ 312.853412][ T5913] usb 2-1: Product: syz [ 312.979769][ T5913] usb 2-1: Manufacturer: syz [ 312.984796][ T5913] usb 2-1: SerialNumber: syz [ 313.849647][ T5913] usb 2-1: config 0 descriptor?? [ 313.875554][ T5913] gspca_main: etoms-2.14.0 probing 102c:6151 [ 314.148817][ T5913] usb 2-1: USB disconnect, device number 11 [ 314.670763][ T9424] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 315.045463][ T9438] devpts: called with bogus options [ 317.685401][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.691916][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.262261][ T9460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1119'. [ 318.271944][ T9460] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 320.595166][ T9479] devpts: called with bogus options [ 320.934192][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.943926][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.956781][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.974325][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.982076][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 320.997956][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.065444][ T9487] lo speed is unknown, defaulting to 1000 [ 321.356374][ T9487] chnl_net:caif_netlink_parms(): no params data found [ 321.589226][ T9505] xt_socket: unknown flags 0x8 [ 322.430223][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1133'. [ 322.618797][ T9513] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 323.227881][ T5846] Bluetooth: hci2: command tx timeout [ 323.515551][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.734802][ T9528] devpts: called with bogus options [ 324.547067][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.557288][ T9487] bridge_slave_0: entered allmulticast mode [ 324.563979][ T9487] bridge_slave_0: entered promiscuous mode [ 324.574546][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.665470][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.672943][ T9487] bridge_slave_1: entered allmulticast mode [ 324.681211][ T9487] bridge_slave_1: entered promiscuous mode [ 324.804175][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.849449][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.062978][ T9487] team0: Port device team_slave_0 added [ 325.076511][ T9487] team0: Port device team_slave_1 added [ 325.248963][ T5846] Bluetooth: hci2: command tx timeout [ 325.494907][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.501970][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.551883][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.584696][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.623897][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.650412][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.856615][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1145'. [ 326.702148][ T9553] xt_socket: unknown flags 0x8 [ 327.318421][ T9551] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 327.358468][ T9487] hsr_slave_0: entered promiscuous mode [ 327.364737][ T5846] Bluetooth: hci2: command tx timeout [ 327.392063][ T9487] hsr_slave_1: entered promiscuous mode [ 327.551130][ T9487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.577633][ T9487] Cannot create hsr debugfs directory [ 327.655989][ T9560] fuse: Unknown parameter 'group_id00000000000000000000' [ 327.880844][ T9566] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.1149'. [ 327.939033][ T9566] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.1149'. [ 328.028163][ T9567] loop0: detected capacity change from 0 to 128 [ 328.111047][ T9566] xt_hashlimit: max too large, truncated to 1048576 [ 328.406546][ T9566] Cannot find set identified by id 0 to match [ 328.852635][ T9487] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.903199][ T9487] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.161026][ T9487] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.183634][ T9487] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.724234][ T5846] Bluetooth: hci2: command tx timeout [ 329.837169][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 329.846142][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 329.855079][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 331.204241][ T9487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.231717][ T9487] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.262481][ T9487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.273191][ T9487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.301703][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.308919][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.317976][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.325110][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.509630][ T9603] fuse: Bad value for 'user_id' [ 331.514626][ T9603] fuse: Bad value for 'user_id' [ 331.521222][ T9487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.105780][ T9487] veth0_vlan: entered promiscuous mode [ 333.331906][ T9487] veth1_vlan: entered promiscuous mode [ 333.348329][ T9487] veth0_macvtap: entered promiscuous mode [ 333.356412][ T9487] veth1_macvtap: entered promiscuous mode [ 333.368873][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.379447][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.389283][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.399739][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.409572][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.420306][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.430596][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.441061][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.450980][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.461521][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.472100][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.481085][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.491726][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.501688][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.512163][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.522547][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.533566][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.543969][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.554598][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.564626][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.575109][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.588349][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.609067][ T9487] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.626270][ T9487] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.659591][ T9487] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.662146][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 333.677515][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 333.686440][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 333.723730][ T9487] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.958277][ T9644] xt_socket: unknown flags 0x8 [ 336.825496][ T9641] Invalid ELF header magic: != ELF [ 336.857121][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.865257][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.038975][ T9331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.046815][ T9331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.202128][ T9652] team_slave_0: entered promiscuous mode [ 337.207875][ T9652] team_slave_1: entered promiscuous mode [ 337.234785][ T9652] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.299573][ T9652] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 338.316118][ T9667] overlayfs: failed to resolve './file1': -2 [ 338.388054][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.401340][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.409901][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.422384][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.430006][ T5832] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.437893][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.470645][ T9665] lo speed is unknown, defaulting to 1000 [ 340.135960][ T9684] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 340.438869][ T9665] chnl_net:caif_netlink_parms(): no params data found [ 340.520816][ T5832] Bluetooth: hci6: command tx timeout [ 340.801942][ T9712] overlayfs: failed to resolve './file1': -2 [ 341.593991][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.202909][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.210493][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.219051][ T9665] bridge_slave_0: entered allmulticast mode [ 342.227818][ T9665] bridge_slave_0: entered promiscuous mode [ 342.258587][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.302113][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.322102][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.385770][ T9665] bridge_slave_1: entered allmulticast mode [ 342.399417][ T9665] bridge_slave_1: entered promiscuous mode [ 342.536288][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.597619][ T5832] Bluetooth: hci6: command tx timeout [ 342.763443][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.793533][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.455166][ T9747] overlayfs: failed to resolve './file1': -2 [ 343.740200][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.931068][ T9665] team0: Port device team_slave_0 added [ 343.951444][ T9665] team0: Port device team_slave_1 added [ 344.027694][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.044232][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.080990][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.099035][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.106142][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.127472][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 344.147420][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.220471][ T9665] hsr_slave_0: entered promiscuous mode [ 344.227770][ T9665] hsr_slave_1: entered promiscuous mode [ 344.234399][ T9665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.242644][ T9665] Cannot create hsr debugfs directory [ 344.249684][ T35] bridge_slave_1: left allmulticast mode [ 344.255356][ T35] bridge_slave_1: left promiscuous mode [ 344.262052][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.275121][ T35] bridge_slave_0: left allmulticast mode [ 344.282181][ T35] bridge_slave_0: left promiscuous mode [ 344.297890][ T5881] usb 7-1: device descriptor read/64, error -71 [ 344.304551][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.433047][ T9763] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.1203'. [ 344.467444][ T9763] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.1203'. [ 344.493104][ T9763] loop0: detected capacity change from 0 to 128 [ 344.538133][ T5881] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 344.562819][ T9763] xt_hashlimit: max too large, truncated to 1048576 [ 344.571058][ T9763] Cannot find set identified by id 0 to match [ 344.677918][ T5832] Bluetooth: hci6: command tx timeout [ 344.744480][ T5881] usb 7-1: device descriptor read/64, error -71 [ 344.886491][ T9769] overlayfs: failed to resolve './file0': -2 [ 344.934093][ T9770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1204'. [ 345.171595][ T5881] usb usb7-port1: attempt power cycle [ 345.627456][ T5881] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 345.648066][ T5881] usb 7-1: device descriptor read/8, error -71 [ 345.971062][ T5881] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 345.998254][ T5881] usb 7-1: device descriptor read/8, error -71 [ 346.130888][ T5881] usb usb7-port1: unable to enumerate USB device [ 346.320291][ T5881] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 346.367651][ T5881] hid-generic 0000:0000:0000.000F: unknown main item tag 0x1 [ 346.415060][ T5881] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 346.826124][ T5832] Bluetooth: hci6: command tx timeout [ 346.986411][ T9789] overlayfs: failed to resolve './file1': -2 [ 347.015741][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.035026][ T35] bond_slave_0: left promiscuous mode [ 347.048009][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.065484][ T35] bond_slave_1: left promiscuous mode [ 347.076163][ T35] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 347.094701][ T35] macvlan2: left promiscuous mode [ 347.100150][ T35] team0: left promiscuous mode [ 347.114384][ T35] team_slave_0: left promiscuous mode [ 347.120269][ T35] team_slave_1: left promiscuous mode [ 347.135137][ T35] bond0 (unregistering): Released all slaves [ 347.162183][ T9770] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 347.391251][ T5883] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 347.443692][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 347.478548][ T9665] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 347.500310][ T9665] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 347.531245][ T9665] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 347.546509][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.560150][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.569863][ T5883] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 347.581846][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.592346][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.601290][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.611013][ T5883] usb 1-1: config 0 descriptor?? [ 347.635620][ T35] veth1_macvtap: left promiscuous mode [ 347.641673][ T35] veth0_macvtap: left promiscuous mode [ 347.647979][ T35] veth1_vlan: left promiscuous mode [ 347.653813][ T35] veth0_vlan: left promiscuous mode [ 348.030885][ T5883] gs_usb 1-1:0.0: Configuring for 17 interfaces [ 348.037220][ T5883] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 348.083689][ T5883] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 350.640405][ T5883] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 350.840377][ T5883] hid-generic 0000:0000:0000.0010: unknown main item tag 0x1 [ 350.954798][ T5883] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 351.092698][ T5883] usb 1-1: USB disconnect, device number 17 [ 351.135267][ T9822] overlayfs: failed to resolve './file1': -2 [ 351.345686][ T35] team0 (unregistering): Port device team_slave_1 removed [ 351.428307][ T35] team0 (unregistering): Port device team_slave_0 removed [ 351.597438][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 351.764004][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 351.781355][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.804179][ T8] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 351.815719][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.887460][ T8] usb 1-1: Product: syz [ 351.901717][ T8] usb 1-1: Manufacturer: syz [ 351.906378][ T8] usb 1-1: SerialNumber: syz [ 351.962576][ T8] usb 1-1: config 0 descriptor?? [ 352.167124][ T8] gspca_main: etoms-2.14.0 probing 102c:6151 [ 353.015156][ T9665] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 353.029507][ T9803] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 353.123344][ T5913] usb 1-1: USB disconnect, device number 18 [ 353.154008][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.168178][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.196244][ T9665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.207380][ T9665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.257125][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.264343][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.287616][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.294808][ T6160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.254958][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.035050][ T9868] overlayfs: failed to resolve './file0': -2 [ 355.338930][ T5882] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 355.515120][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 355.526650][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 355.531791][ T9665] veth0_vlan: entered promiscuous mode [ 355.548224][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.574554][ T5882] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.589743][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.619113][ T9665] veth1_vlan: entered promiscuous mode [ 355.629274][ T5882] usb 7-1: config 0 descriptor?? [ 355.903715][ T9852] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 355.957130][ T9665] veth0_macvtap: entered promiscuous mode [ 355.967080][ T9665] veth1_macvtap: entered promiscuous mode [ 355.992610][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.003797][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.015400][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.032810][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.044144][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.064356][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.084578][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.135215][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.295421][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.306693][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.323679][ T5882] usbhid 7-1:0.0: can't add hid device: -71 [ 356.597603][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.046117][ T5882] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 357.087419][ T5882] usb 7-1: USB disconnect, device number 6 [ 357.166879][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.195244][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.214326][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.256520][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.280280][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.296425][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.339196][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.355998][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.366266][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.377792][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.186304][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.196969][ T9665] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.207671][ T9665] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.216559][ T9665] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.255345][ T9665] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.303239][ T9899] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 359.193247][ T9915] overlayfs: failed to resolve './file0': -2 [ 359.851996][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.861325][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.139938][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.177345][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.267944][ T2135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.297501][ T2135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.231012][ T9967] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 363.258123][ T9968] overlayfs: failed to resolve './file0': -2 [ 369.100514][T10026] ubi0: attaching mtd0 [ 369.126326][T10026] ubi0: scanning is finished [ 369.131336][T10026] ubi0: empty MTD device detected [ 369.853858][T10033] ax25_connect(): syz.0.1274 uses autobind, please contact jreuter@yaina.de [ 372.202354][T10026] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 377.146903][T10072] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1288'. [ 379.031460][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.031553][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.164272][T10110] vivid-004: disconnect [ 382.189919][T10110] Bluetooth: MGMT ver 1.23 [ 383.237415][T10105] vivid-004: reconnect [ 388.969740][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.978307][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.547334][ T5884] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 389.719237][ T5884] usb 6-1: device descriptor read/64, error -71 [ 390.047387][ T5884] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 390.197442][ T5884] usb 6-1: device descriptor read/64, error -71 [ 391.047061][T10202] lo speed is unknown, defaulting to 1000 [ 391.077752][ T5884] usb usb6-port1: attempt power cycle [ 391.375572][T10202] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1324'. [ 391.457574][ T5884] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 391.500888][ T5884] usb 6-1: device descriptor read/8, error -71 [ 391.767656][ T5884] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 391.880868][ T5884] usb 6-1: device descriptor read/8, error -71 [ 391.997608][ T5884] usb usb6-port1: unable to enumerate USB device [ 392.490785][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 392.522169][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 392.547848][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 393.569505][T10224] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 395.687553][ T5881] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 395.864282][ T5881] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 395.874169][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.218404][T10249] lo speed is unknown, defaulting to 1000 [ 396.255373][ T5881] usb 6-1: config 0 descriptor?? [ 396.325992][T10249] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1337'. [ 397.305536][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 397.751847][ T5881] ath6kl: Failed to submit usb control message: -110 [ 397.758784][ T5881] ath6kl: unable to send the bmi data to the device: -110 [ 397.762435][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1334'. [ 397.766051][ T5881] ath6kl: Unable to send get target info: -110 [ 397.853890][T10244] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1334'. [ 397.871856][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1334'. [ 397.881320][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1334'. [ 397.915304][ T5881] ath6kl: Failed to init ath6kl core: -110 [ 397.927542][ T5881] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 398.261871][ T5882] usb 6-1: USB disconnect, device number 15 [ 398.323767][T10258] ptrace attach of "./syz-executor exec"[10266] was attempted by "\x5c /dev/vhost-vsock [ 399.619516][T10285] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.718284][T10285] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.159090][ T5846] Bluetooth: hci6: command tx timeout [ 401.313683][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1348'. [ 402.028374][T10307] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 408.208566][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 408.211214][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 415.258884][T10406] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 415.595933][T10412] syz.4.1385 uses obsolete (PF_INET,SOCK_PACKET) [ 415.637747][ T5881] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 417.099212][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 417.446520][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 418.661224][T10431] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 418.661224][T10431] The task syz.4.1390 (10431) triggered the difference, watch for misbehavior. [ 418.700476][ T5881] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 418.721009][ T5881] usb 6-1: can't read configurations, error -71 [ 418.863643][T10433] netlink: 1216 bytes leftover after parsing attributes in process `syz.7.1391'. [ 418.918297][T10434] loop7: detected capacity change from 0 to 128 [ 418.942765][T10433] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.1391'. [ 419.011218][T10437] xt_hashlimit: max too large, truncated to 1048576 [ 419.253938][T10437] Cannot find set identified by id 0 to match [ 419.775635][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.791430][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.801915][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.817071][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.826271][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 419.835467][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.866017][T10445] lo speed is unknown, defaulting to 1000 [ 419.929192][T10451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.424318][T10445] chnl_net:caif_netlink_parms(): no params data found [ 421.558842][ T5846] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 421.958911][ T5846] Bluetooth: hci4: command tx timeout [ 423.639200][T10445] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.129419][T10489] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 424.388892][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.396212][T10445] bridge_slave_0: entered allmulticast mode [ 424.405372][T10445] bridge_slave_0: entered promiscuous mode [ 424.413377][T10445] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.431102][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.440707][T10445] bridge_slave_1: entered allmulticast mode [ 424.454217][T10445] bridge_slave_1: entered promiscuous mode [ 424.518034][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 424.690816][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1405'. [ 424.716585][ T5846] Bluetooth: hci4: command tx timeout [ 424.775568][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 424.792949][T10445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.805160][T10445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.824225][T10498] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.1406'. [ 424.836197][T10498] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.1406'. [ 424.839043][T10496] team_slave_0: entered promiscuous mode [ 424.851095][T10496] team_slave_1: entered promiscuous mode [ 424.862111][T10496] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.040587][T10496] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 425.053717][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.269522][T10500] loop0: detected capacity change from 0 to 128 [ 425.297428][ T9] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 425.306549][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.317569][ T9] usb 5-1: Product: syz [ 425.321797][ T9] usb 5-1: Manufacturer: syz [ 425.327168][ T9] usb 5-1: SerialNumber: syz [ 425.334032][ T9] usb 5-1: config 0 descriptor?? [ 425.341188][T10498] xt_hashlimit: max too large, truncated to 1048576 [ 425.342006][ T9] gspca_main: etoms-2.14.0 probing 102c:6151 [ 425.368297][T10498] Cannot find set identified by id 0 to match [ 425.968985][ T2135] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.316723][T10445] team0: Port device team_slave_0 added [ 426.325512][T10445] team0: Port device team_slave_1 added [ 426.758606][ T5832] Bluetooth: hci4: command tx timeout [ 427.051409][ T2135] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.070459][T10509] lo speed is unknown, defaulting to 1000 [ 427.134351][ T5882] usb 5-1: USB disconnect, device number 10 [ 427.313049][ T2135] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.417732][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.425500][T10511] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1410'. [ 427.963879][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.036539][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.091818][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.117014][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.201768][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.321674][ T2135] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.366557][T10535] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 428.617902][T10445] hsr_slave_0: entered promiscuous mode [ 428.634874][T10445] hsr_slave_1: entered promiscuous mode [ 428.654102][T10445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.674447][T10445] Cannot create hsr debugfs directory [ 428.845802][ T5832] Bluetooth: hci4: command 0x0419 tx timeout [ 429.009856][ T2135] bridge_slave_1: left allmulticast mode [ 429.077700][ T2135] bridge_slave_1: left promiscuous mode [ 429.090377][ T2135] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.115643][ T2135] bridge_slave_0: left allmulticast mode [ 429.125805][ T2135] bridge_slave_0: left promiscuous mode [ 429.135682][ T2135] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.068267][T10551] devpts: called with bogus options [ 430.917517][ T5846] Bluetooth: hci4: command 0x0419 tx timeout [ 431.194861][T10561] ptrace attach of "./syz-executor exec"[10564] was attempted by "\x5c /dev/vhost-vsock [ 431.705687][ T2135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.844542][ T2135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.938111][ T2135] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 431.984722][ T2135] team_slave_0: left promiscuous mode [ 431.990587][ T2135] team_slave_1: left promiscuous mode [ 432.247415][ T2135] bond0 (unregistering): Released all slaves [ 433.123372][T10574] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 434.060377][T10445] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 434.816178][T10445] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 434.961128][T10445] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 435.039469][T10445] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 435.250826][T10445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.269398][T10445] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.288976][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.296097][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.541498][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.548728][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.079033][T10445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 436.089768][T10445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.552305][ T2135] hsr_slave_0: left promiscuous mode [ 436.610812][ T2135] hsr_slave_1: left promiscuous mode [ 436.767770][ T2135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.777918][ T2135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.802015][ T2135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.836775][ T2135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.945548][ T2135] veth1_macvtap: left promiscuous mode [ 437.437507][ T2135] veth0_macvtap: left promiscuous mode [ 437.453657][ T2135] veth1_vlan: left promiscuous mode [ 437.463853][ T2135] veth0_vlan: left promiscuous mode [ 437.541739][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 437.555360][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x1 [ 437.590048][ T8] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 439.992918][ T2135] team0 (unregistering): Port device team_slave_1 removed [ 440.075037][ T2135] team0 (unregistering): Port device team_slave_0 removed [ 440.549995][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.556587][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.773657][ T3075] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 442.794351][ T3075] hid-generic 0000:0000:0000.0012: unknown main item tag 0x1 [ 442.842149][T10445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.868386][ T3075] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 444.263312][T10445] veth0_vlan: entered promiscuous mode [ 444.286716][T10445] veth1_vlan: entered promiscuous mode [ 444.478373][T10445] veth0_macvtap: entered promiscuous mode [ 444.494776][T10445] veth1_macvtap: entered promiscuous mode [ 444.608875][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.623714][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.635823][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.647672][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.658303][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.669300][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.679463][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.690054][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.700519][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.711171][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.730229][T10445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.148425][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.174418][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.184329][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.194786][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.204663][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.215137][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.227403][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.246678][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.256822][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.267642][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.279659][T10445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.289787][T10445] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.298626][T10445] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.307406][T10445] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.316130][T10445] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.910469][T10689] netlink: 'syz.5.1456': attribute type 32 has an invalid length. [ 446.202652][ T9331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.219764][ T9331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.904427][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.933844][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.493532][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 448.880130][ T25] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 448.908620][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.279697][ T25] usb 1-1: config 0 descriptor?? [ 450.198132][T10728] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1467'. [ 450.221023][ T25] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 450.228121][ T25] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 451.505140][ T5882] usb 1-1: USB disconnect, device number 19 [ 451.678220][T10750] netlink: 1216 bytes leftover after parsing attributes in process `syz.7.1475'. [ 451.730768][T10750] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.1475'. [ 451.796546][T10753] loop7: detected capacity change from 0 to 128 [ 451.862565][T10750] xt_hashlimit: max too large, truncated to 1048576 [ 451.890985][T10750] Cannot find set identified by id 0 to match [ 451.987361][T10759] lo speed is unknown, defaulting to 1000 [ 452.105283][T10762] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1478'. [ 455.933478][ T5881] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 456.309201][ T5881] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 456.321907][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.353672][ T5881] usb 1-1: config 0 descriptor?? [ 456.727431][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 456.904676][ T5884] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 456.951722][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12466, setting to 1024 [ 456.981907][ T5884] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 457.005014][ T5881] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 457.012426][ T5881] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 457.034700][ T5884] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 457.108758][ T5884] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 457.134723][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.165892][ T5884] usb 8-1: config 0 descriptor?? [ 457.179594][T10806] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 458.210470][ T5884] ath6kl: Failed to submit usb control message: -110 [ 458.230439][ T5884] ath6kl: unable to send the bmi data to the device: -110 [ 458.254007][ T5884] ath6kl: Unable to send get target info: -110 [ 458.599429][ T8] usb 1-1: USB disconnect, device number 20 [ 458.656740][ T5884] ath6kl: Failed to init ath6kl core: -110 [ 458.663511][ T5884] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 460.713889][ T5912] usb 8-1: USB disconnect, device number 2 [ 462.257386][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 462.436067][ T8] usb 9-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 462.447484][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.458281][ T8] usb 9-1: config 0 descriptor?? [ 463.031141][ T8] gs_usb 9-1:0.0: Couldn't get device config: (err=-32) [ 463.038232][ T8] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -32 [ 463.077380][ T5846] Bluetooth: hci6: command 0x0406 tx timeout [ 463.184537][T10876] 9pnet_fd: Insufficient options for proto=fd [ 464.937330][ T5882] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 465.099111][ T5882] usb 8-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 465.140062][ T5881] usb 9-1: USB disconnect, device number 2 [ 465.149431][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12466, setting to 1024 [ 465.264404][ T5882] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 465.275181][ T5882] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.284257][T10891] ax25_connect(): syz.4.1512 uses autobind, please contact jreuter@yaina.de [ 465.296040][ T5882] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 465.342397][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.362919][ T5882] usb 8-1: config 0 descriptor?? [ 465.373648][T10887] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 466.797294][ T5882] ath6kl: Failed to submit usb control message: -110 [ 466.804255][ T5882] ath6kl: unable to send the bmi data to the device: -110 [ 466.823755][ T5882] ath6kl: Unable to send get target info: -110 [ 466.861138][ T5882] ath6kl: Failed to init ath6kl core: -110 [ 466.877574][ T5882] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 467.505158][ T30] INFO: task syz.2.1025:9186 blocked for more than 144 seconds. [ 467.515591][ T30] Not tainted 6.12.0-next-20241127-syzkaller #0 [ 467.523201][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.905237][ T30] task:syz.2.1025 state:D stack:22352 pid:9186 tgid:9185 ppid:5833 flags:0x00004004 [ 467.915495][ T30] Call Trace: [ 467.918912][ T30] [ 467.921837][ T30] __schedule+0x1850/0x4c30 [ 467.926356][ T30] ? __pfx___schedule+0x10/0x10 [ 467.931317][ T30] ? __pfx_lock_release+0x10/0x10 [ 467.936349][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 467.941601][ T30] ? schedule+0x90/0x320 [ 467.945837][ T30] schedule+0x14b/0x320 [ 467.950017][ T30] bit_wait+0x12/0xd0 [ 467.954012][ T30] __wait_on_bit+0xb0/0x2f0 [ 467.958878][ T30] ? __pfx_bit_wait+0x10/0x10 [ 467.964112][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 467.969766][ T30] ? __pfx_bit_wait+0x10/0x10 [ 467.975085][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 467.981172][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 467.986671][ T30] ? iov_iter_bvec_advance+0x220/0x240 [ 467.992262][ T30] netfs_unbuffered_read_iter_locked+0xd83/0x1540 [ 467.998970][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 468.004551][ T30] vfs_read+0x991/0xb70 [ 468.009066][ T30] ? __pfx_vfs_read+0x10/0x10 [ 468.013791][ T30] ? __fget_files+0x2a/0x410 [ 468.018666][ T30] ? __fget_files+0x2a/0x410 [ 468.023310][ T30] ksys_read+0x18f/0x2b0 [ 468.027636][ T30] ? __pfx_ksys_read+0x10/0x10 [ 468.032435][ T30] ? do_syscall_64+0x100/0x230 [ 468.037265][ T30] ? do_syscall_64+0xb6/0x230 [ 468.041975][ T30] do_syscall_64+0xf3/0x230 [ 468.046505][ T30] ? clear_bhb_loop+0x35/0x90 [ 468.051255][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.057261][ T30] RIP: 0033:0x7f285d780809 [ 468.061900][ T30] RSP: 002b:00007f285e61f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.070463][ T30] RAX: ffffffffffffffda RBX: 00007f285d945fa0 RCX: 00007f285d780809 [ 468.078777][ T30] RDX: 0000000000002020 RSI: 0000000020001940 RDI: 0000000000000007 [ 468.087111][ T30] RBP: 00007f285d7f393e R08: 0000000000000000 R09: 0000000000000000 [ 468.095299][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.103536][ T30] R13: 0000000000000000 R14: 00007f285d945fa0 R15: 00007ffef6de4608 [ 468.111941][ T30] [ 468.115011][ T30] [ 468.115011][ T30] Showing all locks held in the system: [ 468.122808][ T30] 1 lock held by khungtaskd/30: [ 468.127743][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 468.137814][ T30] 2 locks held by getty/5584: [ 468.142520][ T30] #0: ffff88814d4c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 468.152397][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 468.162611][ T30] 2 locks held by syz.2.1025/9186: [ 468.167770][ T30] #0: ffff88802e455978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320 [ 468.176880][ T30] #1: ffff88805f260148 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 468.188441][ T30] 4 locks held by syz.7.1511/10884: [ 468.193671][ T30] 1 lock held by syz.0.1519/10907: [ 468.199029][ T30] #0: ffff88807e18a9e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x182/0x430 [ 468.208783][ T30] 4 locks held by syz.0.1519/10908: [ 468.214091][ T30] 1 lock held by syz.8.1518/10912: [ 468.219479][ T30] #0: ffff88806d4bc7e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x182/0x430 [ 468.228991][ T30] 3 locks held by syz.8.1518/10913: [ 468.234227][ T30] [ 468.236573][ T30] ============================================= [ 468.236573][ T30] [ 468.245119][ T30] NMI backtrace for cpu 1 [ 468.249475][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-next-20241127-syzkaller #0 [ 468.259155][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 468.269592][ T30] Call Trace: [ 468.272896][ T30] [ 468.275944][ T30] dump_stack_lvl+0x241/0x360 [ 468.280686][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.285948][ T30] ? __pfx__printk+0x10/0x10 [ 468.290577][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 468.295563][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 468.301060][ T30] ? _printk+0xd5/0x120 [ 468.305251][ T30] ? __pfx__printk+0x10/0x10 [ 468.309874][ T30] ? __wake_up_klogd+0xcc/0x110 [ 468.314742][ T30] ? __pfx__printk+0x10/0x10 [ 468.319358][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 468.324433][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 468.330515][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 468.336518][ T30] watchdog+0xff6/0x1040 [ 468.340768][ T30] ? watchdog+0x1ea/0x1040 [ 468.345205][ T30] ? __pfx_watchdog+0x10/0x10 [ 468.351193][ T30] kthread+0x2f0/0x390 [ 468.355263][ T30] ? __pfx_watchdog+0x10/0x10 [ 468.359944][ T30] ? __pfx_kthread+0x10/0x10 [ 468.364548][ T30] ret_from_fork+0x4b/0x80 [ 468.368977][ T30] ? __pfx_kthread+0x10/0x10 [ 468.373592][ T30] ret_from_fork_asm+0x1a/0x30 [ 468.378396][ T30] [ 468.381977][ T30] Sending NMI from CPU 1 to CPUs 0: [ 468.387691][ C0] NMI backtrace for cpu 0 [ 468.387706][ C0] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.12.0-next-20241127-syzkaller #0 [ 468.387726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 468.387736][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 468.387759][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x25a/0x780 [ 468.387781][ C0] Code: 8b 44 24 10 48 8d 98 e0 0a 00 00 4c 8d a0 00 0b 00 00 45 31 ed 49 83 fd 31 0f 83 a5 00 00 00 4c 89 e0 48 c1 e8 03 0f b6 04 10 <84> c0 75 54 8b 43 20 a9 00 00 04 00 74 2c 31 d2 a9 00 00 03 00 0f [ 468.387795][ C0] RSP: 0018:ffffc90000bd78e0 EFLAGS: 00000802 [ 468.387809][ C0] RAX: 0000000000000000 RBX: ffff888021eb4730 RCX: ffffffff817b237a [ 468.387821][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff942c4970 [ 468.387832][ C0] RBP: ffffc90000bd7990 R08: ffffffff942c4977 R09: 1ffffffff285892e [ 468.387844][ C0] R10: dffffc0000000000 R11: fffffbfff285892f R12: ffff888021eb4750 [ 468.387856][ C0] R13: 0000000000000002 R14: ffff888021eb46d8 R15: 1ffff110043d68db [ 468.387868][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 468.387881][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.387893][ C0] CR2: 0000000000000000 CR3: 000000005c232000 CR4: 00000000003526f0 [ 468.387907][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 468.387917][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 468.387927][ C0] Call Trace: [ 468.387933][ C0] [ 468.387940][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 468.387960][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 468.387978][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 468.388003][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 468.388018][ C0] ? nmi_handle+0x14f/0x5a0 [ 468.388036][ C0] ? nmi_handle+0x2a/0x5a0 [ 468.388053][ C0] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 468.388071][ C0] ? default_do_nmi+0x63/0x160 [ 468.388089][ C0] ? exc_nmi+0x123/0x1f0 [ 468.388106][ C0] ? end_repeat_nmi+0xf/0x53 [ 468.388125][ C0] ? mark_lock+0x9a/0x360 [ 468.388143][ C0] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 468.388160][ C0] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 468.388178][ C0] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 468.388195][ C0] [ 468.388201][ C0] [ 468.388208][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.388227][ C0] ? rcu_is_watching+0x15/0xb0 [ 468.388247][ C0] trace_hardirqs_on+0x28/0x40 [ 468.388263][ C0] kasan_quarantine_put+0xdc/0x230 [ 468.388281][ C0] ? skb_release_data+0x6a0/0x8a0 [ 468.388300][ C0] kfree+0x196/0x430 [ 468.388319][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 468.388339][ C0] ? skb_release_data+0x6a0/0x8a0 [ 468.388359][ C0] skb_release_data+0x6a0/0x8a0 [ 468.388381][ C0] consume_skb+0x9f/0xf0 [ 468.388399][ C0] nsim_dev_trap_report_work+0x7cc/0xb50 [ 468.388421][ C0] ? process_scheduled_works+0x976/0x1840 [ 468.388437][ C0] process_scheduled_works+0xa66/0x1840 [ 468.388463][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.388482][ C0] ? assign_work+0x364/0x3d0 [ 468.388498][ C0] worker_thread+0x870/0xd30 [ 468.388524][ C0] ? __kthread_parkme+0x169/0x1d0 [ 468.388541][ C0] ? __pfx_worker_thread+0x10/0x10 [ 468.388556][ C0] kthread+0x2f0/0x390 [ 468.388573][ C0] ? __pfx_worker_thread+0x10/0x10 [ 468.388588][ C0] ? __pfx_kthread+0x10/0x10 [ 468.388605][ C0] ret_from_fork+0x4b/0x80 [ 468.388620][ C0] ? __pfx_kthread+0x10/0x10 [ 468.388637][ C0] ret_from_fork_asm+0x1a/0x30 [ 468.388657][ C0] [ 468.390368][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 468.744734][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-next-20241127-syzkaller #0 [ 468.754366][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 468.764454][ T30] Call Trace: [ 468.767738][ T30] [ 468.770664][ T30] dump_stack_lvl+0x241/0x360 [ 468.775886][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.781091][ T30] ? __pfx__printk+0x10/0x10 [ 468.785678][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.791662][ T30] ? vscnprintf+0x5d/0x90 [ 468.795995][ T30] panic+0x349/0x880 [ 468.799897][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 468.806052][ T30] ? __pfx_panic+0x10/0x10 [ 468.810471][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 468.815857][ T30] ? __irq_work_queue_local+0x137/0x410 [ 468.821411][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 468.826786][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 468.832940][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 468.839119][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 468.845299][ T30] watchdog+0x1035/0x1040 [ 468.849630][ T30] ? watchdog+0x1ea/0x1040 [ 468.854064][ T30] ? __pfx_watchdog+0x10/0x10 [ 468.858745][ T30] kthread+0x2f0/0x390 [ 468.862817][ T30] ? __pfx_watchdog+0x10/0x10 [ 468.867486][ T30] ? __pfx_kthread+0x10/0x10 [ 468.872075][ T30] ret_from_fork+0x4b/0x80 [ 468.876488][ T30] ? __pfx_kthread+0x10/0x10 [ 468.881076][ T30] ret_from_fork_asm+0x1a/0x30 [ 468.885865][ T30] [ 468.889166][ T30] Kernel Offset: disabled [ 468.893480][ T30] Rebooting in 86400 seconds..