last executing test programs: 7m50.598933095s ago: executing program 3 (id=471): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000080)={{0x84, @multicast1, 0x4e21, 0x3, 'rr\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e22, 0x4, 0x0, 0x12d5c, 0x12d5b}}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7) syz_socket_connect_nvme_tcp() 7m49.400617394s ago: executing program 3 (id=478): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 7m49.212140589s ago: executing program 3 (id=479): syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}, [@nested={0x6, 0x4, 0x0, 0x1, [@generic='fM']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) 7m44.068483008s ago: executing program 3 (id=495): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000006c0)={0x50d, 0x7d, 0x0, {{0x500, 0x1f7, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50d) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'sha384-ssse3\x00'}}) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)=""/133, 0x85) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) 7m42.094065613s ago: executing program 3 (id=502): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r2, 0x2000) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) 7m38.505775997s ago: executing program 3 (id=508): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 7m37.431263373s ago: executing program 4 (id=511): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000340)="23000000010006", 0x7) 7m34.14637552s ago: executing program 4 (id=518): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, 0x0, 0x0, 0x3c) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000011c0)='./control\x00', &(0x7f0000000100), 0x400092, &(0x7f0000000000)=ANY=[@ANYBLOB='dyn,flock=write']) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) 7m32.382319983s ago: executing program 4 (id=525): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000006c0)={0x50d, 0x7d, 0x0, {{0x500, 0x1f7, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50d) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r1 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)=""/133, 0x85) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) 7m31.35477081s ago: executing program 4 (id=527): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 7m31.230902828s ago: executing program 4 (id=528): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000340)="23000000010006", 0x7) 7m29.296981926s ago: executing program 4 (id=534): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 7m23.413088563s ago: executing program 32 (id=508): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 7m14.200630874s ago: executing program 33 (id=534): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 6m21.989985239s ago: executing program 2 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400000000fcffff", @ANYRES32=0x0, @ANYBLOB="6104010000000000440012800b00010065727370616e0000340002800600020030"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m21.111191536s ago: executing program 2 (id=692): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m20.185568609s ago: executing program 2 (id=695): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0xa0) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') 6m20.127103973s ago: executing program 2 (id=696): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYBLOB="bfb12990e82c6ef31dabb3c72460149c7bdb2a0b7220f6ad53fde253f31a0c851e11f58be0b4b9307ba987c8203bae80dafe19f56ffba042184d09bade7731c17865501ade062092609eb00a51ffbd62d95f22f4398be94899821839790a2ce0c7fe201e2889f936130f321fb8da1d3e1f3582b9b79fce5d1ed67160f1437f4c60c0c8412f8ed701fd9ac379c72ebddf82aaea52", @ANYRESDEC=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0xfffffffffffffe07, r6, 0x2, 0x0, &(0x7f0000000040)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000280)={0x18, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r5, 0x1c, 0x3, 0x2}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000540)={0x8}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r7 = shmat(0x0, &(0x7f0000fde000/0x2000)=nil, 0x2000) shmdt(r7) munlock(&(0x7f0000fde000/0x1000)=nil, 0x1000) 6m18.074727196s ago: executing program 2 (id=703): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x405a350) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) fchdir(0xffffffffffffffff) 6m14.150699164s ago: executing program 2 (id=708): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x15, &(0x7f0000000600)=ANY=[@ANYBLOB="185300000b00000000000000000000000d753000040000001841000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000e245b5a2000005007b8af8ff00000000bffdffffff00000007020000f8ffffffb703000008000000b7040000010000008500005fee40800000006d40010000000000dc42e0ff040000001812000000", @ANYRESHEX, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000364000/0x3000)=nil, 0x3000, 0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040), 0x4) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x5000001, 0x810, r3, 0xd2a6a000) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[], 0xc0}, 0x1, 0x7}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m59.080113863s ago: executing program 34 (id=708): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x15, &(0x7f0000000600)=ANY=[@ANYBLOB="185300000b00000000000000000000000d753000040000001841000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000e245b5a2000005007b8af8ff00000000bffdffffff00000007020000f8ffffffb703000008000000b7040000010000008500005fee40800000006d40010000000000dc42e0ff040000001812000000", @ANYRESHEX, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000364000/0x3000)=nil, 0x3000, 0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040), 0x4) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x5000001, 0x810, r3, 0xd2a6a000) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[], 0xc0}, 0x1, 0x7}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="0801000064042a0027bd7000fedbdf258782be0b6de18ff41db44a4e3f2fc79ff5fd8ce33e70aea97c5bf443a47b60de02a5669c6cc9c6f4e0d9084743a7c158cb4645b4a985420c21c87c7c497dbbf8bfa40755957972755e3cb04456af7cb8c4df9c465d6932b288ca24824b0faf73d875976f4049450ea72d6e952d626dcf65292f79317152f04071b9aad36d35e5d88f17c2c3424a25581a3dd77c2707a6457e8b30c8bc092ba9d916d7c0be233972a2666886ab95ff634df6d27da46dbc01e6dc459f0ff5f24e83ff3f71c675992f42caaaea4354f44fca5d26ab0a2cd3ec2e396e56f301746a39360f309eb14ad211a3b1f0918e978d9f62b61189c5cd8adf333c833832001088a9a494d859e7644eecb6545e5fba689355b9a3"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13.561574923s ago: executing program 1 (id=1683): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x405a350) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) fchdir(0xffffffffffffffff) 11.634749288s ago: executing program 7 (id=1691): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$pagemap(r0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, 0x0, 0x0}, 0x20) 10.178408165s ago: executing program 1 (id=1694): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000018b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1, 0xfffffffffffffffd}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 9.082471163s ago: executing program 5 (id=1695): ioperm(0x0, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mount(0x0, 0x0, &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 8.563894725s ago: executing program 1 (id=1697): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_io_uring_setup(0x324d, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x54, 0x96d7, 0x1, 0x0, 0x0) 6.614853945s ago: executing program 6 (id=1698): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000060000000405000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000a5"], 0x50) 6.614146575s ago: executing program 5 (id=1699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) 6.25571039s ago: executing program 1 (id=1701): r0 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) 6.255060631s ago: executing program 5 (id=1702): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000000c0)={0x1, "917213055ec5270589e4a1f155d69bcd645a7343bff7bde9484d0249485305b3", 0x5, 0x1000, 0x8001, 0x5, 0x10, 0x1, 0x0, 0x5}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x508, 0x0, 0x368, 0x1b0, 0x0, 0x0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffff00], [], 'syzkaller0\x00', 'team_slave_1\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x4}, {0x0, 0xfe}, 0xf3dd}}}, {{@ipv6={@mcast1, @remote, [0x0, 0x0, 0xffffff00], [], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x1, 0x7, 0x3, 0x12}, 0x4, 0x8e7, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x9, 0x400, 0xfffffff1}) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000002c000100000000000000000204000080"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.170862583s ago: executing program 6 (id=1703): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0xe}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8000, 0x80) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01070000000000000000450000400e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) 6.115444304s ago: executing program 7 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd=r0}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}}, 0x0) 6.055709842s ago: executing program 7 (id=1705): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, 0x0, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000001880)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, 0x0, 0x0) 5.998959079s ago: executing program 1 (id=1706): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) 5.916527856s ago: executing program 0 (id=1707): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000553f000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 5.818346602s ago: executing program 7 (id=1708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100009, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 5.097999187s ago: executing program 6 (id=1709): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.178760674s ago: executing program 0 (id=1710): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x88}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) 4.070472565s ago: executing program 0 (id=1711): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x141e000000000000, 0x0, 0x0) keyctl$clear(0x7, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600"/15], 0x45) 3.790535986s ago: executing program 7 (id=1712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) 3.453962681s ago: executing program 5 (id=1713): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0xe}, {0xd, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xffffffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x142, 0x142, 0x2, [@datasec={0xe, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x4, 0x6}, {0x4, 0x4, 0x8}, {0x3, 0x8, 0xa22}, {0x4, 0x7, 0x4}, {0x2, 0x1, 0x400}, {0x3, 0x6, 0x8}, {0x4, 0x0, 0x8}, {0x1, 0x6, 0x7}], '\x00'}, @struct={0x7, 0x2, 0x0, 0x4, 0x0, 0x80000001, [{0x9, 0x2, 0x4e}, {0xd, 0x0, 0xffffffff}]}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0xb, 0x5}, {0x9, 0x2}, {0x6, 0x81}, {0x5, 0xfffffffe}, {0xc, 0xcb3d}, {0xb, 0x9}, {0x1}]}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @ptr={0x7, 0x0, 0x0, 0x2, 0x5}, @datasec={0x10, 0x4, 0x0, 0xf, 0x1, [{0x4, 0xb, 0x81}, {0x4, 0x50a4, 0x5}, {0x4, 0x1, 0x4}, {0x3, 0x10000, 0xd7d7}], "9c"}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}]}}, &(0x7f0000000640)=""/229, 0x15e, 0xe5, 0x1, 0x1ff, 0x0, @void, @value}, 0x28) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)='%-010d \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0xb4, 0x802, 0x113a0, r8, 0x9, '\x00', r2, r6, 0x3, 0x1, 0x5, 0xc, @void, @value, @value=r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES64=0x0, @ANYRES16=r6, @ANYRESOCT, @ANYRES16=r3, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x44378000) 3.101635981s ago: executing program 7 (id=1714): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$pagemap(r0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, 0x0, 0x0}, 0x20) 2.4728082s ago: executing program 0 (id=1715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0xa, 0xa, 0x401, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x14) 2.218762349s ago: executing program 0 (id=1716): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffd, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a01020000000000000000010000000900010073797a30000800000900020073797a30000000000800074000000001400003800800024000"], 0xbc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) syz_emit_ethernet(0x105, &(0x7f0000000740)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x3, 0xf7, 0x68, 0x0, 0x4d, 0x6, 0x0, @broadcast, @local, {[@end, @end, @generic={0x88, 0x10, "3595bc602c2775d75f402e4fde2c"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x4, [{@local, 0xd}, {@multicast2, 0x4}]}]}}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x1d, 0x4, 0xfff, 0x0, 0x80, {[@md5sig={0x13, 0x12, "e10483f688a675e814c853b4d1e950c0"}, @md5sig={0x13, 0x12, "f46bf3f7641a1946cbee5b06696c3c9e"}, @generic={0x1, 0x8, "04c842152a8d"}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x81, 0xe3, 0x9}, @timestamp={0x8, 0xa, 0x4, 0x7}, @nop, @nop, @timestamp={0x8, 0xa, 0x1}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x3, 0x6}]}}, {"b363d17408a10dfab1dc2582c19f0dbf49a37151dce975880cca33b8395ca91bd16e57a3f2ffba3d8614ef3f59d3183ca47085d29a031d9eaf0ca507f39f89ef05b708"}}}}}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x4, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.109608849s ago: executing program 1 (id=1717): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x0, 0x2, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.798034554s ago: executing program 6 (id=1718): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, 0x0, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000001880)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40001) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, 0x0, 0x0) 1.384435095s ago: executing program 6 (id=1719): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0xe}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8000, 0x80) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01070000000000000000450000400e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) 1.338111805s ago: executing program 5 (id=1720): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000280)=0x1bce5ac9, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) 340.297016ms ago: executing program 5 (id=1721): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x88}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) 170.411428ms ago: executing program 0 (id=1722): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f00000003c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x12, r2, 0xc4d65000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x8010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) 0s ago: executing program 6 (id=1723): creat(&(0x7f00000002c0)='./file0\x00', 0x40) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.694681][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.861966][ T977] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 92.919444][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.183173][ T977] usb 2-1: config 0 descriptor?? [ 95.547441][ T977] ft260 0003:0403:6030.0002: item fetching failed at offset 0/2 [ 96.765333][ T977] ft260 0003:0403:6030.0002: failed to parse HID [ 96.771785][ T977] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -22 [ 96.793198][ T977] usb 2-1: USB disconnect, device number 3 [ 97.793489][ T6203] netlink: 'syz.1.85': attribute type 7 has an invalid length. [ 97.826641][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 101.180869][ T6233] warning: `syz.3.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.560594][ T6244] netlink: 'syz.0.98': attribute type 7 has an invalid length. [ 101.568332][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 103.594938][ T6269] ksmbd: Unknown IPC event: 8, ignore. [ 105.727802][ T6274] delete_channel: no stack [ 107.751585][ T6291] ======================================================= [ 107.751585][ T6291] WARNING: The mand mount option has been deprecated and [ 107.751585][ T6291] and is ignored by this kernel. Remove the mand [ 107.751585][ T6291] option from the mount to silence this warning. [ 107.751585][ T6291] ======================================================= [ 114.843600][ T6356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.903501][ T6356] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.950488][ T6359] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 115.010587][ T6356] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.165104][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 115.221930][ T6356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.084887][ T6356] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.234782][ T6356] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.305689][ T6356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.312136][ T6356] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.322166][ T6356] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.344755][ T6356] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.377691][ T6356] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.595302][ T6356] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.909378][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.292940][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.305010][ T6356] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 117.314554][ T6356] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 117.347786][ T6356] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 118.485397][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.976054][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.983408][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.391809][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.398459][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.039435][ T6429] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 120.046278][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 120.054733][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 120.092097][ T6430] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 120.346549][ T52] vhci_hcd: stop threads [ 120.351589][ T52] vhci_hcd: release socket [ 120.356244][ T52] vhci_hcd: disconnect device [ 121.057225][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.063475][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.069650][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.568422][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.574796][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.265853][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.272262][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.613045][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.792847][ T5881] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 123.854113][ T974] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.974132][ T5881] usb 4-1: config 0 has too many interfaces: 125, using maximum allowed: 32 [ 124.013026][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 124.171564][ T5881] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 124.187377][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.214435][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 125 [ 124.221291][ T974] usb 5-1: config 16 has an invalid interface number: 169 but max is 0 [ 124.226456][ T5881] usb 4-1: config 0 has no interface number 0 [ 124.377386][ T974] usb 5-1: config 16 has an invalid interface number: 128 but max is 0 [ 124.528437][ T974] usb 5-1: config 16 has 2 interfaces, different from the descriptor's value: 1 [ 124.528464][ T5881] usb 4-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30 [ 124.554100][ T974] usb 5-1: config 16 has no interface number 0 [ 124.770406][ T974] usb 5-1: config 16 has no interface number 1 [ 124.771900][ T5881] usb 4-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 124.800272][ T974] usb 5-1: config 16 interface 169 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.828563][ T5881] usb 4-1: config 0 interface 88 has no altsetting 0 [ 124.832855][ T974] usb 5-1: too many endpoints for config 16 interface 128 altsetting 16: 255, using maximum allowed: 30 [ 124.852509][ T5881] usb 4-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40 [ 124.872869][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.893078][ T5881] usb 4-1: Product: syz [ 124.897294][ T5881] usb 4-1: Manufacturer: syz [ 124.908178][ T974] usb 5-1: config 16 interface 128 altsetting 16 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 124.923137][ T5881] usb 4-1: SerialNumber: syz [ 124.937591][ T5881] usb 4-1: config 0 descriptor?? [ 124.945286][ T974] usb 5-1: config 16 interface 128 altsetting 16 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 124.998957][ T974] usb 5-1: config 16 interface 128 altsetting 16 endpoint 0x8B has invalid wMaxPacketSize 0 [ 125.057810][ T974] usb 5-1: config 16 interface 128 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 125.084501][ T974] usb 5-1: config 16 interface 128 has no altsetting 0 [ 125.112963][ T974] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 125.125577][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.585259][ T6483] rtc_cmos 00:00: Alarms can be up to one day in the future [ 125.650258][ T974] cypress_m8 5-1:16.169: DeLorme Earthmate USB converter detected [ 125.680038][ T5881] usb 4-1: USB disconnect, device number 4 [ 125.707533][ T974] earthmate ttyUSB0: required endpoint is missing [ 125.852664][ T974] usb 5-1: string descriptor 0 read error: -71 [ 125.864585][ T974] cypress_m8 5-1:16.128: DeLorme Earthmate USB converter detected [ 125.879658][ T974] earthmate ttyUSB1: required endpoint is missing [ 125.898364][ T974] usb 5-1: USB disconnect, device number 2 [ 125.919119][ T974] cypress_m8 5-1:16.169: device disconnected [ 125.934155][ T974] cypress_m8 5-1:16.128: device disconnected [ 126.522172][ T6504] overlayfs: failed to resolve './file1': -2 [ 126.523300][ T6505] netlink: 64 bytes leftover after parsing attributes in process `syz.3.185'. [ 126.653192][ T6507] fuse: Bad value for 'fd' [ 131.326955][ T5882] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 131.335785][ T5881] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 131.832735][ T6557] usb usb8: usbfs: process 6557 (syz.0.203) did not claim interface 0 before use [ 133.064111][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.114875][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.390082][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.399211][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 133.415794][ T5881] usb 5-1: can't read configurations, error -71 [ 133.666940][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 133.713091][ T5882] usb 2-1: can't read configurations, error -71 [ 134.602648][ T6581] overlayfs: failed to resolve './file0': -2 [ 135.571119][ T6591] usb usb8: usbfs: process 6591 (syz.3.214) did not claim interface 0 before use [ 139.446588][ T5881] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 139.928167][ T5881] usb 3-1: not running at top speed; connect to a high speed hub [ 139.941565][ T5881] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 140.043024][ T5881] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 140.054244][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.071389][ T5881] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.080740][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.094549][ T5881] usb 3-1: Product: ᐭ [ 140.099514][ T5881] usb 3-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답 [ 140.785679][ T5881] usb 3-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑 [ 142.086192][ T6628] usb usb8: usbfs: process 6628 (syz.4.225) did not claim interface 0 before use [ 144.291908][ T6634] block device autoloading is deprecated and will be removed. [ 144.301306][ T6634] syz.2.219: attempt to access beyond end of device [ 144.301306][ T6634] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 144.659135][ T5881] usb 3-1: 0:2 : does not exist [ 145.059545][ T6647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.564932][ T5881] usb 3-1: USB disconnect, device number 4 [ 146.572699][ T5884] IPVS: starting estimator thread 0... [ 146.664315][ T6657] IPVS: using max 23 ests per chain, 55200 per kthread [ 146.710541][ T5880] IPVS: starting estimator thread 0... [ 146.730806][ T6664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.086344][ T6666] IPVS: using max 21 ests per chain, 50400 per kthread [ 147.179321][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.442894][ T5880] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 148.514846][ T6695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.628782][ T5880] usb 2-1: not running at top speed; connect to a high speed hub [ 148.664008][ T5880] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 148.708110][ T5880] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 148.749358][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.790110][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.837309][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.877756][ T5880] usb 2-1: Product: ᐭ [ 148.883238][ T5880] usb 2-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답 [ 148.947618][ T5880] usb 2-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑 [ 149.537667][ T6704] usb usb8: usbfs: process 6704 (syz.2.247) did not claim interface 0 before use [ 150.171187][ T6706] syz.1.242: attempt to access beyond end of device [ 150.171187][ T6706] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 151.477495][ T5880] usb 2-1: 0:2 : does not exist [ 153.202847][ T6725] netlink: 64 bytes leftover after parsing attributes in process `syz.2.251'. [ 153.206877][ T5880] usb 2-1: USB disconnect, device number 6 [ 153.254676][ T6726] fuse: Bad value for 'fd' [ 154.211199][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.661663][ T6743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.670479][ T5882] IPVS: starting estimator thread 0... [ 154.895617][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 154.913990][ T6744] IPVS: using max 22 ests per chain, 52800 per kthread [ 157.372401][ T6771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.893027][ T6781] netlink: 64 bytes leftover after parsing attributes in process `syz.0.269'. [ 157.980376][ T6781] fuse: Bad value for 'fd' [ 159.211067][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 159.716408][ T6800] netlink: 68 bytes leftover after parsing attributes in process `syz.1.276'. [ 161.484595][ T6812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.313310][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 162.383680][ T974] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.579191][ T6836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.591981][ T5880] IPVS: starting estimator thread 0... [ 162.597743][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 162.620172][ T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.640920][ T974] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.688742][ T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.702386][ T974] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.713428][ T6837] IPVS: using max 24 ests per chain, 57600 per kthread [ 162.741054][ T6842] netlink: 68 bytes leftover after parsing attributes in process `syz.3.288'. [ 162.759847][ T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.785492][ T974] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.812432][ T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.834248][ T974] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.870176][ T974] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 162.910722][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.955787][ T974] usb 5-1: config 0 descriptor?? [ 163.724679][ T5881] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 163.747962][ T6857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.936601][ T5881] usb 3-1: config 0 has too many interfaces: 125, using maximum allowed: 32 [ 163.950706][ T5881] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 164.053046][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.064852][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 125 [ 164.073972][ T5881] usb 3-1: config 0 has no interface number 0 [ 164.080077][ T5881] usb 3-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30 [ 164.842544][ T5881] usb 3-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 164.855969][ T5881] usb 3-1: config 0 interface 88 has no altsetting 0 [ 164.865551][ T5881] usb 3-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40 [ 164.874798][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.885554][ T5881] usb 3-1: Product: syz [ 164.889753][ T5881] usb 3-1: Manufacturer: syz [ 164.900716][ T5881] usb 3-1: SerialNumber: syz [ 164.909414][ T5881] usb 3-1: config 0 descriptor?? [ 164.951101][ T5880] usb 5-1: USB disconnect, device number 5 [ 165.248174][ T6877] 9pnet_fd: Insufficient options for proto=fd [ 165.260501][ T5881] usb 3-1: USB disconnect, device number 5 [ 166.072589][ T6888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.329681][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 166.349515][ T6889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.632342][ T6899] netlink: 5132 bytes leftover after parsing attributes in process `syz.1.310'. [ 169.228973][ T6920] netlink: 'syz.3.315': attribute type 7 has an invalid length. [ 169.269667][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 169.580467][ T6930] 9pnet_fd: Insufficient options for proto=fd [ 169.687679][ T974] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 169.701967][ T6929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.808233][ T6933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.850945][ T974] usb 3-1: config 0 has too many interfaces: 125, using maximum allowed: 32 [ 169.863806][ T974] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 169.883773][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.901709][ T974] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 125 [ 169.911251][ T974] usb 3-1: config 0 has no interface number 0 [ 169.922200][ T974] usb 3-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30 [ 169.935053][ T974] usb 3-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 169.948743][ T974] usb 3-1: config 0 interface 88 has no altsetting 0 [ 169.957724][ T974] usb 3-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40 [ 169.967208][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.981426][ T974] usb 3-1: Product: syz [ 169.986058][ T974] usb 3-1: Manufacturer: syz [ 169.990812][ T974] usb 3-1: SerialNumber: syz [ 170.001887][ T974] usb 3-1: config 0 descriptor?? [ 170.249616][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 170.976328][ T974] usb 3-1: USB disconnect, device number 6 [ 172.594476][ T6954] netlink: 'syz.0.327': attribute type 7 has an invalid length. [ 172.602163][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 173.447372][ T6959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.852664][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 174.948465][ T6985] fuse: Bad value for 'fd' [ 181.575115][ T7035] fuse: Bad value for 'fd' [ 182.596417][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 184.030855][ T7059] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 185.957895][ T7081] netlink: 64 bytes leftover after parsing attributes in process `syz.0.363'. [ 186.010093][ T7081] fuse: Bad value for 'fd' [ 187.024564][ T7086] Invalid ELF header magic: != ELF [ 187.966633][ T7097] serio: Serial port ptm0 [ 190.925777][ T7127] netlink: 64 bytes leftover after parsing attributes in process `syz.4.378'. [ 190.983790][ T7127] fuse: Bad value for 'fd' [ 194.710354][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.716851][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.991585][ T7174] netlink: 64 bytes leftover after parsing attributes in process `syz.2.396'. [ 196.258890][ T7177] fuse: Bad value for 'fd' [ 201.717643][ T7229] netlink: 64 bytes leftover after parsing attributes in process `syz.0.412'. [ 201.768956][ T7229] fuse: Bad value for 'fd' [ 201.792998][ T5884] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 202.303089][ T7239] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 203.028624][ T5884] usb 5-1: device descriptor read/all, error -71 [ 204.808143][ T7267] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 204.829810][ T7267] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 204.857800][ T7269] netlink: 64 bytes leftover after parsing attributes in process `syz.0.426'. [ 204.873978][ T7267] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 204.884940][ T7269] fuse: Bad value for 'fd' [ 204.934620][ T7270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.942230][ T7270] IPv6: NLM_F_CREATE should be set when creating new route [ 204.949670][ T7270] IPv6: NLM_F_CREATE should be set when creating new route [ 204.956934][ T7270] IPv6: NLM_F_CREATE should be set when creating new route [ 205.117339][ T7270] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 208.054749][ T7357] usb usb8: usbfs: process 7357 (syz.3.436) did not claim interface 0 before use [ 210.594205][ T7366] netlink: 64 bytes leftover after parsing attributes in process `syz.4.439'. [ 210.661696][ T7386] overlayfs: workdir and upperdir must be separate subtrees [ 210.711409][ T7366] fuse: Bad value for 'fd' [ 212.867752][ T7410] binder_alloc: 7404: binder_alloc_buf, no vma [ 213.431687][ T7423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.526029][ T7427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.459'. [ 213.621753][ T7429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.461'. [ 214.428016][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 216.853660][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.190989][ T7495] usb usb8: usbfs: process 7495 (syz.2.484) did not claim interface 0 before use [ 222.444148][ T977] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 223.366089][ T977] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 223.386161][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.417481][ T977] usb 3-1: config 0 descriptor?? [ 226.503178][ T977] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 226.513074][ T977] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 226.563968][ T977] [drm:udl_init] *ERROR* Selecting channel failed [ 226.836813][ T977] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 226.843619][ T977] [drm] Initialized udl on minor 2 [ 226.851478][ T977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 226.864008][ T977] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 226.950836][ T5882] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 226.976980][ T5882] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 226.990845][ T5882] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 227.015681][ T977] usb 3-1: USB disconnect, device number 7 [ 231.839644][ T7623] wireguard0: entered promiscuous mode [ 231.845454][ T7623] wireguard0: entered allmulticast mode [ 234.376071][ T5881] kernel write not supported for file /input/mice (pid: 5881 comm: kworker/0:3) [ 235.768410][ T977] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 236.180413][ T977] usb 3-1: not running at top speed; connect to a high speed hub [ 236.242984][ T977] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 236.251726][ T977] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 236.262930][ T977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.472057][ T977] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.127514][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.135720][ T977] usb 3-1: Product: ᐭ [ 237.139909][ T977] usb 3-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답 [ 237.154810][ T977] usb 3-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑 [ 238.197742][ T7676] syz.2.530: attempt to access beyond end of device [ 238.197742][ T7676] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 240.525359][ T977] usb 3-1: 0:2 : does not exist [ 241.582616][ T977] usb 3-1: USB disconnect, device number 8 [ 242.225196][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.755858][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.942147][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.024270][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.039489][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.047660][ T5830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 243.056274][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.401061][ T7718] chnl_net:caif_netlink_parms(): no params data found [ 244.023658][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.045489][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.077446][ T7718] bridge_slave_0: entered allmulticast mode [ 244.178535][ T7718] bridge_slave_0: entered promiscuous mode [ 244.238025][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.745332][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.796452][ T7718] bridge_slave_1: entered allmulticast mode [ 244.802965][ T977] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.842588][ T7718] bridge_slave_1: entered promiscuous mode [ 244.971017][ T977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.982386][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.995251][ T977] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 245.016484][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.324579][ T977] usb 2-1: config 0 descriptor?? [ 245.332522][ T5830] Bluetooth: hci5: command tx timeout [ 245.691570][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.805940][ T977] wacom 0003:056A:0003.0003: unknown main item tag 0x0 [ 245.816981][ T977] wacom 0003:056A:0003.0003: unknown main item tag 0x0 [ 245.824721][ T977] wacom 0003:056A:0003.0003: unknown main item tag 0x0 [ 245.825657][ T7718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.849410][ T977] wacom 0003:056A:0003.0003: unknown main item tag 0x0 [ 245.852630][ T7718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.858289][ T977] wacom 0003:056A:0003.0003: unknown main item tag 0x0 [ 245.885335][ T977] wacom 0003:056A:0003.0003: unknown main item tag 0x0 [ 245.910344][ T977] wacom 0003:056A:0003.0003: unknown main item tag 0x0 [ 245.923725][ T977] wacom 0003:056A:0003.0003: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 245.957119][ T977] wacom 0003:056A:0003.0003: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 245.972108][ T977] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0003/input/input7 [ 246.050038][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.111788][ T977] usb 2-1: USB disconnect, device number 7 [ 246.350616][ T7718] team0: Port device team_slave_0 added [ 246.377152][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.987713][ T7718] team0: Port device team_slave_1 added [ 247.226440][ T7757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.257716][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.261919][ T7761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.372973][ T5830] Bluetooth: hci5: command tx timeout [ 247.487349][ T7757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.519498][ T7718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.549483][ T7718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.575766][ T7718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.591420][ T7718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.598571][ T7718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.624812][ T7718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.655621][ T7757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.725198][ T7718] hsr_slave_0: entered promiscuous mode [ 247.731414][ T7718] hsr_slave_1: entered promiscuous mode [ 247.740287][ T7718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.751542][ T7718] Cannot create hsr debugfs directory [ 247.785196][ T7757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.941656][ T35] bridge_slave_1: left allmulticast mode [ 247.962342][ T35] bridge_slave_1: left promiscuous mode [ 247.980018][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.019993][ T35] bridge_slave_0: left allmulticast mode [ 248.072841][ T35] bridge_slave_0: left promiscuous mode [ 248.078587][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.454733][ T5830] Bluetooth: hci5: command tx timeout [ 249.760013][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.781415][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.806028][ T35] bond0 (unregistering): Released all slaves [ 249.834305][ T7757] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.851800][ T7757] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.897080][ T7757] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.917253][ T7757] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.526762][ T7718] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.755639][ T7718] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.893504][ T7806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.548773][ T5830] Bluetooth: hci5: command tx timeout [ 251.763458][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.830474][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.839299][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.883722][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.893620][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.900816][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.113911][ T7718] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.159134][ T7718] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.458586][ T7718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.545859][ T7718] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.582190][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.589391][ T7343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.657282][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.664477][ T7343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.802894][ T25] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 253.907382][ T35] hsr_slave_0: left promiscuous mode [ 253.934151][ T5843] Bluetooth: hci3: command tx timeout [ 253.941426][ T35] hsr_slave_1: left promiscuous mode [ 253.977082][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 253.991171][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 254.011147][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.027993][ T25] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 254.039792][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.047977][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.060627][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.073042][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.082387][ T25] usb 3-1: Product: ᐭ [ 254.086794][ T25] usb 3-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답 [ 254.103787][ T25] usb 3-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑 [ 254.104655][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.136694][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.272606][ T35] veth1_macvtap: left promiscuous mode [ 254.291631][ T35] veth0_macvtap: left promiscuous mode [ 254.298960][ T35] veth1_vlan: left promiscuous mode [ 254.314822][ T35] veth0_vlan: left promiscuous mode [ 254.581177][ T7850] syz.2.571: attempt to access beyond end of device [ 254.581177][ T7850] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 255.941974][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.951667][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.013183][ T5843] Bluetooth: hci3: command tx timeout [ 257.608794][ T25] usb 3-1: 0:2 : does not exist [ 257.639486][ T25] usb 3-1: USB disconnect, device number 9 [ 257.736724][ T35] team0 (unregistering): Port device team_slave_1 removed [ 257.829711][ T35] team0 (unregistering): Port device team_slave_0 removed [ 257.894052][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.094202][ T5843] Bluetooth: hci3: command tx timeout [ 260.178109][ T5843] Bluetooth: hci3: command tx timeout [ 262.581967][ T7718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.673176][ T7718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.926885][ T7811] chnl_net:caif_netlink_parms(): no params data found [ 263.132570][ T35] IPVS: stop unused estimator thread 0... [ 263.318447][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.332941][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.350501][ T7811] bridge_slave_0: entered allmulticast mode [ 263.364100][ T7811] bridge_slave_0: entered promiscuous mode [ 263.385080][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.422429][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.450225][ T7811] bridge_slave_1: entered allmulticast mode [ 263.469760][ T7811] bridge_slave_1: entered promiscuous mode [ 263.859413][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.075576][ T7718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.376947][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.652665][ T7811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.686715][ T7811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.791391][ T7811] team0: Port device team_slave_0 added [ 265.131467][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.169209][ T7811] team0: Port device team_slave_1 added [ 265.949221][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.029057][ T7955] evm: overlay not supported [ 266.049956][ T29] audit: type=1804 audit(1733902291.721:2): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.594" name="/newroot/138/bus/bus" dev="overlay" ino=743 res=1 errno=0 [ 266.139345][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.192018][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.370153][ T7811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.454955][ T7718] veth0_vlan: entered promiscuous mode [ 266.491565][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.491586][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.491620][ T7811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.575639][ T7811] hsr_slave_0: entered promiscuous mode [ 267.589637][ T7811] hsr_slave_1: entered promiscuous mode [ 267.609569][ T7811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.621397][ T7811] Cannot create hsr debugfs directory [ 267.685477][ T7718] veth1_vlan: entered promiscuous mode [ 267.749312][ T7718] veth0_macvtap: entered promiscuous mode [ 268.540086][ T7718] veth1_macvtap: entered promiscuous mode [ 268.559125][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.569922][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.579900][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.590496][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.600431][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.610968][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.620886][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.631484][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.643740][ T7718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.655386][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.665892][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.675960][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.686476][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.696361][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.706880][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.716777][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.727372][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.738493][ T7718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.014665][ T7718] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.023884][ T7718] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.033271][ T7718] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.042559][ T7718] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.842656][ T35] bridge_slave_1: left allmulticast mode [ 269.852991][ T35] bridge_slave_1: left promiscuous mode [ 269.865347][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.907016][ T35] bridge_slave_0: left allmulticast mode [ 269.941220][ T35] bridge_slave_0: left promiscuous mode [ 269.963122][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.364281][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.392792][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.404427][ T35] bond0 (unregistering): Released all slaves [ 276.158315][ T8050] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 276.256839][ T8050] syz_tun: entered promiscuous mode [ 276.269544][ T8050] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 276.573859][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.587559][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.962931][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.997108][ T7811] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.011794][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.648559][ T35] hsr_slave_0: left promiscuous mode [ 279.654409][ T35] hsr_slave_1: left promiscuous mode [ 279.660124][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.672884][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.690713][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.698923][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.733079][ T35] veth1_macvtap: left promiscuous mode [ 279.743155][ T35] veth0_macvtap: left promiscuous mode [ 279.753065][ T35] veth1_vlan: left promiscuous mode [ 279.758337][ T35] veth0_vlan: left promiscuous mode [ 280.632172][ T35] team0 (unregistering): Port device team_slave_1 removed [ 280.720872][ T35] team0 (unregistering): Port device team_slave_0 removed [ 281.723712][ T7811] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 281.732630][ T7811] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.774188][ T7811] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.080835][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.856477][ T7811] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.929498][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.936678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.116279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.123451][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.219011][ T35] IPVS: stop unused estimator thread 0... [ 284.069572][ T7811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.286893][ T8136] binder_alloc: 8123: binder_alloc_buf, no vma [ 285.002599][ T7811] veth0_vlan: entered promiscuous mode [ 286.031905][ T7811] veth1_vlan: entered promiscuous mode [ 286.286770][ T7811] veth0_macvtap: entered promiscuous mode [ 286.295706][ T7811] veth1_macvtap: entered promiscuous mode [ 286.311007][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.321653][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.331557][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.342118][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.352051][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.363272][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.373848][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.384399][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.396635][ T7811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.417039][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.427546][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.437393][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.448434][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.458888][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.470002][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.535394][ T8177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.619157][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.186444][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.219086][ T7811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.271326][ T7811] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.281722][ T7811] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.302582][ T7811] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.323357][ T7811] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.379342][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 287.633609][ T7343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.641661][ T7343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.458542][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.483479][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.393679][ T8247] tipc: Started in network mode [ 292.399212][ T8247] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 292.413477][ T8247] tipc: Enabled bearer , priority 10 [ 293.148399][ T8252] ufs: You didn't specify the type of your ufs filesystem [ 293.148399][ T8252] [ 293.148399][ T8252] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 293.148399][ T8252] [ 293.148399][ T8252] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 293.191621][ T8252] syz.0.659: attempt to access beyond end of device [ 293.191621][ T8252] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 293.416178][ T974] tipc: Node number set to 4269801491 [ 298.151428][ T8297] netlink: 68 bytes leftover after parsing attributes in process `syz.5.671'. [ 298.599140][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807bd04800: rx timeout, send abort [ 298.612933][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807bd04800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.710168][ T974] IPVS: starting estimator thread 0... [ 303.443288][ T8361] IPVS: using max 25 ests per chain, 60000 per kthread [ 303.915319][ T8377] netlink: 68 bytes leftover after parsing attributes in process `syz.2.689'. [ 305.580007][ T5843] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 307.960867][ T8430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.064429][ T5881] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 309.486185][ T5881] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 309.495389][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.515286][ T5881] usb 6-1: config 0 descriptor?? [ 309.646196][ T8443] lo speed is unknown, defaulting to 1000 [ 309.655019][ T8443] lo speed is unknown, defaulting to 1000 [ 309.661452][ T8443] lo speed is unknown, defaulting to 1000 [ 309.789655][ T8443] infiniband sz1: set active [ 309.794545][ T8443] infiniband sz1: added lo [ 309.810767][ T5926] lo speed is unknown, defaulting to 1000 [ 309.875236][ T8443] RDS/IB: sz1: added [ 309.879339][ T8443] smc: adding ib device sz1 with port count 1 [ 309.885600][ T8443] smc: ib device sz1 port 1 has pnetid [ 309.892459][ T8443] lo speed is unknown, defaulting to 1000 [ 309.982187][ T8443] lo speed is unknown, defaulting to 1000 [ 310.058760][ T8443] lo speed is unknown, defaulting to 1000 [ 310.126962][ T8443] lo speed is unknown, defaulting to 1000 [ 310.194753][ T8443] lo speed is unknown, defaulting to 1000 [ 310.261882][ T5926] lo speed is unknown, defaulting to 1000 [ 310.326282][ T5881] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 310.537951][ T5881] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 311.302612][ T5881] [drm:udl_init] *ERROR* Selecting channel failed [ 311.318947][ T5881] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 311.325810][ T5881] [drm] Initialized udl on minor 2 [ 311.435708][ T5881] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 311.449929][ T5881] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 311.468185][ T5926] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 311.479216][ T5926] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 311.495931][ T5881] usb 6-1: USB disconnect, device number 2 [ 311.982184][ T8438] lo speed is unknown, defaulting to 1000 [ 313.594341][ T8454] lo speed is unknown, defaulting to 1000 [ 314.888153][ T8488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.595827][ T8504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.096746][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.103545][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.973028][ T977] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 319.112637][ T46] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 319.284525][ T46] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 319.294371][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.406548][ T977] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 319.415703][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.433449][ T977] usb 7-1: config 0 descriptor?? [ 320.323059][ T977] usb 7-1: can't set config #0, error -71 [ 320.374850][ T977] usb 7-1: USB disconnect, device number 2 [ 320.424104][ T46] usb 6-1: config 0 descriptor?? [ 320.431328][ T46] cp210x 6-1:0.0: cp210x converter detected [ 320.854840][ T46] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 321.044798][ T46] usb 6-1: cp210x converter now attached to ttyUSB0 [ 321.610587][ T46] usb 6-1: USB disconnect, device number 3 [ 322.007282][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 322.402382][ T8565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.107498][ T8571] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 325.381025][ T46] cp210x 6-1:0.0: device disconnected [ 326.522930][ T977] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 326.739008][ T977] usb 7-1: not running at top speed; connect to a high speed hub [ 326.780994][ T977] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 326.790011][ T977] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 326.815192][ T977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.847762][ T977] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.867833][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.888219][ T977] usb 7-1: Product: ᐭ [ 326.898895][ T977] usb 7-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답 [ 326.966228][ T977] usb 7-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑 [ 327.188883][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.474668][ T8613] syz.6.739: attempt to access beyond end of device [ 327.474668][ T8613] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 327.530409][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.656429][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.669258][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.679678][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.688350][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.225371][ T8608] lo speed is unknown, defaulting to 1000 [ 329.626111][ T977] usb 7-1: 0:2 : does not exist [ 329.642293][ T977] usb 7-1: USB disconnect, device number 3 [ 329.816856][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.992219][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 330.272229][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 330.376949][ T8] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 330.580615][ T5830] Bluetooth: hci0: command tx timeout [ 330.606372][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.834751][ T8] usb 6-1: Product: syz [ 330.838929][ T8] usb 6-1: Manufacturer: syz [ 330.853018][ T8] usb 6-1: SerialNumber: syz [ 330.866186][ T8] usb 6-1: config 0 descriptor?? [ 330.925116][ T8] usb 6-1: can't set config #0, error -71 [ 330.941835][ T8608] chnl_net:caif_netlink_parms(): no params data found [ 330.969444][ T8] usb 6-1: USB disconnect, device number 4 [ 331.304963][ T8647] usb usb8: usbfs: process 8647 (syz.1.748) did not claim interface 0 before use [ 331.374628][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.424386][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.480146][ T8608] bridge_slave_0: entered allmulticast mode [ 331.519542][ T8608] bridge_slave_0: entered promiscuous mode [ 331.579492][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.719341][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.852087][ T8608] bridge_slave_1: entered allmulticast mode [ 331.916929][ T8608] bridge_slave_1: entered promiscuous mode [ 332.328619][ T8608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.345094][ T8608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.513242][ T8608] team0: Port device team_slave_0 added [ 332.520284][ T8608] team0: Port device team_slave_1 added [ 332.616682][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.643013][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.696719][ T5830] Bluetooth: hci0: command tx timeout [ 332.752992][ T8608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.773816][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.780820][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.809635][ T8608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.585375][ T8608] hsr_slave_0: entered promiscuous mode [ 333.642386][ T8608] hsr_slave_1: entered promiscuous mode [ 334.812128][ T8608] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.832973][ T5830] Bluetooth: hci0: command tx timeout [ 335.102085][ T8608] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 335.143304][ T8608] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 335.158115][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.172231][ T8608] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 336.074110][ T5881] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 336.412970][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.448587][ T5881] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 336.472296][ T5881] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 336.486103][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.511386][ T5881] usb 6-1: config 0 descriptor?? [ 336.651366][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.858059][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.893089][ T5830] Bluetooth: hci0: command tx timeout [ 337.121735][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.686964][ T8608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.827665][ T8608] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.883144][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.890399][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.921751][ T8608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.936428][ T8608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.989340][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.996457][ T770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.364006][ T8732] Bluetooth: MGMT ver 1.23 [ 338.994732][ T977] usb 6-1: USB disconnect, device number 5 [ 339.064947][ T12] bridge_slave_1: left allmulticast mode [ 339.070672][ T12] bridge_slave_1: left promiscuous mode [ 339.199699][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.623577][ T12] bridge_slave_0: left allmulticast mode [ 339.629272][ T12] bridge_slave_0: left promiscuous mode [ 339.642953][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.708223][ T8740] (syz.6.767,8740,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 340.742998][ T8740] (syz.6.767,8740,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 343.969685][ T5843] Bluetooth: hci2: sending frame failed (-49) [ 343.977414][ T5830] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 345.289226][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.320826][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.338696][ T12] bond0 (unregistering): Released all slaves [ 345.394845][ T8735] bridge_slave_0: left allmulticast mode [ 345.400517][ T8735] bridge_slave_0: left promiscuous mode [ 345.406355][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.426035][ T8735] bridge_slave_1: left allmulticast mode [ 345.431871][ T8735] bridge_slave_1: left promiscuous mode [ 345.439237][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.451714][ T8735] bond0: (slave bond_slave_0): Releasing backup interface [ 345.464761][ T8735] bond0: (slave bond_slave_1): Releasing backup interface [ 345.511110][ T8735] team0: Port device team_slave_0 removed [ 345.536744][ T8735] team0: Port device team_slave_1 removed [ 345.543471][ T8735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.550933][ T8735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.573165][ T8735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.580587][ T8735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.323357][ T8608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.665549][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 349.760414][ T8608] veth0_vlan: entered promiscuous mode [ 349.770849][ T8608] veth1_vlan: entered promiscuous mode [ 349.793920][ T8608] veth0_macvtap: entered promiscuous mode [ 349.802624][ T8608] veth1_macvtap: entered promiscuous mode [ 349.818167][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.828837][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.838789][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.849679][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.860131][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.871008][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.880936][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.891504][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.904205][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.935740][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.935844][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.935876][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.935907][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.935937][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.935967][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.935999][ T8608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.936028][ T8608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.938962][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.077642][ T8608] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.193724][ T8608] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.632475][ T8608] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.641528][ T8608] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.003593][ T8883] trusted_key: encrypted_key: insufficient parameters specified [ 352.460633][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801267b000: rx timeout, send abort [ 352.472858][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801267b000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 352.853312][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.861194][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.917836][ T7332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.930752][ T7332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.478657][ T12] hsr_slave_0: left promiscuous mode [ 354.580533][ T12] hsr_slave_1: left promiscuous mode [ 354.586812][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.605054][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.624298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.641654][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.743077][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 355.218199][ T12] veth1_macvtap: left promiscuous mode [ 355.234097][ T12] veth0_macvtap: left promiscuous mode [ 355.249993][ T12] veth1_vlan: left promiscuous mode [ 355.473187][ T12] veth0_vlan: left promiscuous mode [ 356.003776][ T8906] sctp: failed to load transform for md5: -2 [ 356.102830][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 356.111993][ T8] usb 7-1: config 16 has an invalid interface number: 91 but max is 0 [ 356.141488][ T8] usb 7-1: config 16 has no interface number 0 [ 356.162569][ T8] usb 7-1: config 16 interface 91 has no altsetting 0 [ 356.192040][ T8] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=62.4a [ 356.209198][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.448150][ T8] usb 7-1: string descriptor 0 read error: -71 [ 356.486367][ T8] usb 7-1: USB disconnect, device number 4 [ 356.911587][ T12] team0 (unregistering): Port device team_slave_1 removed [ 356.958689][ T12] team0 (unregistering): Port device team_slave_0 removed [ 358.164416][ T8929] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 359.503020][ T5830] Bluetooth: hci0: command 0x0401 tx timeout [ 359.805136][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802848e800: rx timeout, send abort [ 359.815304][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802848e800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 361.631550][ T12] IPVS: stop unused estimator thread 0... [ 366.652883][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 366.683631][ T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 366.875321][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 366.903594][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 366.922603][ T8] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 366.962816][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.999939][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.042714][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.085324][ T8] usb 2-1: Product: ᐭ [ 367.089559][ T8] usb 2-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답 [ 367.172368][ T8] usb 2-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑 [ 367.674750][ T9077] syz.1.838: attempt to access beyond end of device [ 367.674750][ T9077] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 369.592954][ T8] usb 2-1: 0:2 : does not exist [ 369.761059][ T9079] binder_alloc: 9073: binder_alloc_buf, no vma [ 371.192136][ T8] usb 2-1: USB disconnect, device number 8 [ 371.383617][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.117992][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 374.024630][ T9139] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 375.926821][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 376.500471][ T9157] binder_alloc: 9152: binder_alloc_buf, no vma [ 378.557761][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 378.898329][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.904737][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.011165][ T9203] netlink: 'syz.1.863': attribute type 5 has an invalid length. [ 379.111416][ T9213] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 380.488805][ T9228] netlink: 60 bytes leftover after parsing attributes in process `syz.5.868'. [ 380.837618][ T9234] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 380.852026][ T9234] netlink: 224 bytes leftover after parsing attributes in process `syz.1.869'. [ 381.956024][ T9244] lo speed is unknown, defaulting to 1000 [ 384.088584][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.875'. [ 386.750701][ T9274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.879'. [ 387.142000][ T9288] loop5: detected capacity change from 0 to 7 [ 387.195016][ T9288] Dev loop5: unable to read RDB block 7 [ 387.202854][ T9288] loop5: AHDI p1 p3 [ 387.207089][ T9288] loop5: partition table partially beyond EOD, truncated [ 387.222428][ T9288] loop5: p1 start 2048 is beyond EOD, truncated [ 387.783059][ T9295] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 387.853547][ T9295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 389.974786][ T9330] Invalid source name [ 389.978798][ T9330] UBIFS error (pid: 9330): cannot open "./file0", error -22 [ 390.636772][ T9290] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 391.017976][ T9290] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 391.029823][ T9290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.062924][ T9290] usb 7-1: config 0 descriptor?? [ 391.672935][ T9290] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 391.681531][ T9290] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 391.733309][ T9290] [drm:udl_init] *ERROR* Selecting channel failed [ 391.877400][ T9290] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 391.884378][ T9290] [drm] Initialized udl on minor 2 [ 392.853319][ T9290] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.863060][ T9290] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 392.874328][ T5882] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.883218][ T5882] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.893680][ T5882] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 392.900826][ T9290] usb 7-1: USB disconnect, device number 5 [ 393.045291][ T9366] tmpfs: Group quota block hardlimit too large. [ 393.162927][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 393.284778][ T9361] team0 (unregistering): Port device team_slave_0 removed [ 393.296489][ T9361] infiniband syz2: set down [ 393.302562][ T9361] team0 (unregistering): Port device team_slave_1 removed [ 393.592957][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 393.625900][ T25] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 394.332886][ T25] usb 2-1: config 179 has no interface number 0 [ 394.359653][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 394.388428][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 394.402041][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 394.412180][ T25] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 394.425599][ T25] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 394.434816][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.475387][ T9362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 394.962930][ T25] usb 2-1: USB disconnect, device number 9 [ 398.755265][ T9413] infiniband sz1: set active [ 399.166471][ T9413] bond0: (slave syz_tun): Releasing backup interface [ 400.186856][ T9413] bridge_slave_0: left allmulticast mode [ 400.192523][ T9413] bridge_slave_0: left promiscuous mode [ 400.225929][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.343491][ T9413] bridge_slave_1: left allmulticast mode [ 400.349160][ T9413] bridge_slave_1: left promiscuous mode [ 400.363081][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.762202][ T9413] bond0: (slave bond_slave_0): Releasing backup interface [ 401.793616][ T9439] netlink: 'syz.5.917': attribute type 27 has an invalid length. [ 402.436910][ T9413] bond0: (slave bond_slave_1): Releasing backup interface [ 402.467997][ T9413] team0: Port device team_slave_0 removed [ 402.521807][ T9413] team0: Port device team_slave_1 removed [ 402.538005][ T9413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.545782][ T9413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.560658][ T9413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.569794][ T9413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.600831][ T5881] lo speed is unknown, defaulting to 1000 [ 402.691747][ T9439] bond0: (slave bond_slave_0): Releasing backup interface [ 403.701637][ T9470] netlink: 68 bytes leftover after parsing attributes in process `syz.1.928'. [ 404.788332][ T9486] binder: BINDER_SET_CONTEXT_MGR already set [ 404.848409][ T9486] binder: 9485:9486 ioctl 4018620d 20000040 returned -16 [ 407.036138][ T9505] netlink: 68 bytes leftover after parsing attributes in process `syz.6.939'. [ 409.923435][ T9542] can0: slcan on ttyS3. [ 410.756053][ T9542] can0 (unregistered): slcan off ttyS3. [ 411.161003][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.5.950'. [ 412.087257][ T9564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.952'. [ 412.111056][ T9562] 9pnet_fd: Insufficient options for proto=fd [ 416.816205][ T5884] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 417.797782][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.808817][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.819747][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.835820][ T5884] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 417.845540][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.898612][ T5884] usb 6-1: config 0 descriptor?? [ 419.325062][ T5884] usbhid 6-1:0.0: can't add hid device: -71 [ 419.331155][ T5884] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 419.374545][ T5884] usb 6-1: USB disconnect, device number 6 [ 423.374932][ T25] libceph: connect (1)[b::]:6789 error -101 [ 423.381494][ T25] libceph: mon0 (1)[b::]:6789 connect error [ 423.635329][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 423.660421][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 424.014260][ T5843] Bluetooth: hci2: command 0x1003 tx timeout [ 424.031576][ T5830] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 424.321669][ T5884] libceph: connect (1)[b::]:6789 error -101 [ 424.327884][ T5884] libceph: mon0 (1)[b::]:6789 connect error [ 424.334543][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 424.342992][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 424.990939][ T25] libceph: connect (1)[c::]:6789 error -101 [ 424.997264][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 425.004464][ T25] libceph: connect (1)[b::]:6789 error -101 [ 425.021941][ T25] libceph: mon0 (1)[b::]:6789 connect error [ 426.103369][ T5884] libceph: connect (1)[b::]:6789 error -101 [ 426.111250][ T5884] libceph: mon0 (1)[b::]:6789 connect error [ 426.127515][ T25] libceph: connect (1)[c::]:6789 error -101 [ 426.140277][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 426.493412][ T9691] ceph: No mds server is up or the cluster is laggy [ 426.511330][ T9692] ceph: No mds server is up or the cluster is laggy [ 430.229557][ T9757] bridge_slave_0: left allmulticast mode [ 430.258356][ T9757] bridge_slave_0: left promiscuous mode [ 430.291397][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.305626][ T9760] (syz.5.995,9760,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 430.314225][ T9760] (syz.5.995,9760,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 430.521848][ T9795] gfs2: gfs2 mount does not exist [ 431.519430][ T9757] bridge_slave_1: left allmulticast mode [ 431.545660][ T9757] bridge_slave_1: left promiscuous mode [ 431.551417][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.585509][ T9757] bond0: (slave bond_slave_1): Releasing backup interface [ 432.847339][ T9757] team0: Port device team_slave_0 removed [ 432.900753][ T9757] team0: Port device team_slave_1 removed [ 432.917916][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.004481][ T9814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 433.150241][ T9757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.382433][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.417093][ T9757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.591902][ T9806] lo speed is unknown, defaulting to 1000 [ 434.938180][ T9832] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 439.673614][ T9867] (syz.6.1017,9867,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 439.682234][ T9867] (syz.6.1017,9867,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 440.693785][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.789084][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.440835][ T9904] nvme_fabrics: unknown parameter or missing value '0x000000000000000a' in ctrl creation request [ 445.783578][ T9950] 9pnet_fd: Insufficient options for proto=fd [ 448.514697][ T9952] bridge_slave_0: left allmulticast mode [ 448.520442][ T9952] bridge_slave_0: left promiscuous mode [ 448.521172][ T9960] (syz.1.1031,9960,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 448.526357][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.534727][ T9960] (syz.1.1031,9960,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 451.148869][ T9952] bridge_slave_1: left allmulticast mode [ 451.154609][ T9952] bridge_slave_1: left promiscuous mode [ 451.160257][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.409317][ T9952] bond0: (slave bond_slave_0): Releasing backup interface [ 451.433869][ T9952] bond0: (slave bond_slave_1): Releasing backup interface [ 451.790663][ T9952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.798612][ T9952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.808138][ T9952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.816028][ T9952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.841304][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1047'. [ 451.853232][ T974] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 452.004701][ T974] usb 8-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 452.014236][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.069787][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 452.123955][ T974] usb 8-1: config 0 descriptor?? [ 452.158062][ T974] usb 8-1: Invalid firmware size=18. [ 452.159126][T10036] 9pnet_fd: Insufficient options for proto=fd [ 452.220053][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 452.812965][ T5830] Bluetooth: hci0: command 0x0401 tx timeout [ 453.378952][T10048] pim6reg: entered allmulticast mode [ 453.968424][T10054] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 453.975977][T10054] PKCS7: Only support pkcs7_signedData type [ 454.613056][ T5839] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 454.815456][ T5839] usb 7-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 454.836372][T10054] overlay: Unknown parameter '~J' [ 454.881921][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.912979][ T5839] usb 7-1: Product: syz [ 454.917196][ T5839] usb 7-1: Manufacturer: syz [ 454.942980][ T5839] usb 7-1: SerialNumber: syz [ 454.954487][ T5839] usb 7-1: config 0 descriptor?? [ 454.968070][ T5839] smsc75xx v1.0.0 [ 455.026741][T10062] dlm: no local IP address has been set [ 455.032516][T10062] dlm: cannot start dlm midcomms -107 [ 455.063106][ T5839] smsc75xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 455.088007][ T5839] smsc75xx 7-1:0.0: probe with driver smsc75xx failed with error -22 [ 456.241214][ T5839] usb 7-1: USB disconnect, device number 6 [ 456.457445][ T977] usb 8-1: USB disconnect, device number 2 [ 457.044284][T10047] pim6reg: left allmulticast mode [ 457.288926][T10080] (syz.5.1058,10080,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 457.335789][T10080] (syz.5.1058,10080,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 457.745033][ T977] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 459.493050][ T9290] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 459.734959][ T977] usb 2-1: not running at top speed; connect to a high speed hub [ 459.746924][ T977] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 459.757031][ T977] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 459.767427][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.781435][ T977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.791533][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.800227][ T977] usb 2-1: Product: ᐭ [ 459.805585][ T977] usb 2-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답 [ 459.863540][ T977] usb 2-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑 [ 459.875673][ T9290] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 459.974292][ T9290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.995405][ T9290] usb 7-1: config 0 descriptor?? [ 463.962226][ T9290] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 463.988076][ T9290] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 464.001873][ T977] usb 2-1: 0:2 : does not exist [ 464.006932][ T9290] [drm:udl_init] *ERROR* Selecting channel failed [ 464.085202][ T9290] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 464.091951][ T9290] [drm] Initialized udl on minor 2 [ 464.112010][ T977] usb 2-1: USB disconnect, device number 10 [ 464.180564][ T9290] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 464.397450][ T9290] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 464.407458][ T5926] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 464.417620][ T9290] usb 7-1: USB disconnect, device number 7 [ 464.423624][ T5926] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 465.100418][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.324482][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1084'. [ 471.484152][T10225] binder_alloc: 10223: binder_alloc_buf, no vma [ 473.473075][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 473.479168][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 473.506005][T10267] ceph: No mds server is up or the cluster is laggy [ 474.967003][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 475.076336][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 480.744527][T10333] binder_alloc: 10327: binder_alloc_buf, no vma [ 487.410160][T10411] infiniband syz0: set down [ 487.414813][T10411] infiniband syz0: added team_slave_1 [ 487.420883][T10411] syz0: rxe_create_cq: returned err = -12 [ 487.426785][T10411] infiniband syz0: Couldn't create ib_mad CQ [ 487.432981][T10411] infiniband syz0: Couldn't open port 1 [ 487.450899][T10411] RDS/IB: syz0: added [ 487.455225][T10411] smc: adding ib device syz0 with port count 1 [ 487.461412][T10411] smc: ib device syz0 port 1 has pnetid [ 487.743242][ T5884] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 488.044080][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 488.077649][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 488.091655][ T5884] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 488.112182][ T5884] usb 6-1: config 1 has no interface number 1 [ 488.123711][ T5884] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 488.316347][ T5884] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.343647][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.410099][ T5884] usb 6-1: Product: syz [ 488.414410][ T5884] usb 6-1: Manufacturer: syz [ 488.422170][ T5884] usb 6-1: SerialNumber: syz [ 489.397803][ T5884] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 489.406293][ T5884] usb 6-1: 2:1 : sample bitwidth 172 in over sample bytes 3 [ 489.423108][ T5884] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 489.485016][ T5884] usb 6-1: USB disconnect, device number 7 [ 491.920899][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.181646][T10480] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1145'. [ 494.266101][T10474] syz.7.1150: attempt to access beyond end of device [ 494.266101][T10474] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 494.498737][T10474] vxfs: unable to read disk superblock at 1 [ 494.623096][T10474] syz.7.1150: attempt to access beyond end of device [ 494.623096][T10474] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 494.746003][T10481] xt_CT: No such helper "pptp" [ 494.802940][T10474] vxfs: unable to read disk superblock at 8 [ 494.841814][T10474] vxfs: can't find superblock. [ 496.188379][T10494] netlink: 'syz.6.1155': attribute type 10 has an invalid length. [ 496.218194][T10494] syz_tun: entered promiscuous mode [ 496.569328][T10494] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 497.109778][T10518] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1160'. [ 501.712296][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.719235][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.023019][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1175'. [ 505.392249][T10655] lo speed is unknown, defaulting to 1000 [ 505.809069][T10664] usb usb8: usbfs: process 10664 (syz.7.1182) did not claim interface 0 before use [ 507.037718][T10675] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1190'. [ 511.800691][T10724] lo speed is unknown, defaulting to 1000 [ 513.455986][T10739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1203'. [ 514.152863][ T974] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 514.325395][ T974] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 514.458201][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.504551][ T974] usb 8-1: config 0 descriptor?? [ 516.107382][ T974] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 516.132954][ T974] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 517.081181][ T974] [drm:udl_init] *ERROR* Selecting channel failed [ 517.150140][ T974] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 517.158742][ T974] [drm] Initialized udl on minor 2 [ 517.273138][ T974] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 517.281631][ T974] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 517.292115][ T5884] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 517.300324][ T5884] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 517.352613][ T974] usb 8-1: USB disconnect, device number 3 [ 518.302864][ T5884] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 518.969286][T10804] lo speed is unknown, defaulting to 1000 [ 519.302868][ T5884] usb 8-1: Using ep0 maxpacket: 8 [ 519.311282][ T5884] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 519.323063][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.331063][ T5884] usb 8-1: Product: syz [ 519.343013][ T5884] usb 8-1: Manufacturer: syz [ 519.350105][ T5884] usb 8-1: SerialNumber: syz [ 519.414008][ T5884] usb 8-1: config 0 descriptor?? [ 519.622611][ T5884] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 522.751804][ T5884] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 523.297763][ T5884] usb 8-1: USB disconnect, device number 4 [ 524.177855][ T5884] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 524.723586][ T5884] usb 8-1: Using ep0 maxpacket: 8 [ 524.737489][ T5884] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.762602][ T5884] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.787377][ T5884] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.825180][ T5884] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.860196][ T5884] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 525.268790][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.680531][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 525.831185][ T5884] usb 8-1: GET_CAPABILITIES returned 0 [ 525.836993][ T5884] usbtmc 8-1:16.0: can't read capabilities [ 527.206488][T10027] usb 8-1: USB disconnect, device number 5 [ 527.509434][T10870] lo speed is unknown, defaulting to 1000 [ 535.673722][T10945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.481776][ T29] audit: type=1400 audit(1733902563.101:3): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=10962 comm="syz.6.1264" [ 540.367130][T10998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.257240][T11005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.779583][T10000] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 546.540465][T11046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.768056][T11077] hsr0: entered promiscuous mode [ 557.146741][T11164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.561210][T11174] usb usb8: usbfs: process 11174 (syz.7.1327) did not claim interface 0 before use [ 559.246567][ T29] audit: type=1326 audit(1733902583.981:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.332887][ T29] audit: type=1326 audit(1733902583.991:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.375976][ T29] audit: type=1326 audit(1733902583.991:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.684646][ T29] audit: type=1326 audit(1733902583.991:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.742956][ T29] audit: type=1326 audit(1733902583.991:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.766087][ T29] audit: type=1326 audit(1733902583.991:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.792812][ T29] audit: type=1326 audit(1733902583.991:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.821882][ T29] audit: type=1326 audit(1733902583.991:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.853038][ T29] audit: type=1326 audit(1733902583.991:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 559.876096][ T29] audit: type=1326 audit(1733902583.991:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.1.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 563.139056][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.147032][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.524989][T11361] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1391'. [ 578.122250][T11398] overlayfs: overlapping lowerdir path [ 580.769483][T11421] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1404'. [ 582.649438][T11444] fuse: Bad value for 'group_id' [ 582.655896][T11444] fuse: Bad value for 'group_id' [ 582.997371][T11453] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1418'. [ 583.240446][ T974] libceph: connect (1)[c::]:6789 error -101 [ 583.260739][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 583.558085][ T974] libceph: connect (1)[c::]:6789 error -101 [ 583.568502][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 583.984256][T11453] ceph: No mds server is up or the cluster is laggy [ 584.252205][ T974] libceph: connect (1)[c::]:6789 error -101 [ 584.513658][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 584.926339][T11484] fuse: Bad value for 'group_id' [ 584.946341][T11484] fuse: Bad value for 'group_id' [ 586.500674][T11498] infiniband sz1: set active [ 586.904645][ T5882] lo speed is unknown, defaulting to 1000 [ 586.913915][T11503] (syz.0.1429,11503,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 586.931174][T11503] (syz.0.1429,11503,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 587.569800][T11511] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1435'. [ 587.666312][T11515] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 589.006861][T11535] fuse: Bad value for 'group_id' [ 589.011855][T11535] fuse: Bad value for 'group_id' [ 590.270040][T11554] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1448'. [ 590.515719][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 590.515738][ T29] audit: type=1800 audit(1733902616.191:26): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1449" name="bus" dev="overlay" ino=892 res=0 errno=0 [ 590.542379][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.816353][T11586] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1459'. [ 593.872409][ T29] audit: type=1800 audit(1733902619.541:27): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1461" name="bus" dev="overlay" ino=1656 res=0 errno=0 [ 596.176652][T11620] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1471'. [ 600.725326][T11661] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1483'. [ 603.760319][T11701] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1495'. [ 612.193161][T11777] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1517'. [ 612.331606][T11782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.680764][T11810] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 615.692378][T11810] overlayfs: maximum fs stacking depth exceeded [ 616.305433][T11817] syz.0.1529: attempt to access beyond end of device [ 616.305433][T11817] loop0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 616.318943][T11817] hfs: can't find a HFS filesystem on dev loop0 [ 616.954654][T11818] usb usb8: usbfs: process 11818 (syz.6.1525) did not claim interface 0 before use [ 618.661873][T11828] netlink: 'syz.0.1531': attribute type 10 has an invalid length. [ 619.119187][T11828] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 622.202921][ T977] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 622.375760][ T977] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 622.385285][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.414070][ T977] usb 2-1: config 0 descriptor?? [ 622.667302][ T977] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 622.687081][ T977] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 622.706540][ T977] [drm:udl_init] *ERROR* Selecting channel failed [ 622.755607][ T977] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 622.772720][ T977] [drm] Initialized udl on minor 2 [ 622.780673][ T977] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 622.810822][ T977] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 622.830443][ T5882] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 622.857804][ T977] usb 2-1: USB disconnect, device number 11 [ 622.868824][ T5882] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 624.575336][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.582517][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.883082][ T29] audit: type=1326 audit(1733902650.551:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11886 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7fc00000 [ 626.425200][ T29] audit: type=1326 audit(1733902652.071:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 626.447487][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.467636][ T29] audit: type=1326 audit(1733902652.071:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 626.543109][ T29] audit: type=1326 audit(1733902652.071:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 626.736293][ T29] audit: type=1326 audit(1733902652.071:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 626.761722][ T29] audit: type=1326 audit(1733902652.071:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 626.844305][ T29] audit: type=1326 audit(1733902652.071:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 626.934455][ T29] audit: type=1326 audit(1733902652.071:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 626.957423][ T29] audit: type=1326 audit(1733902652.071:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 626.979718][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.986347][ T29] audit: type=1326 audit(1733902652.071:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.1.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 627.054706][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888030137800: rx timeout, send abort [ 627.063782][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888030137800: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 629.563112][ T5884] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 629.904920][ T5884] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 629.906699][ T977] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 629.913845][ T5884] usb 7-1: config 0 has no interface number 0 [ 629.935102][ T5884] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 629.952557][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.978229][ T5884] usb 7-1: Product: syz [ 630.032881][ T5884] usb 7-1: Manufacturer: syz [ 630.041418][ T5884] usb 7-1: SerialNumber: syz [ 630.442048][ T5884] usb 7-1: config 0 descriptor?? [ 630.613105][ T5884] usb-storage 7-1:0.8: USB Mass Storage device detected [ 630.732429][ T5884] usb-storage 7-1:0.8: device ignored [ 630.877622][ T5884] usb 7-1: USB disconnect, device number 8 [ 631.091170][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 631.180290][ T977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.254450][ T977] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 631.365003][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.753982][ T977] usb 8-1: config 0 descriptor?? [ 631.778510][ T977] pwc: Askey VC010 type 2 USB webcam detected. [ 632.609767][T11972] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 633.950683][ T977] pwc: recv_control_msg error -71 req 02 val 2b00 [ 633.967817][ T977] pwc: recv_control_msg error -71 req 02 val 2700 [ 633.974762][ T977] pwc: recv_control_msg error -71 req 02 val 2c00 [ 633.981838][ T977] pwc: recv_control_msg error -71 req 04 val 1000 [ 634.670852][ T977] pwc: recv_control_msg error -71 req 04 val 1300 [ 634.769072][ T977] pwc: recv_control_msg error -71 req 04 val 1400 [ 634.953164][ T977] pwc: recv_control_msg error -71 req 02 val 2000 [ 635.252928][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 635.252949][ T29] audit: type=1326 audit(1733902660.921:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 635.286809][ T977] pwc: recv_control_msg error -71 req 02 val 2100 [ 635.320958][ T977] pwc: recv_control_msg error -71 req 04 val 1500 [ 635.518928][ T977] pwc: recv_control_msg error -71 req 02 val 2500 [ 635.814545][ T29] audit: type=1326 audit(1733902660.921:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 635.827673][ T977] pwc: recv_control_msg error -71 req 02 val 2400 [ 635.837454][ T29] audit: type=1326 audit(1733902660.921:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 635.866306][ T29] audit: type=1326 audit(1733902660.921:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 635.888947][ T29] audit: type=1326 audit(1733902660.921:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 635.916095][ T29] audit: type=1326 audit(1733902660.921:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 635.918311][ T977] pwc: recv_control_msg error -71 req 02 val 2600 [ 635.938668][ T29] audit: type=1326 audit(1733902660.921:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 635.967901][ T29] audit: type=1326 audit(1733902660.921:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 635.990683][ T29] audit: type=1326 audit(1733902660.921:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 636.013053][ T29] audit: type=1326 audit(1733902660.921:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11980 comm="syz.7.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f497ff19 code=0x7ffc0000 [ 636.073626][ T977] pwc: recv_control_msg error -71 req 02 val 2900 [ 636.103270][ T977] pwc: recv_control_msg error -71 req 02 val 2800 [ 636.113697][ T977] pwc: recv_control_msg error -71 req 04 val 1100 [ 636.123175][ T977] pwc: recv_control_msg error -71 req 04 val 1200 [ 636.148663][ T977] pwc: Registered as video103. [ 636.161565][ T977] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11 [ 636.199946][ T977] usb 8-1: USB disconnect, device number 6 [ 636.224618][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888076ee1000: rx timeout, send abort [ 636.233177][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888076ee1000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 637.421211][T12002] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 637.722392][T12011] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1580'. [ 640.735259][T12047] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 640.735942][T12046] IPVS: stopping master sync thread 12047 ... [ 640.953316][T10027] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 641.194621][T10027] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 641.269986][T10027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.319974][T10027] usb 7-1: config 0 descriptor?? [ 641.636700][T10027] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 641.645405][T10027] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 641.658204][T10027] [drm:udl_init] *ERROR* Selecting channel failed [ 641.703007][ T977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 642.437699][T10027] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 642.446670][T10027] [drm] Initialized udl on minor 2 [ 642.465106][T10027] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 642.473415][T10027] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 642.496187][T10027] usb 7-1: USB disconnect, device number 9 [ 642.602463][ T977] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 642.624529][ T977] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 642.649451][ T977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 642.681853][ T977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 642.829799][ T977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 642.853409][ T977] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 642.862532][ T977] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 642.870983][ T977] usb 6-1: Product: syz [ 642.875350][ T977] usb 6-1: Manufacturer: syz [ 642.886295][ T977] cdc_wdm 6-1:1.0: skipping garbage [ 642.891788][ T977] cdc_wdm 6-1:1.0: skipping garbage [ 642.899439][ T977] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 642.906612][ T977] cdc_wdm 6-1:1.0: Unknown control protocol [ 644.396485][ T977] usb 6-1: USB disconnect, device number 8 [ 645.620849][T12102] syz.0.1609: attempt to access beyond end of device [ 645.620849][T12102] loop0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 645.634142][T12102] hfs: can't find a HFS filesystem on dev loop0 [ 646.533204][ T974] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 646.705156][ T974] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 646.705192][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.707200][ T974] usb 7-1: config 0 descriptor?? [ 647.021539][ T974] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 647.021558][ T974] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 647.021850][ T974] [drm:udl_init] *ERROR* Selecting channel failed [ 647.042043][ T974] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 647.042063][ T974] [drm] Initialized udl on minor 2 [ 647.049121][ T974] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 647.049261][ T974] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 647.277219][T10027] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 647.317247][T10027] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 647.320176][T10027] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 647.320307][ T974] usb 7-1: USB disconnect, device number 10 [ 648.776890][T12131] delete_channel: no stack [ 648.823200][ T974] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 650.236464][ T974] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 650.247600][ T974] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 650.260237][ T974] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 650.269633][ T974] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 650.281036][ T974] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 650.296176][ T974] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 650.308081][ T974] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 650.316593][ T974] usb 8-1: Product: syz [ 650.320900][ T974] usb 8-1: Manufacturer: syz [ 650.330473][ T974] cdc_wdm 8-1:1.0: skipping garbage [ 650.336128][ T974] cdc_wdm 8-1:1.0: skipping garbage [ 650.342530][ T974] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 650.348814][ T974] cdc_wdm 8-1:1.0: Unknown control protocol [ 650.687261][T12146] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1624'. [ 652.427135][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.433998][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.441880][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.448527][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.455243][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.461873][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.468285][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.474878][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.481171][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.487775][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.494082][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.500688][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.506940][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.513552][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.519850][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.526472][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.532755][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.539380][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.546596][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 652.553236][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 652.823412][ T9290] usb 8-1: USB disconnect, device number 7 [ 652.823496][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 653.686518][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.742179][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 653.742197][ T29] audit: type=1326 audit(1733902679.411:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.093232][ T29] audit: type=1326 audit(1733902679.411:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.264646][ T29] audit: type=1326 audit(1733902679.421:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.304671][ T29] audit: type=1326 audit(1733902679.421:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.327829][ T29] audit: type=1326 audit(1733902679.421:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.373504][ T29] audit: type=1326 audit(1733902679.421:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.444260][ T29] audit: type=1326 audit(1733902679.421:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.613014][ T29] audit: type=1326 audit(1733902679.421:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.670943][ T29] audit: type=1326 audit(1733902679.421:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 654.779077][T12182] syz.7.1633: attempt to access beyond end of device [ 654.779077][T12182] loop7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 654.793273][T12182] hfs: can't find a HFS filesystem on dev loop7 [ 655.454678][ T29] audit: type=1326 audit(1733902679.421:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.1.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268cf7ff19 code=0x7ffc0000 [ 656.253746][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1638'. [ 657.409593][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'. [ 657.418830][T12212] nbd: illegal input index 704799488 [ 658.449625][T10027] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 659.388631][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 659.388650][ T29] audit: type=1326 audit(1733902685.061:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8f497ff19 code=0x0 [ 659.416680][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.469455][T10027] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 659.507536][T12227] syz.1.1648: attempt to access beyond end of device [ 659.507536][T12227] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 659.520813][T12227] hfs: can't find a HFS filesystem on dev loop1 [ 660.032267][T10027] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 660.085962][T10027] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 660.258184][T10027] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 660.464760][T10027] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 660.663477][T12232] infiniband sz1: set active [ 660.918044][T12231] (syz.0.1651,12231,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 660.927398][T12231] (syz.0.1651,12231,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 661.677273][T12238] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1653'. [ 662.283231][T10027] usb 7-1: string descriptor 0 read error: -71 [ 662.289522][T10027] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 662.298707][T10027] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 662.457981][T10027] usb 7-1: can't set config #1, error -71 [ 662.466990][T10027] usb 7-1: USB disconnect, device number 11 [ 662.496354][T12246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 662.512473][T12232] bond0: (slave wlan1): Releasing backup interface [ 663.341133][T12233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.375317][T12246] trusted_key: encrypted_key: insufficient parameters specified [ 663.424595][ T9290] lo speed is unknown, defaulting to 1000 [ 664.114849][T10027] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 664.315826][T10027] usb 7-1: unable to get BOS descriptor or descriptor too short [ 664.370407][T10027] usb 7-1: not running at top speed; connect to a high speed hub [ 664.415549][T10027] usb 7-1: config 9 has an invalid interface number: 87 but max is 0 [ 664.462995][T10027] usb 7-1: config 9 has no interface number 0 [ 664.489942][T10027] usb 7-1: config 9 interface 87 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 664.522012][T10027] usb 7-1: config 9 interface 87 has no altsetting 0 [ 664.548984][T10027] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=a8.d0 [ 664.573496][T10027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.600432][T10027] usb 7-1: Product: syz [ 664.671105][T10027] usb 7-1: Manufacturer: syz [ 664.697082][T10027] usb 7-1: SerialNumber: syz [ 665.135994][T12247] rdma_rxe: rxe_newlink: failed to add lo [ 666.383261][T10027] usb 7-1: USB disconnect, device number 12 [ 666.620588][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1666'. [ 667.294420][T12293] (syz.1.1668,12293,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 667.303552][T12293] (syz.1.1668,12293,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 667.313297][T10027] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 667.772273][T12296] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1669'. [ 668.014804][T10027] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 668.149465][T10027] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 668.193985][T10027] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 668.287668][T10027] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 668.330014][T10027] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 668.361380][T10027] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 668.370980][T10027] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 668.380510][T10027] usb 7-1: Product: syz [ 668.389568][T10027] usb 7-1: Manufacturer: syz [ 668.409128][T10027] cdc_wdm 7-1:1.0: skipping garbage [ 668.420363][T10027] cdc_wdm 7-1:1.0: skipping garbage [ 668.433477][T10027] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 668.440275][T10027] cdc_wdm 7-1:1.0: Unknown control protocol [ 668.534309][ T974] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 669.149196][T12307] fuse: Unknown parameter 'grou00000000000000000000' [ 669.170327][ C1] wdm_int_callback: 1240 callbacks suppressed [ 669.170355][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.183076][ C1] wdm_int_callback: 1240 callbacks suppressed [ 669.183097][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.202928][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.209584][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.216010][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.222638][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.233262][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.239891][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.246502][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.253131][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.259544][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.266170][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.272485][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.279193][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.285525][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.292154][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.298467][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.305095][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.311940][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 669.318556][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 669.366759][T10027] usb 7-1: USB disconnect, device number 13 [ 669.372737][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 669.382107][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 669.392727][ T974] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 669.403078][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 669.418245][ T974] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 669.428215][ T974] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 669.438105][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.454494][ T974] usb 8-1: config 0 descriptor?? [ 669.533909][T12279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.671223][ T974] hdpvr 8-1:0.0: firmware version 0x0 dated [ 669.680773][ T974] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 669.813017][ T5839] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 669.890235][ T974] hdpvr 8-1:0.0: device init failed [ 669.898033][ T974] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 669.910994][ T974] usb 8-1: USB disconnect, device number 8 [ 669.974160][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 669.981520][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.016380][ T5839] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 670.026421][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.034796][ T5839] usb 6-1: Product: syz [ 670.039293][ T5839] usb 6-1: Manufacturer: syz [ 670.044364][ T5839] usb 6-1: SerialNumber: syz [ 670.076577][ T5839] usb 6-1: config 0 descriptor?? [ 670.133906][ T5839] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 670.140108][ T5839] usb 6-1: selecting invalid altsetting 1 [ 671.056531][ T5839] gspca_stk014: init reg: 0x00 [ 671.061425][ T5839] stk014 6-1:0.0: probe with driver stk014 failed with error -5 [ 671.113101][ T5839] usb 6-1: USB disconnect, device number 9 [ 671.510083][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1679'. [ 673.382171][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1682'. [ 679.555680][T12406] openvswitch: netlink: IP tunnel dst address not specified [ 680.609579][ T5882] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 681.346042][ T5882] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 681.396845][ T5882] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 681.439650][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 681.488056][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 681.513322][T12403] SET target dimension over the limit! [ 681.521806][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1702'. [ 681.861012][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 682.219040][ T5882] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 682.231361][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 682.261190][ T5882] usb 2-1: Product: syz [ 682.281877][ T5882] usb 2-1: Manufacturer: syz [ 682.308173][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 682.532313][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 682.543053][ T5882] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 682.543104][ T5882] cdc_wdm 2-1:1.0: Unknown control protocol [ 682.623964][T10027] usb 2-1: USB disconnect, device number 12 [ 683.666090][T12453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1716'. [ 683.935296][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 684.007795][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 684.294095][T12454] ceph: No mds server is up or the cluster is laggy [ 684.324173][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 684.330278][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 686.019301][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.043999][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.280950][T12494] ------------[ cut here ]------------ [ 686.286910][T12494] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait+0x186/0x210 [ 686.303090][T12494] WARNING: CPU: 0 PID: 12494 at kernel/sched/core.c:8687 __might_sleep+0xb9/0xe0 [ 686.312331][T12494] Modules linked in: [ 686.316746][T12494] CPU: 0 UID: 0 PID: 12494 Comm: syz.6.1723 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 686.327577][T12494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 686.338196][T12494] RIP: 0010:__might_sleep+0xb9/0xe0 [ 686.343790][T12494] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 8e 8a 96 00 48 8b 4d 00 48 c7 c7 20 29 0a 8c 44 89 ee 48 89 ca e8 28 e0 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 686.363811][T12494] RSP: 0018:ffffc9000425e5c8 EFLAGS: 00010246 [ 686.369898][T12494] RAX: d718e2d6b73e9600 RBX: 1ffff11004e44e2e RCX: 0000000000080000 [ 686.377960][T12494] RDX: ffffc9001ec02000 RSI: 0000000000006e4d RDI: 0000000000006e4e [ 686.386042][T12494] RBP: ffff888027227170 R08: ffffffff81600dd2 R09: fffffbfff1cfa10c [ 686.394129][T12494] R10: dffffc0000000000 R11: fffffbfff1cfa10c R12: dffffc0000000000 [ 686.402161][T12494] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1cafc0 [ 686.410315][T12494] FS: 00007fd9201c46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 686.419486][T12494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.426302][T12494] CR2: 000000110c2b6044 CR3: 000000007f2b4000 CR4: 00000000003526f0 [ 686.434734][T12494] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 686.443208][T12494] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 686.451204][T12494] Call Trace: [ 686.454621][T12494] [ 686.457571][T12494] ? __warn+0x165/0x4d0 [ 686.461734][T12494] ? __might_sleep+0xb9/0xe0 [ 686.466393][T12494] ? report_bug+0x2b3/0x500 [ 686.470931][T12494] ? __might_sleep+0xb9/0xe0 [ 686.475613][T12494] ? handle_bug+0x60/0x90 [ 686.479960][T12494] ? exc_invalid_op+0x1a/0x50 [ 686.484690][T12494] ? asm_exc_invalid_op+0x1a/0x20 [ 686.489729][T12494] ? __warn_printk+0x292/0x360 [ 686.494868][T12494] ? __might_sleep+0xb9/0xe0 [ 686.499513][T12494] ? __might_sleep+0xb8/0xe0 [ 686.504174][T12494] netfs_retry_reads+0xde/0x1e10 [ 686.509120][T12494] ? __lock_acquire+0x1397/0x2100 [ 686.514326][T12494] ? __pfx_netfs_retry_reads+0x10/0x10 [ 686.519798][T12494] netfs_read_collection+0x2e01/0x3ab0 [ 686.525322][T12494] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 686.531321][T12494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 686.538107][T12494] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 686.544365][T12494] netfs_wait_for_read+0x2ba/0x4e0 [ 686.549515][T12494] ? trace_netfs_sreq_ref+0x94/0x230 [ 686.554862][T12494] ? __pfx_netfs_wait_for_read+0x10/0x10 [ 686.560494][T12494] ? __pfx_autoremove_wake_function+0x10/0x10 [ 686.566627][T12494] ? __pfx_v9fs_issue_read+0x10/0x10 [ 686.571914][T12494] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 686.577584][T12494] netfs_unbuffered_read_iter_locked+0x11fc/0x1540 [ 686.584140][T12494] netfs_unbuffered_read_iter+0xbf/0xe0 [ 686.589717][T12494] __kernel_read+0x513/0x9d0 [ 686.594383][T12494] ? do_sys_openat2+0x13e/0x1d0 [ 686.599265][T12494] ? __pfx___kernel_read+0x10/0x10 [ 686.604482][T12494] integrity_kernel_read+0xb0/0x100 [ 686.609699][T12494] ? __pfx_integrity_kernel_read+0x10/0x10 [ 686.615562][T12494] ? __kmalloc_cache_noprof+0x243/0x390 [ 686.621099][T12494] ? ima_calc_file_hash+0xaae/0x1b30 [ 686.626436][T12494] ima_calc_file_hash+0xae6/0x1b30 [ 686.631548][T12494] ? p9_client_stat+0x1be/0x280 [ 686.636823][T12494] ? v9fs_vfs_getattr+0x1c0/0x370 [ 686.641845][T12494] ? ima_collect_measurement+0x2b1/0xb10 [ 686.647823][T12494] ? process_measurement+0x1351/0x1fb0 [ 686.653353][T12494] ? ima_file_check+0xd9/0x120 [ 686.658194][T12494] ? security_file_post_open+0xb9/0x280 [ 686.663821][T12494] ? path_openat+0x2ccd/0x3590 [ 686.668575][T12494] ? do_filp_open+0x27f/0x4e0 [ 686.673277][T12494] ? __x64_sys_open+0x225/0x270 [ 686.678123][T12494] ? do_syscall_64+0xf3/0x230 [ 686.682834][T12494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.688914][T12494] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 686.694572][T12494] ? p9_client_stat+0x1be/0x280 [ 686.699420][T12494] ? kfree+0x196/0x430 [ 686.703535][T12494] ? p9_client_stat+0x1be/0x280 [ 686.708404][T12494] ? p9_client_stat+0x1be/0x280 [ 686.713323][T12494] ? __pfx_p9_client_stat+0x10/0x10 [ 686.718516][T12494] ? v9fs_fid_lookup+0x1b2/0xf30 [ 686.723519][T12494] ? v9fs_vfs_getattr+0x2eb/0x370 [ 686.728547][T12494] ima_collect_measurement+0x520/0xb10 [ 686.734119][T12494] ? __pfx_ima_collect_measurement+0x10/0x10 [ 686.740464][T12494] ? rcu_is_watching+0x15/0xb0 [ 686.745570][T12494] ? trace_contention_end+0x3c/0x120 [ 686.750861][T12494] ? __asan_memset+0x23/0x50 [ 686.755515][T12494] ? ima_get_hash_algo+0x156/0x4d0 [ 686.760630][T12494] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 686.766125][T12494] process_measurement+0x1351/0x1fb0 [ 686.771417][T12494] ? __pfx_process_measurement+0x10/0x10 [ 686.777074][T12494] ? do_raw_spin_lock+0x14f/0x370 [ 686.782123][T12494] ? __pfx_v9fs_file_open+0x10/0x10 [ 686.787434][T12494] ? do_raw_spin_unlock+0x13c/0x8b0 [ 686.792685][T12494] ? inode_to_bdi+0x69/0xf0 [ 686.797240][T12494] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 686.803630][T12494] ima_file_check+0xd9/0x120 [ 686.808241][T12494] ? __pfx_ima_file_check+0x10/0x10 [ 686.813484][T12494] security_file_post_open+0xb9/0x280 [ 686.818859][T12494] path_openat+0x2ccd/0x3590 [ 686.823487][T12494] ? __pfx_path_openat+0x10/0x10 [ 686.828436][T12494] do_filp_open+0x27f/0x4e0 [ 686.833005][T12494] ? __pfx_do_filp_open+0x10/0x10 [ 686.838057][T12494] ? do_raw_spin_lock+0x14f/0x370 [ 686.843554][T12494] do_sys_openat2+0x13e/0x1d0 [ 686.848268][T12494] ? __pfx_do_sys_openat2+0x10/0x10 [ 686.853812][T12494] ? mntput_no_expire+0x246/0x850 [ 686.858847][T12494] __x64_sys_open+0x225/0x270 [ 686.863582][T12494] ? __pfx___x64_sys_open+0x10/0x10 [ 686.868824][T12494] ? do_syscall_64+0x100/0x230 [ 686.873623][T12494] ? do_syscall_64+0xb6/0x230 [ 686.878298][T12494] do_syscall_64+0xf3/0x230 [ 686.882843][T12494] ? clear_bhb_loop+0x35/0x90 [ 686.887535][T12494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.893537][T12494] RIP: 0033:0x7fd91f37ff19 [ 686.897987][T12494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.917676][T12494] RSP: 002b:00007fd9201c4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 686.926124][T12494] RAX: ffffffffffffffda RBX: 00007fd91f545fa0 RCX: 00007fd91f37ff19 [ 686.934129][T12494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 686.942108][T12494] RBP: 00007fd91f3f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 686.950492][T12494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.958970][T12494] R13: 0000000000000000 R14: 00007fd91f545fa0 R15: 00007ffd0d87e988 [ 686.967007][T12494] [ 686.970036][T12494] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 686.977315][T12494] CPU: 0 UID: 0 PID: 12494 Comm: syz.6.1723 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 686.987550][T12494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 686.997597][T12494] Call Trace: [ 687.000865][T12494] [ 687.003789][T12494] dump_stack_lvl+0x241/0x360 [ 687.008463][T12494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.013654][T12494] ? __pfx__printk+0x10/0x10 [ 687.018234][T12494] ? _printk+0xd5/0x120 [ 687.022381][T12494] ? __init_begin+0x41000/0x41000 [ 687.027423][T12494] ? vscnprintf+0x5d/0x90 [ 687.031767][T12494] panic+0x349/0x880 [ 687.035656][T12494] ? __warn+0x174/0x4d0 [ 687.039817][T12494] ? __pfx_panic+0x10/0x10 [ 687.044234][T12494] __warn+0x344/0x4d0 [ 687.048214][T12494] ? __might_sleep+0xb9/0xe0 [ 687.052813][T12494] report_bug+0x2b3/0x500 [ 687.057150][T12494] ? __might_sleep+0xb9/0xe0 [ 687.061737][T12494] handle_bug+0x60/0x90 [ 687.065901][T12494] exc_invalid_op+0x1a/0x50 [ 687.070396][T12494] asm_exc_invalid_op+0x1a/0x20 [ 687.075244][T12494] RIP: 0010:__might_sleep+0xb9/0xe0 [ 687.080442][T12494] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 8e 8a 96 00 48 8b 4d 00 48 c7 c7 20 29 0a 8c 44 89 ee 48 89 ca e8 28 e0 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 687.100055][T12494] RSP: 0018:ffffc9000425e5c8 EFLAGS: 00010246 [ 687.106117][T12494] RAX: d718e2d6b73e9600 RBX: 1ffff11004e44e2e RCX: 0000000000080000 [ 687.114082][T12494] RDX: ffffc9001ec02000 RSI: 0000000000006e4d RDI: 0000000000006e4e [ 687.122041][T12494] RBP: ffff888027227170 R08: ffffffff81600dd2 R09: fffffbfff1cfa10c [ 687.130012][T12494] R10: dffffc0000000000 R11: fffffbfff1cfa10c R12: dffffc0000000000 [ 687.137979][T12494] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1cafc0 [ 687.145946][T12494] ? __warn_printk+0x292/0x360 [ 687.150731][T12494] ? __might_sleep+0xb8/0xe0 [ 687.155322][T12494] netfs_retry_reads+0xde/0x1e10 [ 687.160254][T12494] ? __lock_acquire+0x1397/0x2100 [ 687.165279][T12494] ? __pfx_netfs_retry_reads+0x10/0x10 [ 687.170737][T12494] netfs_read_collection+0x2e01/0x3ab0 [ 687.176198][T12494] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 687.182173][T12494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 687.188499][T12494] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 687.194400][T12494] netfs_wait_for_read+0x2ba/0x4e0 [ 687.199508][T12494] ? trace_netfs_sreq_ref+0x94/0x230 [ 687.204795][T12494] ? __pfx_netfs_wait_for_read+0x10/0x10 [ 687.210427][T12494] ? __pfx_autoremove_wake_function+0x10/0x10 [ 687.216489][T12494] ? __pfx_v9fs_issue_read+0x10/0x10 [ 687.221781][T12494] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 687.227345][T12494] netfs_unbuffered_read_iter_locked+0x11fc/0x1540 [ 687.233868][T12494] netfs_unbuffered_read_iter+0xbf/0xe0 [ 687.239412][T12494] __kernel_read+0x513/0x9d0 [ 687.243999][T12494] ? do_sys_openat2+0x13e/0x1d0 [ 687.248855][T12494] ? __pfx___kernel_read+0x10/0x10 [ 687.253976][T12494] integrity_kernel_read+0xb0/0x100 [ 687.259172][T12494] ? __pfx_integrity_kernel_read+0x10/0x10 [ 687.264970][T12494] ? __kmalloc_cache_noprof+0x243/0x390 [ 687.270511][T12494] ? ima_calc_file_hash+0xaae/0x1b30 [ 687.275794][T12494] ima_calc_file_hash+0xae6/0x1b30 [ 687.280915][T12494] ? p9_client_stat+0x1be/0x280 [ 687.285763][T12494] ? v9fs_vfs_getattr+0x1c0/0x370 [ 687.290775][T12494] ? ima_collect_measurement+0x2b1/0xb10 [ 687.296402][T12494] ? process_measurement+0x1351/0x1fb0 [ 687.301854][T12494] ? ima_file_check+0xd9/0x120 [ 687.306629][T12494] ? security_file_post_open+0xb9/0x280 [ 687.312165][T12494] ? path_openat+0x2ccd/0x3590 [ 687.316916][T12494] ? do_filp_open+0x27f/0x4e0 [ 687.321583][T12494] ? __x64_sys_open+0x225/0x270 [ 687.326442][T12494] ? do_syscall_64+0xf3/0x230 [ 687.331138][T12494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.337203][T12494] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 687.342770][T12494] ? p9_client_stat+0x1be/0x280 [ 687.347628][T12494] ? kfree+0x196/0x430 [ 687.351697][T12494] ? p9_client_stat+0x1be/0x280 [ 687.356557][T12494] ? p9_client_stat+0x1be/0x280 [ 687.361416][T12494] ? __pfx_p9_client_stat+0x10/0x10 [ 687.366617][T12494] ? v9fs_fid_lookup+0x1b2/0xf30 [ 687.371565][T12494] ? v9fs_vfs_getattr+0x2eb/0x370 [ 687.376589][T12494] ima_collect_measurement+0x520/0xb10 [ 687.382055][T12494] ? __pfx_ima_collect_measurement+0x10/0x10 [ 687.388035][T12494] ? rcu_is_watching+0x15/0xb0 [ 687.392801][T12494] ? trace_contention_end+0x3c/0x120 [ 687.398095][T12494] ? __asan_memset+0x23/0x50 [ 687.402692][T12494] ? ima_get_hash_algo+0x156/0x4d0 [ 687.407798][T12494] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 687.413270][T12494] process_measurement+0x1351/0x1fb0 [ 687.418690][T12494] ? __pfx_process_measurement+0x10/0x10 [ 687.424423][T12494] ? do_raw_spin_lock+0x14f/0x370 [ 687.429675][T12494] ? __pfx_v9fs_file_open+0x10/0x10 [ 687.434899][T12494] ? do_raw_spin_unlock+0x13c/0x8b0 [ 687.440106][T12494] ? inode_to_bdi+0x69/0xf0 [ 687.444608][T12494] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 687.450932][T12494] ima_file_check+0xd9/0x120 [ 687.455522][T12494] ? __pfx_ima_file_check+0x10/0x10 [ 687.460741][T12494] security_file_post_open+0xb9/0x280 [ 687.466113][T12494] path_openat+0x2ccd/0x3590 [ 687.470709][T12494] ? __pfx_path_openat+0x10/0x10 [ 687.475655][T12494] do_filp_open+0x27f/0x4e0 [ 687.480155][T12494] ? __pfx_do_filp_open+0x10/0x10 [ 687.485178][T12494] ? do_raw_spin_lock+0x14f/0x370 [ 687.490221][T12494] do_sys_openat2+0x13e/0x1d0 [ 687.494906][T12494] ? __pfx_do_sys_openat2+0x10/0x10 [ 687.500092][T12494] ? mntput_no_expire+0x246/0x850 [ 687.505140][T12494] __x64_sys_open+0x225/0x270 [ 687.509818][T12494] ? __pfx___x64_sys_open+0x10/0x10 [ 687.515041][T12494] ? do_syscall_64+0x100/0x230 [ 687.519801][T12494] ? do_syscall_64+0xb6/0x230 [ 687.524476][T12494] do_syscall_64+0xf3/0x230 [ 687.528974][T12494] ? clear_bhb_loop+0x35/0x90 [ 687.533655][T12494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.539543][T12494] RIP: 0033:0x7fd91f37ff19 [ 687.543960][T12494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.563573][T12494] RSP: 002b:00007fd9201c4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 687.571981][T12494] RAX: ffffffffffffffda RBX: 00007fd91f545fa0 RCX: 00007fd91f37ff19 [ 687.579948][T12494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 687.587917][T12494] RBP: 00007fd91f3f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 687.595909][T12494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.603873][T12494] R13: 0000000000000000 R14: 00007fd91f545fa0 R15: 00007ffd0d87e988 [ 687.611846][T12494] [ 687.615136][T12494] Kernel Offset: disabled [ 687.619542][T12494] Rebooting in 86400 seconds..