last executing test programs: 27m3.50007057s ago: executing program 3 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) dup3(r3, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a01040000000001000000020000001a321f"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14, r6, 0x311, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8010) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 27m1.81809379s ago: executing program 3 (id=375): syz_emit_ethernet(0x2e8, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2b2, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x19, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}]}}}}}}, 0x0) 27m1.500802902s ago: executing program 3 (id=379): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x208400, 0x0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES16=r0], 0x25) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f8) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 26m58.36629744s ago: executing program 3 (id=385): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r2, 0x5}) bind$alg(r1, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) 26m54.686122992s ago: executing program 3 (id=400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 26m53.1985168s ago: executing program 3 (id=402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x20) 26m36.124058611s ago: executing program 32 (id=402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x20) 14m0.926060283s ago: executing program 5 (id=2339): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13m51.925398336s ago: executing program 5 (id=2359): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x1, 0x2, 0x0, {0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x6b20}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r1, 0x0, 0x0) fdatasync(r1) 13m50.346645965s ago: executing program 5 (id=2365): syz_emit_ethernet(0x3f0, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3ba, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x19, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}, {0x0, 0x22, "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"}]}}}}}}, 0x0) 13m49.739571629s ago: executing program 5 (id=2366): r0 = syz_io_uring_setup(0x1c16, &(0x7f0000000040)={0x0, 0xf4bb, 0x1, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0xd, 0x0, 0x18) 13m48.837327544s ago: executing program 5 (id=2369): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13m44.070641922s ago: executing program 5 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) execve(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 13m28.151610206s ago: executing program 33 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) execve(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 12m5.793803658s ago: executing program 4 (id=2601): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 11m53.47254892s ago: executing program 4 (id=2626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setpriority(0x0, r0, 0x8000000000000001) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 11m52.402325136s ago: executing program 4 (id=2629): syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fanotify_init(0x8, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r0 = getpid() prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r1 = syz_open_procfs$userns(r0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f00000001c0)) 11m51.030477094s ago: executing program 4 (id=2632): syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r6, 0x200004) read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 11m48.761644208s ago: executing program 4 (id=2635): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012, 0xffff}}, 0x50) setpriority(0x2, r3, 0x8) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl(r4, 0xfffff000, &(0x7f0000000080)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004010) getdents64(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000009800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f00000002c0)={0x90, 0x0, r6, {0x0, 0x2, 0x8, 0xec4e, 0x7, 0x33, {0x6, 0x8, 0x6, 0x66, 0xdd, 0x0, 0x5, 0x6, 0xae09, 0xe000, 0x10, 0x0, r2, 0x2, 0x6}}}, 0x90) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="10"], 0x0, 0x0}) pipe(&(0x7f0000000280)) r7 = epoll_create1(0x0) ioctl$FIOCLEX(r7, 0x5451) 11m48.201952491s ago: executing program 4 (id=2637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x67, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860800702f1ffe80000000000000ff"], 0xffdd) 11m32.674115652s ago: executing program 34 (id=2637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x67, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860800702f1ffe80000000000000ff"], 0xffdd) 33.478342384s ago: executing program 1 (id=4448): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x102200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setregid(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/69, 0x45) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000003040)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000003200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5d, r9}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000006c0)) 30.702636197s ago: executing program 1 (id=4455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001180)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @generic="df4df745"}}, 0xc) 29.068195246s ago: executing program 1 (id=4461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r3, r2, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 28.006205291s ago: executing program 1 (id=4465): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x102200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setregid(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/69, 0x45) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000003040)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000003200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5d, r9}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000006c0)) 27.986253611s ago: executing program 0 (id=4466): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x54) 27.486103554s ago: executing program 0 (id=4467): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x400000002, 0x0) userfaultfd(0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create(0x4) syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x80, 0x0, 0x3ff8, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x24, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 26.863014326s ago: executing program 1 (id=4469): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) socket(0x1d, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 26.718686587s ago: executing program 0 (id=4470): socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0, 0x0) 25.605824603s ago: executing program 1 (id=4474): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x72, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x45b) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) write$nci(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="747b43d6"], 0x4) read$nci(r1, 0x0, 0x0) write$nci(r1, 0x0, 0x5) 25.577006163s ago: executing program 0 (id=4475): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getrlimit(0x8, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18060000000000000000000000000000851000000200000040000000000000009500007b842963af9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x92, &(0x7f0000000300)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x6) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) 23.666510582s ago: executing program 6 (id=4480): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x102200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setregid(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/69, 0x45) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000003040)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000003200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5d, r9}) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000006c0)) 23.045965185s ago: executing program 0 (id=4481): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x54) 23.045765405s ago: executing program 2 (id=4482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) 22.810185776s ago: executing program 0 (id=4483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0xff}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) userfaultfd(0x1) close_range(r3, 0xffffffffffffffff, 0x0) 22.809920636s ago: executing program 2 (id=4484): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x400000002, 0x0) userfaultfd(0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create(0x4) syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x80, 0x0, 0x3ff8, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x24, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 22.301811149s ago: executing program 2 (id=4486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 22.298459459s ago: executing program 6 (id=4487): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) 22.10623582s ago: executing program 6 (id=4488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 22.08593381s ago: executing program 2 (id=4489): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080), 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 21.822953592s ago: executing program 6 (id=4490): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x3, 0x0}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0xbbb5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000000)={r9}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000003400058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10c00e00000001000000", 0x58}], 0x1) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xc, 0x3, 0x8, 0x4c202, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0xfffffffd, 0x0, @value, @void, @void, @value}, 0x50) 20.879977176s ago: executing program 6 (id=4491): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getrlimit(0x8, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18060000000000000000000000000000851000000200000040000000000000009500007b842963af9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x92, &(0x7f0000000300)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x6) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) 20.868171386s ago: executing program 2 (id=4492): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) io_setup(0xffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x17, &(0x7f00000000c0)={0x22, 0x4, 0x3}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x8, @local}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x110) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000300)=""/146, 0x92}], 0x2, 0x5c, 0x2) socket$inet6(0xa, 0x1, 0x800000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 18.996804616s ago: executing program 2 (id=4494): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x54) 18.755229917s ago: executing program 7 (id=4496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x28011, r0, 0x1000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x24008054) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x74, r3, 0x8214e06968925b56, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000884}, 0x10000810) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="0073a23a198129015a0000000000000000000000ac6854a1e20299ab002555b1cdbfef3332f270f5c063358a6be9686d0e396a8e70bbf603f75103cae8c801998ace2bcd4e26b38dc2fe540013b505ce00b244d6cd77b415ae26e99aee4dc4584e09bfe9a035f5568f017f1d583a425f6509fb8102c73385a3f70926f1073fa494be1411b454cc410c6ce7fcb7e538358d32c1168a7c812a4a213b42561f2a0ef083dd167d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003be0000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x200) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x5453, 0x0) 18.754938007s ago: executing program 6 (id=4497): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x400000002, 0x0) userfaultfd(0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create(0x4) syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x80, 0x0, 0x3ff8, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x24, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 17.844102171s ago: executing program 7 (id=4498): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x102200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setregid(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/69, 0x45) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000003040)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000003200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5d, r9}) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000006c0)) 17.248026364s ago: executing program 7 (id=4499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 17.150122744s ago: executing program 7 (id=4500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x1e, 0x109}, 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf36, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 16.14578634s ago: executing program 7 (id=4501): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x3, 0x0}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0xbbb5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000000)={r9}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000003400058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10c00e00000001000000", 0x58}], 0x1) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xc, 0x3, 0x8, 0x4c202, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0xfffffffd, 0x0, @value, @void, @void, @value}, 0x50) 15.216147674s ago: executing program 7 (id=4502): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) keyctl$clear(0x5, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x4, 0x0, 0x0, @void, @value}, 0x10) socket(0x1, 0x2, 0x0) 10.188649439s ago: executing program 35 (id=4474): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x72, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000c00)="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", 0x45b) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) write$nci(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="747b43d6"], 0x4) read$nci(r1, 0x0, 0x0) write$nci(r1, 0x0, 0x5) 7.141656064s ago: executing program 36 (id=4483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0xff}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) userfaultfd(0x1) close_range(r3, 0xffffffffffffffff, 0x0) 3.095460784s ago: executing program 37 (id=4494): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x54) 3.041963105s ago: executing program 38 (id=4497): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x400000002, 0x0) userfaultfd(0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create(0x4) syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x80, 0x0, 0x3ff8, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x24, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 39 (id=4502): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) keyctl$clear(0x5, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x4, 0x0, 0x0, @void, @value}, 0x10) socket(0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): ge_slave_1) entered disabled state [ 1304.212363][T15315] device bridge_slave_1 entered promiscuous mode [ 1304.420828][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.484322][ T4262] Bluetooth: hci2: command 0x0409 tx timeout [ 1305.719242][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.160667][T15315] team0: Port device team_slave_0 added [ 1306.168975][T15315] team0: Port device team_slave_1 added [ 1307.157359][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.191184][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.550183][T13175] Bluetooth: hci2: command 0x041b tx timeout [ 1307.642575][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.677903][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.704095][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.872450][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.733187][T13175] Bluetooth: hci2: command 0x040f tx timeout [ 1310.355191][T15315] device hsr_slave_0 entered promiscuous mode [ 1311.565984][T15315] device hsr_slave_1 entered promiscuous mode [ 1311.586588][T15315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1311.615391][T15315] Cannot create hsr debugfs directory [ 1311.729741][T15461] chnl_net:caif_netlink_parms(): no params data found [ 1311.789338][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 1315.301466][T15461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.313715][T15461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.341559][T15461] device bridge_slave_0 entered promiscuous mode [ 1315.366147][T13335] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1315.456055][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.467002][T15461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.509458][T15461] device bridge_slave_1 entered promiscuous mode [ 1315.544531][ T4619] device hsr_slave_0 left promiscuous mode [ 1315.566123][ T4619] device hsr_slave_1 left promiscuous mode [ 1315.581087][T13335] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 1315.606543][T13335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.633535][T13335] usb 2-1: config 0 descriptor?? [ 1315.663234][ T4619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1315.673726][T13335] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1315.694325][ T4619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.748220][ T4619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1315.774450][ T4619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.818506][ T4619] device bridge_slave_1 left promiscuous mode [ 1315.845453][ T4619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.871754][ T4619] device bridge_slave_0 left promiscuous mode [ 1315.885249][ T4619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.024139][ T4619] device veth1_macvtap left promiscuous mode [ 1316.040342][ T4619] device veth0_macvtap left promiscuous mode [ 1316.046517][ T4619] device veth1_vlan left promiscuous mode [ 1316.053162][ T4619] device veth0_vlan left promiscuous mode [ 1316.427300][T13335] gspca_spca505: reg write: error -110 [ 1316.433319][T13335] spca505: probe of 2-1:0.0 failed with error -5 [ 1317.184973][T15579] vivid-003: kernel_thread() failed [ 1318.675559][ T4619] team0 (unregistering): Port device team_slave_1 removed [ 1318.766732][ T4619] team0 (unregistering): Port device team_slave_0 removed [ 1318.826705][ T4619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.884343][ T4619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.496615][ T4619] bond0 (unregistering): Released all slaves [ 1320.966885][T15461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.002948][T15461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.101952][T13335] usb 2-1: USB disconnect, device number 10 [ 1322.726773][T15461] team0: Port device team_slave_0 added [ 1322.777098][T15461] team0: Port device team_slave_1 added [ 1323.754179][T15634] delete_channel: no stack [ 1323.763675][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 1323.787378][T15461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.813990][T15461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.006645][T15461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.044839][T15461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.051939][T15461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.078018][T15461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.949790][T15461] device hsr_slave_0 entered promiscuous mode [ 1324.980067][T15461] device hsr_slave_1 entered promiscuous mode [ 1325.208796][T15461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1325.216418][T15461] Cannot create hsr debugfs directory [ 1328.591021][T15315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1328.639646][T15315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1329.322751][T15315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1329.725602][T15315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1330.199731][T15315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.273245][T15315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.288573][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1330.315395][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1330.414640][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1330.433545][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1330.445274][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.452544][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.469584][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1330.610161][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1330.619757][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1330.650078][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.657225][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.700676][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1332.409198][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1332.548689][T10467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1332.565559][T10467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1332.585496][T10467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1332.610077][T10467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1332.680325][T10467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1332.866034][T15416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1332.881699][T15416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1332.896332][T15416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1332.988434][T15416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1335.089229][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1335.096790][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1335.158502][T15315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.207125][ T4619] device hsr_slave_0 left promiscuous mode [ 1335.230669][ T4619] device hsr_slave_1 left promiscuous mode [ 1335.264940][ T4619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.275940][ T4619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.309181][ T4619] device bridge_slave_1 left promiscuous mode [ 1335.315468][ T4619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.340415][ T4619] device bridge_slave_0 left promiscuous mode [ 1335.367438][ T4619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.143066][ T4619] team0 (unregistering): Port device team_slave_1 removed [ 1337.434158][ T4619] team0 (unregistering): Port device team_slave_0 removed [ 1338.241230][ T4619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.455840][ T4619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.303713][T14598] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1339.493754][T14598] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x99, skipping [ 1339.521391][T14598] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1339.530808][T14598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.540450][T14598] usb 2-1: Product: syz [ 1339.544747][T14598] usb 2-1: Manufacturer: syz [ 1339.552049][T14598] usb 2-1: SerialNumber: syz [ 1339.559863][T14598] usb 2-1: config 0 descriptor?? [ 1339.568132][T15760] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1339.581038][T14598] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1339.746921][ T4619] bond0 (unregistering): Released all slaves [ 1339.793261][T13335] usb 2-1: USB disconnect, device number 11 [ 1339.927211][T15416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1339.944307][T15416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1340.009692][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1340.028659][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1340.051937][T15315] device veth0_vlan entered promiscuous mode [ 1340.080346][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1340.105257][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1340.124989][T15315] device veth1_vlan entered promiscuous mode [ 1340.151283][T15461] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1340.217757][T15461] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1340.235042][T15461] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1340.263778][T15461] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1340.419163][T15315] device veth0_macvtap entered promiscuous mode [ 1340.429006][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1340.437487][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1340.469646][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1340.479153][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1340.505311][T15315] device veth1_macvtap entered promiscuous mode [ 1340.536331][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1340.549561][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1340.647934][T13335] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1340.761863][T15461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.778948][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.946746][T15781] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1340.958570][T15781] overlayfs: missing 'lowerdir' [ 1341.068498][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.118813][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.234205][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.455047][T15315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.486039][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.521894][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.543557][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.569870][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.619461][T13335] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1341.657672][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.677149][T13335] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1341.703727][T13335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.712045][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.752700][T13335] usb 3-1: Product: syz [ 1341.756939][T13335] usb 3-1: Manufacturer: syz [ 1341.769044][T15315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.807027][T13335] usb 3-1: SerialNumber: syz [ 1341.843317][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1341.852792][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1341.862044][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1341.871141][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1341.883674][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1341.898533][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1342.151822][T15461] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.857512][T15773] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1342.866529][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1342.968099][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1342.999565][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.006784][ T7333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.093038][T13335] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1343.133063][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1343.141686][T13335] usb 3-1: USB disconnect, device number 8 [ 1343.196299][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1343.214243][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1343.228967][T15800] netlink: set zone limit has 8 unknown bytes [ 1343.259953][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.267131][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.326768][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1343.377888][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1343.438610][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1343.491650][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1343.550990][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1343.565832][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1343.632293][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1343.657497][T13335] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1343.685212][T15461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1343.744882][T15461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1343.864581][T13335] usb 3-1: Using ep0 maxpacket: 8 [ 1343.885522][T13335] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 1343.895300][ T4262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1343.898496][T13335] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1343.919436][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1343.921231][T13335] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1343.938001][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1343.953761][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1343.962438][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1343.969921][ T4262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1344.000710][T13335] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1344.011290][T13335] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.022740][T13335] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 1344.034665][T13335] usb 3-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.055395][T13335] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1344.065068][T13335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.096974][T15773] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1344.124691][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1344.146397][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1344.162615][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1344.178884][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1344.202653][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1344.574999][T13335] usb 3-1: usb_control_msg returned -71 [ 1344.582735][T13335] usbtmc 3-1:16.0: can't read capabilities [ 1344.645461][T13335] usb 3-1: USB disconnect, device number 9 [ 1345.705939][T15807] chnl_net:caif_netlink_parms(): no params data found [ 1345.925073][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1345.934299][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1345.988199][T15461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.029050][T13175] Bluetooth: hci3: command 0x0409 tx timeout [ 1346.719199][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.726628][T15807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.812221][T15807] device bridge_slave_0 entered promiscuous mode [ 1347.489038][T15807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.107391][T13175] Bluetooth: hci3: command 0x041b tx timeout [ 1348.192872][T15807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.256052][T15807] device bridge_slave_1 entered promiscuous mode [ 1348.441408][T15807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.493245][T15807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.703891][T15807] team0: Port device team_slave_0 added [ 1348.795699][T15807] team0: Port device team_slave_1 added [ 1349.106460][T15807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.128943][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.158685][T15807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.208898][T15807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.226724][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.344818][T15807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.458748][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1349.494521][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1349.612860][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1349.624334][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1349.645493][T15461] device veth0_vlan entered promiscuous mode [ 1349.660377][T15807] device hsr_slave_0 entered promiscuous mode [ 1349.674324][T15807] device hsr_slave_1 entered promiscuous mode [ 1349.723754][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1349.733455][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1349.796460][T15461] device veth1_vlan entered promiscuous mode [ 1349.930868][T15461] device veth0_macvtap entered promiscuous mode [ 1350.017494][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1350.026188][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1350.089106][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1350.123821][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1350.159032][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1350.193970][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 1351.540876][T15461] device veth1_macvtap entered promiscuous mode [ 1351.564726][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1352.267448][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 1352.516238][T15461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.571745][T15461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.614146][T15461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.699707][T15461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.713356][T15461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.747315][T15461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.780702][T15461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.965211][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1352.997713][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1353.171676][T15461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.203911][T15461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.231652][T15461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.254797][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3000'. [ 1353.262620][T15461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.284015][T15461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.310143][T15461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.361258][T15461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.400457][T15461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.440110][T15461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.470254][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1353.494600][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1353.652817][T15461] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.674618][T15461] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.713979][T15461] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.756994][T15461] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.046343][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.096069][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.206749][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1354.295229][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.315266][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.392338][T10467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1354.440031][ T5839] device hsr_slave_0 left promiscuous mode [ 1354.463861][ T5839] device hsr_slave_1 left promiscuous mode [ 1354.494860][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.532355][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.569144][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.579301][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.588186][ T5839] device bridge_slave_1 left promiscuous mode [ 1354.594779][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.604096][ T5839] device bridge_slave_0 left promiscuous mode [ 1354.620257][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.705122][ T5839] device veth1_macvtap left promiscuous mode [ 1354.712704][ T5839] device veth0_macvtap left promiscuous mode [ 1354.719565][ T5839] device veth1_vlan left promiscuous mode [ 1354.725645][ T5839] device veth0_vlan left promiscuous mode [ 1355.492581][ T5839] team0 (unregistering): Port device team_slave_1 removed [ 1355.547139][ T5839] team0 (unregistering): Port device team_slave_0 removed [ 1355.602389][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.663440][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.145346][ T5839] bond0 (unregistering): Released all slaves [ 1357.300958][T15933] team0: Cannot enslave team device to itself [ 1357.545344][T15807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1357.667043][T15807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1357.732450][T15807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1357.804127][T15807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1359.316825][T15807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.400724][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1359.434273][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1359.494696][T15807] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.537546][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1359.577512][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1359.613478][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.620842][ T7333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.724014][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1359.753151][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1359.779483][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1359.788494][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.795605][ T7333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.804303][ T7333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1359.818322][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1359.936028][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1359.964404][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1360.010378][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1360.033543][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1360.064842][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1360.103203][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1360.122497][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1360.142773][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1360.162830][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1360.185279][T15807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1360.849027][T15807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.886518][T13217] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1360.907857][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1360.982553][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1361.037356][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1361.092801][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1361.705872][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.712266][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.890230][T13217] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1361.906573][T13217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.914628][T13217] usb 2-1: Product: syz [ 1361.919309][T13217] usb 2-1: Manufacturer: syz [ 1361.924032][T13217] usb 2-1: SerialNumber: syz [ 1361.931364][T13217] usb 2-1: config 0 descriptor?? [ 1361.952666][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1361.953749][T13217] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1361.973286][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1362.004437][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1362.074918][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1362.179548][T15807] device veth0_vlan entered promiscuous mode [ 1362.232018][T15807] device veth1_vlan entered promiscuous mode [ 1362.297087][T15807] device veth0_macvtap entered promiscuous mode [ 1362.330491][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1362.584224][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1362.793775][T15807] device veth1_macvtap entered promiscuous mode [ 1362.955103][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1362.975544][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1363.034887][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.106914][T13217] gspca_sunplus: reg_w_riv err -71 [ 1363.112164][T13217] sunplus: probe of 2-1:0.0 failed with error -71 [ 1363.127550][T13217] usb 2-1: USB disconnect, device number 12 [ 1363.136264][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.149866][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.160605][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.170753][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.181577][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.193317][T15807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.206737][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1363.222513][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1363.243801][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.264630][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.292563][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.329860][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.362863][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.391137][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.416496][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.476479][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.509070][T15807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.657461][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1363.675784][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1364.809385][T15807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.846473][T15807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.869114][T15807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.878339][T15807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.374283][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3030'. [ 1365.988465][ T4931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.988531][ T4931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.048346][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1366.157425][ T4931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.157489][ T4931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.160609][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1368.894713][T16096] 9pnet: p9_errstr2errno: server reported unknown error @:®dº.Åo^½æ$h9ç4ÔY½JS§jp [ 1369.294401][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1369.305378][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1369.326818][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1369.377524][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1369.387089][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1369.394583][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1369.652787][T16124] tmpfs: Unknown parameter 'usrquota' [ 1369.665869][ T4931] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.989436][ T4931] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.102675][T16127] kvm [16126]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 1370.350158][ T4931] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.462338][ T4931] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.476727][T13175] Bluetooth: hci0: command 0x0409 tx timeout [ 1371.476764][ T4251] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1371.492085][ T4251] Bluetooth: hci2: Injecting HCI hardware error event [ 1371.501631][ T4262] Bluetooth: hci2: hardware error 0x00 [ 1372.990451][T16166] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1373.559119][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 1374.037508][T16107] chnl_net:caif_netlink_parms(): no params data found [ 1374.355957][T16174] netlink: 184 bytes leftover after parsing attributes in process `syz.7.3048'. [ 1374.425840][ T4262] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1375.078733][ T4931] tipc: Left network mode [ 1375.177237][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.184447][T16107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.199980][T16107] device bridge_slave_0 entered promiscuous mode [ 1375.539416][T16107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.554873][T16107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.563712][T16107] device bridge_slave_1 entered promiscuous mode [ 1375.626054][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 1376.459331][T16107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.588423][T16107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.885029][T16107] team0: Port device team_slave_0 added [ 1377.037426][T16107] team0: Port device team_slave_1 added [ 1377.225279][T16107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.242453][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.338304][T16107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.446585][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1377.765725][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 1378.375893][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1379.685709][T16107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.694000][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.332893][T16107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.814088][T16239] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3059' sets config #0 [ 1381.208348][ T4313] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1381.475519][ T4313] usb 1-1: Using ep0 maxpacket: 8 [ 1381.489589][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1381.499201][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1381.506962][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1381.530701][T16243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3061'. [ 1381.536923][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.562116][T16107] device hsr_slave_0 entered promiscuous mode [ 1381.582458][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1381.604915][ T4313] usb 1-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 1381.636414][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.667315][T16107] device hsr_slave_1 entered promiscuous mode [ 1381.679366][ T4313] usb 1-1: config 0 descriptor?? [ 1381.686012][T16107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1381.716913][T16251] input: syz1 as /devices/virtual/input/input14 [ 1381.730273][T16107] Cannot create hsr debugfs directory [ 1381.929786][T16237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.939237][T16237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.541772][ T4313] usbhid 1-1:0.0: can't add hid device: -71 [ 1383.549317][ T4313] usbhid: probe of 1-1:0.0 failed with error -71 [ 1383.606218][ T4313] usb 1-1: USB disconnect, device number 8 [ 1383.931568][ T4931] device hsr_slave_0 left promiscuous mode [ 1383.950224][ T4931] device hsr_slave_1 left promiscuous mode [ 1383.968143][ T4931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.009253][ T4931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.827582][ T4931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.881337][ T4931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.937502][ T4931] device bridge_slave_1 left promiscuous mode [ 1384.977610][ T4931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.001163][ T4931] device bridge_slave_0 left promiscuous mode [ 1385.015436][ T4931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.214517][ T4931] device veth1_macvtap left promiscuous mode [ 1385.236179][ T4931] device veth0_macvtap left promiscuous mode [ 1385.284811][ T4931] device veth1_vlan left promiscuous mode [ 1385.299530][ T4931] device veth0_vlan left promiscuous mode [ 1392.814875][T13336] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1393.004779][T13336] usb 8-1: Using ep0 maxpacket: 16 [ 1393.034900][T13336] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.053197][T13336] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1393.064393][T13336] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.104580][T13336] usb 8-1: config 0 descriptor?? [ 1393.420263][ T4931] team0 (unregistering): Port device team_slave_1 removed [ 1393.483413][ T27] audit: type=1326 audit(1732911164.866:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1393.507503][ T27] audit: type=1326 audit(1732911164.866:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1393.509635][ T4931] team0 (unregistering): Port device team_slave_0 removed [ 1393.566303][ T27] audit: type=1326 audit(1732911164.866:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1393.569573][T13336] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 1393.644716][T13336] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 1393.662768][ T27] audit: type=1326 audit(1732911164.866:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1393.666873][T13336] hid-steam 0003:28DE:1102.0003: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 1393.685670][ T27] audit: type=1326 audit(1732911164.866:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1393.748918][ T4931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.795900][ T27] audit: type=1326 audit(1732911164.866:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1393.887928][ T27] audit: type=1326 audit(1732911164.866:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1393.937879][T13336] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 1393.945589][T13336] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 1393.976369][ T27] audit: type=1326 audit(1732911164.866:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1393.990857][T13336] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 1394.180142][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1394.251492][ T27] audit: type=1326 audit(1732911164.866:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1394.325663][T13336] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 1394.723285][ T27] audit: type=1326 audit(1732911164.866:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e1780809 code=0x7ffc0000 [ 1394.754278][T13336] input: Steam Controller as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1102.0003/input/input15 [ 1394.844984][T13336] usb 8-1: USB disconnect, device number 2 [ 1394.940118][ T4931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.031110][T13336] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 1398.095154][T16385] ufs: You didn't specify the type of your ufs filesystem [ 1398.095154][T16385] [ 1398.095154][T16385] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1398.095154][T16385] [ 1398.095154][T16385] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1398.128247][T16385] ufs: ufstype=old is supported read-only [ 1398.141158][T16385] ufs: ufs_fill_super(): bad magic number [ 1398.898600][ T9731] kernel write not supported for file /nvme-fabrics (pid: 9731 comm: kworker/1:1) [ 1399.289253][ T4931] bond0 (unregistering): Released all slaves [ 1402.304177][T16107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1402.319901][T16107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1402.330852][T16107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1402.350897][T16107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1402.385465][ T4296] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1402.588697][ T4296] usb 1-1: Using ep0 maxpacket: 8 [ 1402.598864][ T4296] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1402.710215][ T4296] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1402.770909][ T4296] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1402.813128][ T4296] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1402.867109][ T4296] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1402.916986][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.157674][T16107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.179907][ T4296] usb 1-1: GET_CAPABILITIES returned 0 [ 1403.188680][ T4296] usbtmc 1-1:16.0: can't read capabilities [ 1403.229844][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1403.248256][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1403.271911][T16107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.293930][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1403.334752][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1403.343327][ T4931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.350566][ T4931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.383713][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1403.424455][T16421] usbtmc 1-1:16.0: Unable to send data, error -71 [ 1403.442033][T13336] usb 1-1: USB disconnect, device number 9 [ 1403.445310][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1403.503263][T16449] tmpfs: Unknown parameter 'usrquota' [ 1403.513326][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1403.527006][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1403.544721][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.551897][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.586321][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1403.614628][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1403.786048][T16449] xt_cgroup: xt_cgroup: no path or classid specified [ 1403.896569][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1404.003719][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1404.055550][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1404.063775][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1404.073559][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1404.104888][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1404.114630][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1404.123606][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1404.133743][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1404.145472][T16107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1406.174661][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1406.182200][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.258910][T16107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.479503][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.541456][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.688736][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.894564][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1407.308173][T16107] device veth0_vlan entered promiscuous mode [ 1407.371085][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1407.381384][T16500] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 1407.426140][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1407.509041][T16107] device veth1_vlan entered promiscuous mode [ 1408.681888][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1408.697146][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1408.745111][T16107] device veth0_macvtap entered promiscuous mode [ 1408.797247][T16107] device veth1_macvtap entered promiscuous mode [ 1408.904172][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.044662][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.077718][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.090867][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.145369][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.188668][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.227295][T16107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.521448][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1410.541253][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1410.553269][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1410.574432][T16529] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 1410.590985][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.608320][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.630415][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.651719][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.670945][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.690565][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.710869][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.746101][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.779079][T16107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.800450][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1410.839577][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1410.907150][T16107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.934422][T16107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.943182][T16107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.993825][T16107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.260322][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.290322][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.343433][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1411.800711][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.827501][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.848983][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1415.137785][T16578] netlink: 448 bytes leftover after parsing attributes in process `syz.1.3136'. [ 1415.149457][T16578] device caif0 entered promiscuous mode [ 1416.015616][ T4489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.261912][ T4489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.391821][ T4251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1416.403280][ T4251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1416.417688][T13175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1416.431710][ T4251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1416.441040][ T4251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1416.448939][ T4251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1416.515904][ T4489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.643558][T14598] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1416.810266][ T4489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.916862][T16604] loop2: detected capacity change from 0 to 7 [ 1416.920044][ T4321] Bluetooth: hci5: Frame reassembly failed (-84) [ 1416.932670][T16604] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1417.063802][T16604] loop2: partition table partially beyond EOD, truncated [ 1417.122381][T16613] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3144'. [ 1417.132143][T16613] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3144'. [ 1417.613971][T16604] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1417.663131][T14598] usb 2-1: Using ep0 maxpacket: 16 [ 1417.679690][T14598] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1417.712611][T16604] loop2: p2 start 579963744 is beyond EOD, truncated [ 1417.731360][T14598] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1417.752500][T14598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.779582][T14598] usb 2-1: Product: syz [ 1417.784479][T14598] usb 2-1: Manufacturer: syz [ 1417.801874][T14598] usb 2-1: SerialNumber: syz [ 1417.818125][T14598] usb 2-1: config 0 descriptor?? [ 1417.934759][ T52] block nbd6: Attempted send on invalid socket [ 1417.944264][ T52] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1417.961821][T16620] hpfs: hpfs_map_sector(): read error [ 1418.503736][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 1418.891526][T16590] chnl_net:caif_netlink_parms(): no params data found [ 1418.993693][ T4262] Bluetooth: hci5: command 0xfc11 tx timeout [ 1419.002432][ T4251] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1419.112213][ T4489] bond1: (slave ip6gretap1): Releasing backup interface [ 1419.498513][T16590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.502332][T13336] usb 2-1: USB disconnect, device number 13 [ 1419.521110][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.563237][T16590] device bridge_slave_0 entered promiscuous mode [ 1419.667446][T16590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.946165][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.229787][T16590] device bridge_slave_1 entered promiscuous mode [ 1420.327889][T16655] fuse: Bad value for 'fd' [ 1420.583533][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 1420.660273][T16661] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18 [ 1420.677620][T16590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.739810][T16590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.982131][T16590] team0: Port device team_slave_0 added [ 1421.118459][T16590] team0: Port device team_slave_1 added [ 1421.263902][T16590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.310328][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.403078][T16590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.425102][T16590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.432083][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.563270][T16590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.825072][T16689] overlayfs: failed to get inode (-116) [ 1421.844716][T16689] overlayfs: failed to get inode (-116) [ 1422.259852][T16590] device hsr_slave_0 entered promiscuous mode [ 1422.290393][T16590] device hsr_slave_1 entered promiscuous mode [ 1422.332316][T16590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1422.366675][T16590] Cannot create hsr debugfs directory [ 1422.431342][ T4489] device hsr_slave_0 left promiscuous mode [ 1422.470840][ T4489] device hsr_slave_1 left promiscuous mode [ 1422.492240][ T4489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.521726][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.550447][ T4489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.566035][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.601338][ T4489] device bridge_slave_1 left promiscuous mode [ 1422.615547][ T4489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.655486][ T4489] device bridge_slave_0 left promiscuous mode [ 1422.663528][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 1422.673380][ T4489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.761688][ T4489] device veth1_macvtap left promiscuous mode [ 1422.793842][ T4489] device veth0_macvtap left promiscuous mode [ 1422.815775][ T4489] device veth1_vlan left promiscuous mode [ 1422.837718][ T4489] device veth0_vlan left promiscuous mode [ 1422.870148][T16708] fuse: Bad value for 'fd' [ 1423.067721][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.450649][ T4489] bond1 (unregistering): Released all slaves [ 1424.743112][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 1424.945115][ T4489] team0 (unregistering): Port device team_slave_1 removed [ 1425.030994][ T4489] team0 (unregistering): Port device team_slave_0 removed [ 1425.121852][ T4489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.221611][ T4489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.172245][ T4489] bond0 (unregistering): Released all slaves [ 1429.945358][T16590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1429.984291][T16590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1430.039303][T16590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1430.088364][T16590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1430.430951][T16590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.510185][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1430.525710][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1430.559151][T16590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.610926][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1430.631609][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1430.651641][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.658853][ T4465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.740061][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1430.778231][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1430.871586][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.878828][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.997976][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1431.006918][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1431.016657][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1431.035935][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1431.047040][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1431.065039][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1431.095097][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1431.112155][T16590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1431.142791][T16590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1431.166409][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1431.176168][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1431.215421][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1431.235198][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1431.259156][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1431.357304][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1431.980217][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1432.000620][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1432.250327][T16590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.346007][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1432.369628][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1433.644117][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3188'. [ 1433.803448][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1433.817256][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1433.826857][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1433.835558][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1433.882886][T16590] device veth0_vlan entered promiscuous mode [ 1434.191543][T16590] device veth1_vlan entered promiscuous mode [ 1434.927072][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1435.000350][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1435.114197][T16836] overlayfs: failed to resolve './file0': -2 [ 1435.646231][T16590] device veth0_macvtap entered promiscuous mode [ 1435.659429][T16590] device veth1_macvtap entered promiscuous mode [ 1435.725318][T16590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.736515][T16590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.746446][T16590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.757085][T16590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.766995][T16590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.777511][T16590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.793469][T16843] binder: BINDER_SET_CONTEXT_MGR already set [ 1435.799920][T16843] binder: 16831:16843 ioctl 4018620d 20004a80 returned -16 [ 1435.816243][T16590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.827348][T16590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.838883][T16590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.849911][T16590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.300688][T16590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.352249][T16590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.392575][T16590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.407246][T16590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.462071][T16590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.487412][T16590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.552433][T16590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.599714][T16590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.611732][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1436.627220][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1436.647375][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1436.656689][ T9731] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1436.750300][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1436.853413][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1436.862948][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1436.883855][T16590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.899347][T16590] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.908297][T16590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.917710][T16590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.118339][ T9731] usb 1-1: Using ep0 maxpacket: 8 [ 1437.181276][ T9731] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1437.338486][ T9731] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1437.650998][ T9731] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1437.678611][ T9731] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1437.731072][ T9731] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1437.745569][ T9731] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1437.830962][ T9731] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1437.839095][ T9731] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1437.871550][ T9731] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1437.932212][ T9731] usb 1-1: string descriptor 0 read error: -22 [ 1437.938585][ T9731] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1437.976098][ T5839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.986060][ T9731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.000016][ T5839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.027341][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1438.101282][ T9731] adutux 1-1:168.0: interrupt endpoints not found [ 1438.145853][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.181090][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.229606][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1440.016477][ T4296] usb 1-1: USB disconnect, device number 10 [ 1440.163390][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 1440.163408][ T27] audit: type=1804 audit(1732911211.539:996): pid=16896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3207" name="/newroot/204/bus/bus" dev="overlay" ino=1095 res=1 errno=0 [ 1441.864915][T16917] mkiss: ax0: crc mode is auto. [ 1446.526170][ T27] audit: type=1804 audit(1732911217.909:997): pid=16977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3224" name="/newroot/206/bus/bus" dev="overlay" ino=1114 res=1 errno=0 [ 1451.185701][T17036] overlayfs: failed to resolve './file1': -2 [ 1455.564706][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x86 [ 1455.599231][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe8 [ 1455.628989][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x876 [ 1455.651040][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8da [ 1455.697251][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd5 [ 1455.729184][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x88f [ 1455.765126][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8d4 [ 1455.783349][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8bd [ 1455.816562][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x7 [ 1455.845383][T17062] kvm [17061]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8b1 [ 1456.481799][ T27] audit: type=1804 audit(1732911227.870:998): pid=17093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3252" name="/newroot/213/bus/bus" dev="overlay" ino=1158 res=1 errno=0 [ 1456.491309][T14598] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1457.207774][T17101] Invalid ELF header magic: != ELF [ 1457.463294][T14598] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1458.224122][T14598] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.821851][T14598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1458.860580][T14598] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1458.916994][T14598] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1458.936446][T14598] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1458.957494][T14598] usb 2-1: Product: syz [ 1458.966798][T14598] usb 2-1: Manufacturer: syz [ 1460.268842][ T52] block nbd7: Attempted send on invalid socket [ 1460.275742][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1460.416621][T17125] hpfs: hpfs_map_sector(): read error [ 1460.589761][T14598] usb 2-1: USB disconnect, device number 14 [ 1461.805181][ T27] audit: type=1804 audit(1732911233.190:999): pid=17145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3265" name="/newroot/12/bus/bus" dev="overlay" ino=88 res=1 errno=0 [ 1461.956484][T17145] Invalid ELF header magic: != ELF [ 1464.905014][T17175] loop2: detected capacity change from 0 to 7 [ 1464.932074][T17175] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1465.091458][T17175] loop2: partition table partially beyond EOD, truncated [ 1465.091480][T17175] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1465.092199][T17175] loop2: p2 start 579963744 is beyond EOD, truncated [ 1465.170277][T17176] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1465.170312][T17176] loop2: partition table partially beyond EOD, truncated [ 1465.170333][T17176] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1465.176404][T17176] loop2: p2 start 579963744 is beyond EOD, truncated [ 1466.047668][ T3623] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1466.047703][ T3623] loop2: partition table partially beyond EOD, truncated [ 1466.047871][ T3623] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1466.051511][ T3623] loop2: p2 start 579963744 is beyond EOD, truncated [ 1466.160728][ T4251] Bluetooth: hci3: command 0x0406 tx timeout [ 1466.828047][ T5839] Bluetooth: hci5: Frame reassembly failed (-84) [ 1467.416987][ T3623] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1467.417017][ T3623] loop2: partition table partially beyond EOD, truncated [ 1467.417178][ T3623] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1467.418140][ T3623] loop2: p2 start 579963744 is beyond EOD, truncated [ 1467.647284][T17210] ufs: You didn't specify the type of your ufs filesystem [ 1467.647284][T17210] [ 1467.647284][T17210] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1467.647284][T17210] [ 1467.647284][T17210] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1467.647424][T17210] ufs: ufstype=old is supported read-only [ 1467.648690][T17210] ufs: ufs_fill_super(): bad magic number [ 1468.596815][ T27] audit: type=1804 audit(1732911239.981:1000): pid=17215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3279" name="/newroot/31/bus/bus" dev="overlay" ino=192 res=1 errno=0 [ 1468.599732][T17213] Invalid ELF header magic: != ELF [ 1468.902384][ T4251] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1468.903183][ T4262] Bluetooth: hci5: command 0xfc11 tx timeout [ 1469.304518][ T3623] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1469.304549][ T3623] loop2: partition table partially beyond EOD, truncated [ 1469.304707][ T3623] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1469.315844][ T3623] loop2: p2 start 579963744 is beyond EOD, truncated [ 1469.978272][T13077] udevd[13077]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1470.070512][T14598] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1470.780311][T14598] usb 3-1: Using ep0 maxpacket: 16 [ 1470.787550][T14598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.846303][T14598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.980943][T17239] fuse: Bad value for 'fd' [ 1471.035999][T14598] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1471.914611][T14598] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1471.930310][T14598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.941105][T14598] usb 3-1: config 0 descriptor?? [ 1472.244953][ T27] audit: type=1804 audit(1732911243.631:1001): pid=17251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3291" name="/newroot/60/bus/bus" dev="overlay" ino=385 res=1 errno=0 [ 1472.246302][T17251] Invalid ELF header magic: != ELF [ 1473.167492][T14598] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 1473.171106][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.185155][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.268843][T14598] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1473.278849][T14598] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1473.286233][T14598] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1473.300275][T14598] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1473.308548][T14598] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1473.356560][T14598] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1473.378945][T17258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3290'. [ 1473.390200][T17258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3290'. [ 1473.391063][T14598] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1473.440492][T14598] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 1473.467062][T14598] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input19 [ 1473.668627][T14598] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1474.748562][T14598] usb 3-1: USB disconnect, device number 10 [ 1476.760448][T17279] tty tty21: ldisc open failed (-12), clearing slot 20 [ 1477.289847][T17286] fuse: Bad value for 'fd' [ 1479.996363][T17305] Invalid ELF header magic: != ELF [ 1483.497164][T17340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3309'. [ 1483.509733][T17340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3309'. [ 1484.234945][T17349] fuse: Bad value for 'fd' [ 1484.648350][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.783596][ T27] audit: type=1804 audit(1732911257.172:1002): pid=17375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3319" name="/newroot/64/bus/bus" dev="overlay" ino=355 res=1 errno=0 [ 1485.784386][T17375] Invalid ELF header magic: != ELF [ 1488.107003][T17393] loop2: detected capacity change from 0 to 7 [ 1488.132376][T17393] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1488.301996][T17393] loop2: partition table partially beyond EOD, truncated [ 1488.341370][T17393] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1488.458014][T17393] loop2: p2 start 579963744 is beyond EOD, truncated [ 1488.549834][T13077] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1488.563395][T13077] loop2: partition table partially beyond EOD, truncated [ 1488.603944][T13077] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1488.698748][T13077] loop2: p2 start 579963744 is beyond EOD, truncated [ 1488.736070][T13077] udevd[13077]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1488.790299][T17399] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1488.790332][T17399] loop2: partition table partially beyond EOD, truncated [ 1488.790356][T17399] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1488.793773][T17399] loop2: p2 start 579963744 is beyond EOD, truncated [ 1488.921456][ T3623] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1488.921481][ T3623] loop2: partition table partially beyond EOD, truncated [ 1488.921587][ T3623] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1488.922232][ T3623] loop2: p2 start 579963744 is beyond EOD, truncated [ 1488.962009][ T27] audit: type=1804 audit(1732911260.352:1003): pid=17410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3333" name="/newroot/69/bus/bus" dev="overlay" ino=390 res=1 errno=0 [ 1489.007692][T17410] Invalid ELF header magic: != ELF [ 1489.038435][T10467] Bluetooth: hci5: Frame reassembly failed (-84) [ 1489.185518][ T3623] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1489.185550][ T3623] loop2: partition table partially beyond EOD, truncated [ 1489.185704][ T3623] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1489.186784][ T3623] loop2: p2 start 579963744 is beyond EOD, truncated [ 1490.487068][ T3623] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1490.679287][ T3623] loop2: partition table partially beyond EOD, truncated [ 1490.693695][ T3623] loop2: p1 size 276741282 extends beyond EOD, truncated [ 1490.800601][ T3623] loop2: p2 start 579963744 is beyond EOD, truncated [ 1491.069454][ T4262] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1491.699361][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 1492.005123][ T27] audit: type=1804 audit(1732911263.392:1004): pid=17449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3345" name="/newroot/229/bus/bus" dev="overlay" ino=1258 res=1 errno=0 [ 1492.037439][T17449] Invalid ELF header magic: != ELF [ 1494.543722][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1496.792444][ T9815] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1497.420781][ T9815] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1497.542165][ T9815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.553342][ T9815] usb 1-1: config 0 has no interface number 0 [ 1497.559840][ T9815] usb 1-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1498.361396][ T9815] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1498.398920][ T9815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.531555][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1498.780168][ T9815] usb 1-1: Product: syz [ 1498.813625][ T9815] usb 1-1: Manufacturer: syz [ 1498.818762][ T9815] usb 1-1: SerialNumber: syz [ 1498.881425][ T9815] usb 1-1: config 0 descriptor?? [ 1498.915293][ T9815] cyberjack 1-1:0.69: required endpoints missing [ 1500.157277][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3379'. [ 1500.182475][ T9731] usb 1-1: USB disconnect, device number 11 [ 1500.809744][T17567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.819222][T17567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.878136][T17567] device bridge_slave_1 left promiscuous mode [ 1500.894308][T17567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.946022][T17567] device bridge_slave_0 left promiscuous mode [ 1500.964504][T17567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.265467][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1507.860902][ T4262] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1507.870388][ T4262] Bluetooth: hci4: Injecting HCI hardware error event [ 1507.893948][T13175] Bluetooth: hci4: hardware error 0x00 [ 1508.310043][ T22] kernel write not supported for file [eventfd] (pid: 22 comm: kworker/1:0) [ 1509.888311][ T9815] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1510.128189][ T9815] usb 3-1: Using ep0 maxpacket: 16 [ 1510.155089][ T9815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.243388][ T9815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.316266][ T9815] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1510.338632][T13175] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1510.348373][ T9815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.539763][ T9815] usb 3-1: config 0 descriptor?? [ 1511.131912][ T9815] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 1511.139744][ T9815] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 1511.146930][ T9815] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 1511.163618][ T9815] appleir 0003:05AC:8241.0006: No inputs registered, leaving [ 1511.189701][ T9815] appleir 0003:05AC:8241.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 1511.479068][T17683] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1511.520806][T17683] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1511.577877][T17165] usb 3-1: USB disconnect, device number 11 [ 1514.058871][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 1515.594187][T17759] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 1515.687938][ T4296] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1515.901127][ T4296] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1515.940910][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.028679][ T4296] usb 1-1: config 0 descriptor?? [ 1516.055599][ T4296] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1517.278357][ T4296] gp8psk: usb in 128 operation failed. [ 1517.331625][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3458'. [ 1517.516704][ T4296] gp8psk: FW Version = 1.219.11 (0x1db0b) Build 2004/87/135 [ 1517.718530][ T4296] gp8psk: usb in 149 operation failed. [ 1517.744094][ T4296] gp8psk: failed to get FPGA version [ 1518.038326][ T4296] gp8psk: usb in 138 operation failed. [ 1518.119114][ T4296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1518.278405][ T4296] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1518.422213][ T4296] usb 1-1: media controller created [ 1518.818888][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1519.654270][ T4296] gp8psk_fe: Frontend attached [ 1519.660595][ T4296] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1519.671612][ T4296] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1519.842306][ T4296] gp8psk: usb in 138 operation failed. [ 1519.884610][ T4296] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1519.977657][ T4296] gp8psk: found Genpix USB device pID = 203 (hex) [ 1520.013068][ T4296] usb 1-1: USB disconnect, device number 12 [ 1520.232288][ T4296] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1520.869360][T17818] block device autoloading is deprecated and will be removed. [ 1522.000788][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3474'. [ 1522.248034][ T4296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1522.337446][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1522.487948][ T4296] usb 7-1: Using ep0 maxpacket: 32 [ 1522.528580][ T4296] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1522.539924][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1522.586595][ T7] usb 2-1: config 0 has no interfaces? [ 1522.712987][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1522.808958][ T4296] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1522.906892][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.985506][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.062989][ T7] usb 2-1: Product: syz [ 1523.140480][ T7] usb 2-1: Manufacturer: syz [ 1523.151732][ T4296] usb 7-1: config 0 descriptor?? [ 1523.188722][ T7] usb 2-1: SerialNumber: syz [ 1523.194117][T17830] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1523.219331][ T4296] hub 7-1:0.0: bad descriptor, ignoring hub [ 1523.243526][ T7] usb 2-1: config 0 descriptor?? [ 1523.259572][ T4296] hub: probe of 7-1:0.0 failed with error -5 [ 1523.289515][ T4296] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1523.509288][ T7] usb 2-1: USB disconnect, device number 15 [ 1524.700643][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3486'. [ 1525.549435][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3490'. [ 1525.627323][T17326] usb 7-1: USB disconnect, device number 5 [ 1529.703033][T17923] tmpfs: Unknown parameter 'usrquota' [ 1529.811580][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1533.904954][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3521'. [ 1535.245369][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3523'. [ 1539.406528][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1539.597056][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3537'. [ 1540.467530][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1540.491633][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.501798][ T7] usb 2-1: config 0 descriptor?? [ 1540.532884][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1540.909137][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3541'. [ 1540.986514][ T9731] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1541.212080][ T9731] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1541.254378][ T9731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.268401][ T9731] usb 7-1: Product: syz [ 1541.272849][ T9731] usb 7-1: Manufacturer: syz [ 1541.278129][ T9731] usb 7-1: SerialNumber: syz [ 1541.677119][ T9731] usb 7-1: config 0 descriptor?? [ 1541.945308][ T7] gspca_stv06xx: I2C: Read error writing address: -71 [ 1542.002712][ T7] usb 2-1: USB disconnect, device number 16 [ 1542.328384][T15215] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1542.551005][T15215] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1542.573384][T15215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1542.635747][T15215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1542.682473][T15215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1542.730943][T15215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1542.741563][T15215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1542.753265][T15215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1542.763710][T15215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1542.772998][T15215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1542.784666][T15215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1542.927703][T15215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1542.950045][T15215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1542.978604][T15215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1542.990658][T17165] usb 7-1: USB disconnect, device number 6 [ 1542.997139][T15215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1543.032159][T15215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1543.071323][T15215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1543.089136][T15215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1543.120155][T15215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1543.132315][T15215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1543.140931][T15215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1543.150145][T15215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1543.176044][ T27] audit: type=1326 audit(1732911314.565:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3f80809 code=0x7ffc0000 [ 1543.188980][T15215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1543.207397][T15215] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1543.238159][T15215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1543.259936][ T27] audit: type=1326 audit(1732911314.565:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3f80809 code=0x7ffc0000 [ 1543.296449][T15215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1543.312347][ T27] audit: type=1326 audit(1732911314.595:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fc3f80809 code=0x7ffc0000 [ 1543.337484][ T27] audit: type=1326 audit(1732911314.595:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3f80809 code=0x7ffc0000 [ 1543.362058][T15215] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1543.384210][T15215] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1543.416414][T15215] usb 3-1: Product: syz [ 1543.420696][T15215] usb 3-1: Manufacturer: syz [ 1543.425399][T15215] usb 3-1: SerialNumber: syz [ 1543.430228][ T27] audit: type=1326 audit(1732911314.595:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3f80809 code=0x7ffc0000 [ 1543.510550][T15215] usb 3-1: config 0 descriptor?? [ 1543.615777][ T27] audit: type=1326 audit(1732911314.625:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f9fc3f80809 code=0x7ffc0000 [ 1544.267663][ T27] audit: type=1326 audit(1732911314.625:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3f80809 code=0x7ffc0000 [ 1544.294013][T15215] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1544.321721][ T27] audit: type=1326 audit(1732911314.625:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.1.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc3f80809 code=0x7ffc0000 [ 1544.341893][T15215] usb 3-1: USB disconnect, device number 12 [ 1544.392125][T15215] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1545.809178][T18091] can: request_module (can-proto-0) failed. [ 1545.937025][ T4262] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1545.943947][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.945944][ T4262] Bluetooth: hci3: Injecting HCI hardware error event [ 1545.962178][T13175] Bluetooth: hci3: hardware error 0x00 [ 1546.877749][T18110] input: syz1 as /devices/virtual/input/input20 [ 1548.096268][T13175] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1549.342427][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1554.043807][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1554.818281][T13175] Bluetooth: hci1: command 0x0406 tx timeout [ 1555.035336][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 1555.064671][ T7] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1555.073078][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.083263][ T7] usb 1-1: config 0 has no interface number 0 [ 1555.089552][ T7] usb 1-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 1555.100311][ T7] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1555.125560][ T7] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1555.132343][ T7] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1555.183175][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.232403][ T7] usb 1-1: config 0 descriptor?? [ 1555.501169][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1556.286165][ T7] usb 1-1: USB disconnect, device number 13 [ 1559.619592][T18230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3595'. [ 1561.281434][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3602'. [ 1562.289431][T18260] netlink: 'syz.6.3604': attribute type 4 has an invalid length. [ 1562.439159][T18260] netlink: 'syz.6.3604': attribute type 4 has an invalid length. [ 1564.912390][T15215] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1565.125095][T15215] usb 1-1: Using ep0 maxpacket: 8 [ 1565.133030][T15215] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1565.185422][T15215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.235556][T15215] usb 1-1: config 0 has no interface number 0 [ 1565.251374][T15215] usb 1-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 1565.437298][T15215] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1565.499129][T15215] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1566.179701][T15215] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1566.189153][T15215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.200666][T15215] usb 1-1: config 0 descriptor?? [ 1566.207347][T15215] usb 1-1: can't set config #0, error -71 [ 1566.242830][T15215] usb 1-1: USB disconnect, device number 14 [ 1567.018699][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3616'. [ 1567.896679][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1571.528442][T17165] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1572.460552][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3633'. [ 1573.744500][T17326] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1573.944610][T17326] usb 1-1: Using ep0 maxpacket: 16 [ 1574.039127][T17326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.068938][T17326] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1574.902721][T17326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.926522][T17326] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1574.937189][T17326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.945259][T17326] usb 1-1: Product: syz [ 1574.949444][T17326] usb 1-1: Manufacturer: syz [ 1574.954057][T17326] usb 1-1: SerialNumber: syz [ 1574.991088][T17326] usb 1-1: config 0 descriptor?? [ 1575.009899][T17326] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1575.920234][T18384] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1575.937680][T17326] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1575.944712][T17326] gspca_pac7302: probe of 1-1:0.0 failed with error -110 [ 1576.728838][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3648'. [ 1577.914428][T18403] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3647'. [ 1578.408265][T15188] usb 1-1: USB disconnect, device number 15 [ 1581.691939][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3660'. [ 1583.975192][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 1588.321961][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1589.500319][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1592.243622][T15215] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1592.443673][T15215] usb 3-1: Using ep0 maxpacket: 8 [ 1592.463739][T15215] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1592.671107][T15215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1592.923591][T15215] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1593.004423][T15215] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1593.072577][T15215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1593.100150][T15215] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1593.153665][T15215] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1593.164551][T15215] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1593.185467][T15215] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1593.220778][T15215] usb 3-1: string descriptor 0 read error: -22 [ 1593.239304][T15215] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1594.047309][T15215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.166538][T15215] adutux 3-1:168.0: interrupt endpoints not found [ 1594.703602][T18567] device geneve2 entered promiscuous mode [ 1595.515184][T17326] usb 3-1: USB disconnect, device number 13 [ 1598.102172][T18584] netlink: set zone limit has 8 unknown bytes [ 1598.499538][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1602.149833][T17326] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1602.533042][T17326] usb 1-1: Using ep0 maxpacket: 8 [ 1602.549854][T17326] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1602.594053][T17326] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1602.622113][T18626] i2c i2c-0: Invalid block write size 252 [ 1602.653019][T15188] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1602.699010][T17326] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1603.543210][T17326] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 1603.551182][T17326] usb 1-1: can't read configurations, error -71 [ 1603.772865][T15188] usb 7-1: Using ep0 maxpacket: 8 [ 1603.779947][T15188] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1603.803433][T15188] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1603.876029][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3720'. [ 1604.590836][T15188] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1604.601108][T15188] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1604.611740][T15188] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1604.632889][T15188] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1604.642034][T15188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.948360][T15188] usb 7-1: usb_control_msg returned -32 [ 1604.954611][T15188] usbtmc 7-1:16.0: can't read capabilities [ 1606.273151][T18664] unsupported nlmsg_type 40 [ 1607.719421][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.753727][T18664] orangefs_mount: mount request failed with -4 [ 1607.822180][T15188] usb 7-1: USB disconnect, device number 8 [ 1608.212735][T18674] Bluetooth: MGMT ver 1.22 [ 1609.407966][T18692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1614.014094][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3752'. [ 1619.113640][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3765'. [ 1635.529692][T18974] orangefs_mount: mount request failed with -4 [ 1637.808012][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3824'. [ 1639.260964][ T14] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1641.218603][T19034] netlink: 'syz.0.3837': attribute type 10 has an invalid length. [ 1641.570791][ T14] usb 2-1: device descriptor read/64, error -71 [ 1641.627172][T19040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 1642.760660][ T14] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1643.092230][ T14] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1643.301747][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.309929][ T14] usb 2-1: Product: syz [ 1643.453616][ T14] usb 2-1: Manufacturer: syz [ 1644.169135][ T14] usb 2-1: SerialNumber: syz [ 1644.228602][ T14] usb 2-1: config 0 descriptor?? [ 1644.327862][ T14] usb 2-1: can't set config #0, error -71 [ 1644.345778][ T14] usb 2-1: USB disconnect, device number 18 [ 1646.310714][ T14] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1646.530699][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 1646.544861][ T14] usb 1-1: config 0 has no interfaces? [ 1646.661860][ T14] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1646.720419][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.790735][ T14] usb 1-1: config 0 descriptor?? [ 1646.973909][T19096] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1647.593222][T15060] usb 1-1: USB disconnect, device number 18 [ 1650.222455][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1655.148781][T19204] overlayfs: unrecognized mount option "verity=on" or missing value [ 1657.519373][ T4296] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1657.731866][ T4296] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1657.756505][ T4296] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1657.889976][ T4296] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1658.182485][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.600344][T19214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1659.915052][ T4296] usb 3-1: USB disconnect, device number 14 [ 1660.274319][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3909'. [ 1660.299005][T19256] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1660.308363][T19256] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1660.317210][T19256] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1660.326019][T19256] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1660.341546][T19256] device vxlan0 entered promiscuous mode [ 1661.532934][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 1666.749402][T15188] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1666.939479][T15188] usb 7-1: Using ep0 maxpacket: 8 [ 1666.946925][T15188] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1666.967272][T15188] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.991751][T15188] usb 7-1: config 0 has no interface number 0 [ 1667.005266][T15188] usb 7-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 1667.016690][T15188] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1667.048306][T15188] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1667.088494][T15188] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1667.128521][T15188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.164518][T15188] usb 7-1: config 0 descriptor?? [ 1667.666660][T15215] usb 7-1: USB disconnect, device number 9 [ 1668.815294][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1671.592842][T19456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.613522][T19456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1674.744780][T19515] input: syz0 as /devices/virtual/input/input21 [ 1676.815742][T19544] netlink: 'syz.2.3994': attribute type 21 has an invalid length. [ 1676.833988][T19544] netlink: 'syz.2.3994': attribute type 1 has an invalid length. [ 1677.166953][ T14] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1677.578794][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 1677.586186][ T14] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1677.595086][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.608722][ T14] usb 2-1: config 0 has no interface number 0 [ 1677.615044][ T14] usb 2-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 1677.626264][ T14] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.639490][ T14] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1677.646321][ T14] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1677.655959][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.674339][ T14] usb 2-1: config 0 descriptor?? [ 1677.675602][T19560] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3992'. [ 1678.197644][T17165] usb 2-1: USB disconnect, device number 19 [ 1682.864014][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4021'. [ 1682.868942][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1683.098389][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 1683.105357][ T7] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1683.138987][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.394299][ T7] usb 7-1: config 0 has no interface number 0 [ 1683.408330][ T7] usb 7-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 1683.428311][ T7] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.469448][ T7] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1683.498767][ T7] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1683.542563][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.571407][ T7] usb 7-1: config 0 descriptor?? [ 1684.778943][T17165] usb 7-1: USB disconnect, device number 10 [ 1690.118132][T15060] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1690.406879][T15060] usb 2-1: Using ep0 maxpacket: 8 [ 1690.419542][T15060] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1690.428170][T15060] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.439082][T15060] usb 2-1: config 0 has no interface number 0 [ 1690.445389][T15060] usb 2-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 1690.502576][T15060] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1690.566191][T15060] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1690.573290][T15060] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1690.582854][T15060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.603316][T15060] usb 2-1: config 0 descriptor?? [ 1691.576859][T15060] usb 2-1: USB disconnect, device number 20 [ 1692.700345][T19781] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4056'. [ 1692.739069][T19781] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4056'. [ 1692.783585][T19785] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4058'. [ 1693.771148][T19804] netlink: 'syz.6.4063': attribute type 21 has an invalid length. [ 1693.781128][T19804] netlink: 'syz.6.4063': attribute type 1 has an invalid length. [ 1696.281731][T19828] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4070'. [ 1696.325880][T17326] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1696.517876][T17326] usb 2-1: Using ep0 maxpacket: 8 [ 1696.533930][T17326] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1696.559565][T17326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.641450][T17326] usb 2-1: config 0 has no interface number 0 [ 1696.675365][T17326] usb 2-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 1696.716584][T17326] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1696.766948][T17326] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1696.814797][T17326] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1696.833905][T17326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.899058][T17326] usb 2-1: config 0 descriptor?? [ 1699.057912][T17165] usb 2-1: USB disconnect, device number 21 [ 1699.120739][T19859] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4083'. [ 1703.076138][T19871] netlink: 'syz.0.4085': attribute type 21 has an invalid length. [ 1703.084334][T19871] netlink: 'syz.0.4085': attribute type 1 has an invalid length. [ 1709.099087][T19950] netlink: 'syz.6.4111': attribute type 3 has an invalid length. [ 1709.350707][T19950] netlink: 766 bytes leftover after parsing attributes in process `syz.6.4111'. [ 1711.487015][ T14] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1711.686951][ T14] usb 7-1: Using ep0 maxpacket: 32 [ 1711.759983][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.783689][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.808645][ T14] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1711.835632][ T14] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1711.863313][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.936018][ T14] usb 7-1: config 0 descriptor?? [ 1714.658960][ T14] usbhid 7-1:0.0: can't add hid device: -71 [ 1714.665039][ T14] usbhid: probe of 7-1:0.0 failed with error -71 [ 1714.731486][ T14] usb 7-1: USB disconnect, device number 11 [ 1719.396732][T20037] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4132'. [ 1724.399168][T20090] xt_HMARK: proto mask must be zero with L3 mode [ 1725.668761][T20109] mmap: syz.7.4148 (20109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1726.091250][T20105] syz.7.4148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1730.266159][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1742.744159][T20295] netlink: 'syz.1.4198': attribute type 10 has an invalid length. [ 1742.746443][T20296] netlink: 'syz.6.4197': attribute type 29 has an invalid length. [ 1742.822221][T20295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.829620][T20295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.155692][T20295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.164610][T20295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1743.172699][T20295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.180268][T20295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.360551][T20295] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1743.385231][T20296] netlink: 'syz.6.4197': attribute type 29 has an invalid length. [ 1747.433499][T20340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4207'. [ 1747.450191][T20340] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.459010][T20340] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.467809][T20340] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.476569][T20340] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.485451][T20340] device vxlan0 entered promiscuous mode [ 1747.774818][T13335] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1747.984706][T13335] usb 1-1: Using ep0 maxpacket: 16 [ 1747.991945][T13335] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1748.818721][T13335] usb 1-1: config 0 has no interface number 0 [ 1748.825617][T13335] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1748.883113][T13335] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1748.897522][T13335] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1749.191980][T13335] usb 1-1: Product: syz [ 1749.291503][T20360] binder: 20354:20360 ioctl 4018620d 0 returned -22 [ 1750.500737][T13335] usb 1-1: SerialNumber: syz [ 1750.516464][T13335] usb 1-1: config 0 descriptor?? [ 1751.531543][T13335] usb 1-1: can't set config #0, error -71 [ 1751.545121][T13335] usb 1-1: USB disconnect, device number 19 [ 1751.777539][T20375] xt_HMARK: proto mask must be zero with L3 mode [ 1756.806844][T20421] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1759.049830][T20416] syz.1.4235[20416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1759.049911][T20416] syz.1.4235[20416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1763.801072][T20479] netlink: 'syz.6.4251': attribute type 21 has an invalid length. [ 1763.837021][T20479] netlink: 'syz.6.4251': attribute type 1 has an invalid length. [ 1766.322014][T13335] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1766.724015][T13335] usb 1-1: Using ep0 maxpacket: 32 [ 1767.966897][T13335] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 1768.405476][T13335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.610898][T13335] usb 1-1: Product: syz [ 1768.718111][T13335] usb 1-1: Manufacturer: syz [ 1768.789366][T13335] usb 1-1: SerialNumber: syz [ 1768.816531][T13335] usb 1-1: config 0 descriptor?? [ 1768.832526][T13335] usb 1-1: can't set config #0, error -71 [ 1768.962056][T13335] usb 1-1: USB disconnect, device number 20 [ 1769.976143][T20532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4264'. [ 1771.681425][T20552] netlink: 'syz.1.4271': attribute type 1 has an invalid length. [ 1771.689370][T20552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4271'. [ 1783.000037][T14598] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1783.503167][T14598] usb 1-1: Using ep0 maxpacket: 32 [ 1785.657209][T14598] usb 1-1: device descriptor read/all, error -71 [ 1785.713772][T20662] tipc: Started in network mode [ 1785.718717][T20662] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 1785.779633][T20662] tipc: Enabling of bearer rejected, failed to enable media [ 1787.136061][T13335] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1787.408763][T13336] kworker/dying (13336) used greatest stack depth: 18648 bytes left [ 1787.484556][T13335] usb 7-1: Using ep0 maxpacket: 8 [ 1787.500229][T13335] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1787.551956][T13335] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1787.674271][T13335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.705510][T13335] usb 7-1: config 0 descriptor?? [ 1787.961274][T20662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.093646][T20662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.527609][T13335] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1788.747204][T14598] usb 7-1: USB disconnect, device number 12 [ 1788.753277][ C0] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1789.565437][T20699] sch_fq: defrate 2 ignored. [ 1790.340348][T14598] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 1790.659182][T20706] xt_HMARK: proto mask must be zero with L3 mode [ 1794.352542][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1804.420133][T17326] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1804.691484][T17326] usb 1-1: Using ep0 maxpacket: 8 [ 1804.702851][T17326] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 1804.813730][T17326] usb 1-1: config 0 has no interface number 0 [ 1804.820803][T17326] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1804.830623][T17326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.848588][T17326] usb 1-1: config 0 descriptor?? [ 1806.214745][T17326] usb 1-1: USB disconnect, device number 23 [ 1807.201959][T20853] syz.7.4352[20853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1807.202073][T20853] syz.7.4352[20853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1808.241573][T20862] xt_HMARK: proto mask must be zero with L3 mode [ 1810.776751][T20877] sch_fq: defrate 2 ignored. [ 1813.065764][T20898] random: crng reseeded on system resumption [ 1817.026108][T20926] xt_HMARK: proto mask must be zero with L3 mode [ 1821.925685][T20973] xt_nat: multiple ranges no longer supported [ 1824.180496][ T27] audit: type=1326 audit(1732911595.561:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1824.253261][ T27] audit: type=1326 audit(1732911595.561:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1824.283285][ T27] audit: type=1326 audit(1732911595.621:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1824.326876][ T27] audit: type=1326 audit(1732911595.621:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1824.482721][ T27] audit: type=1326 audit(1732911595.621:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1825.050570][ T27] audit: type=1326 audit(1732911595.621:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1825.133315][ T27] audit: type=1326 audit(1732911595.621:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1825.180358][ T27] audit: type=1326 audit(1732911595.621:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1825.235387][ T27] audit: type=1326 audit(1732911595.621:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1825.466492][ T27] audit: type=1326 audit(1732911595.621:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20989 comm="syz.2.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36380809 code=0x7ffc0000 [ 1830.170156][T17326] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1830.380525][T17326] usb 1-1: Using ep0 maxpacket: 8 [ 1830.393953][T17326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.638264][T17326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.796742][T17326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1830.870175][T17326] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1830.900985][T17326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.939169][T17326] usb 1-1: config 0 descriptor?? [ 1832.403952][T17326] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 1832.430018][T17326] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 1832.520201][T17326] hid-picolcd 0003:04D8:C002.0007: No report with id 0x11 found [ 1832.617828][T17326] usb 1-1: USB disconnect, device number 24 [ 1836.550365][T21112] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4424'. [ 1842.085141][T21176] netlink: 'syz.7.4459': attribute type 5 has an invalid length. [ 1850.297178][T21278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4488'. [ 1850.306400][T21278] device bridge_slave_1 left promiscuous mode [ 1850.314282][T21278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.324126][T21278] device bridge_slave_0 left promiscuous mode [ 1850.330877][T21278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.196342][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.559017][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.994432][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2004.790801][ T28] INFO: task udevd:3623 blocked for more than 143 seconds. [ 2004.798058][ T28] Not tainted 6.1.119-syzkaller #0 [ 2004.804248][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2004.813020][ T28] task:udevd state:D stack:22600 pid:3623 ppid:1 flags:0x00004002 [ 2004.822357][ T28] Call Trace: [ 2004.825671][ T28] [ 2004.828652][ T28] __schedule+0x143f/0x4570 [ 2004.833259][ T28] ? __mutex_lock+0x6b4/0xd80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2004.837983][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2004.844658][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 2004.850283][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2004.855679][ T28] schedule+0xbf/0x180 [ 2004.859794][ T28] schedule_preempt_disabled+0xf/0x20 [ 2004.874809][ T28] __mutex_lock+0x6b9/0xd80 [ 2004.900670][ T28] ? __mutex_lock+0x53c/0xd80 [ 2004.905418][ T28] ? uevent_show+0x176/0x330 [ 2004.910063][ T28] ? mutex_lock_nested+0x10/0x10 [ 2004.946917][ T28] uevent_show+0x176/0x330 [ 2004.964189][ T28] dev_attr_show+0x50/0xb0 [ 2004.968688][ T28] ? device_get_ownership+0xa0/0xa0 [ 2004.974039][ T28] sysfs_kf_seq_show+0x32d/0x4b0 [ 2004.979008][ T28] seq_read_iter+0x43a/0xd10 [ 2004.983833][ T28] vfs_read+0x88d/0xbf0 [ 2004.988020][ T28] ? kernel_read+0x1f0/0x1f0 [ 2004.993003][ T28] ? kmem_cache_free+0x292/0x510 [ 2004.997984][ T28] ? __ia32_sys_newlstat+0x180/0x180 [ 2005.003684][ T28] ? __fdget_pos+0x2c1/0x360 [ 2005.008325][ T28] ksys_read+0x19c/0x2c0 [ 2005.012700][ T28] ? print_irqtrace_events+0x210/0x210 [ 2005.018193][ T28] ? vfs_write+0xbc0/0xbc0 [ 2005.022939][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2005.028931][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2005.038054][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2005.044387][ T28] do_syscall_64+0x3b/0xb0 [ 2005.048856][ T28] ? clear_bhb_loop+0x45/0xa0 [ 2005.053916][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2005.059840][ T28] RIP: 0033:0x7fa58b516b6a [ 2005.064359][ T28] RSP: 002b:00007fff1112acd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2005.072841][ T28] RAX: ffffffffffffffda RBX: 000055bf74262400 RCX: 00007fa58b516b6a [ 2005.081200][ T28] RDX: 0000000000001000 RSI: 000055bf742d1080 RDI: 000000000000000c [ 2005.089201][ T28] RBP: 000055bf74262400 R08: 000000000000000c R09: 0000000000000020 [ 2005.098014][ T28] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 2005.106077][ T28] R13: 0000000000003fff R14: 00007fff1112b1b8 R15: 000000000000000a [ 2005.114358][ T28] [ 2005.117431][ T28] INFO: task kworker/1:9:17165 blocked for more than 143 seconds. [ 2005.125376][ T28] Not tainted 6.1.119-syzkaller #0 [ 2005.131084][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2005.139761][ T28] task:kworker/1:9 state:D stack:23960 pid:17165 ppid:2 flags:0x00004000 [ 2005.149296][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 2005.156066][ T28] Call Trace: [ 2005.159360][ T28] [ 2005.162395][ T28] __schedule+0x143f/0x4570 [ 2005.166974][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2005.173221][ T28] ? print_irqtrace_events+0x210/0x210 [ 2005.178706][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2005.184032][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2005.189260][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2005.194551][ T28] schedule+0xbf/0x180 [ 2005.198653][ T28] schedule_preempt_disabled+0xf/0x20 [ 2005.204485][ T28] __mutex_lock+0x6b9/0xd80 [ 2005.209017][ T28] ? __mutex_lock+0x53c/0xd80 [ 2005.214302][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 2005.220646][ T28] ? mutex_lock_nested+0x10/0x10 [ 2005.225612][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2005.231952][ T28] ? print_irqtrace_events+0x210/0x210 [ 2005.237453][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2005.243441][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2005.248659][ T28] ? process_one_work+0x7a9/0x11d0 [ 2005.253861][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 2005.259966][ T28] ? process_one_work+0x7a9/0x11d0 [ 2005.265449][ T28] process_one_work+0x8a9/0x11d0 [ 2005.270542][ T28] ? worker_detach_from_pool+0x260/0x260 [ 2005.276206][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2005.281849][ T28] ? kthread_data+0x4e/0xc0 [ 2005.286395][ T28] ? wq_worker_running+0x97/0x190 [ 2005.291782][ T28] worker_thread+0xa47/0x1200 [ 2005.296488][ T28] ? _raw_spin_unlock+0x40/0x40 [ 2005.301529][ T28] kthread+0x28d/0x320 [ 2005.305635][ T28] ? worker_clr_flags+0x190/0x190 [ 2005.310846][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2005.315456][ T28] ret_from_fork+0x1f/0x30 [ 2005.319902][ T28] [ 2005.323313][ T28] INFO: task kworker/1:4:21096 blocked for more than 143 seconds. [ 2005.331205][ T28] Not tainted 6.1.119-syzkaller #0 [ 2005.336874][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2005.345610][ T28] task:kworker/1:4 state:D stack:25224 pid:21096 ppid:2 flags:0x00004000 [ 2005.355366][ T28] Workqueue: events rfkill_sync_work [ 2005.360771][ T28] Call Trace: [ 2005.364069][ T28] [ 2005.367027][ T28] __schedule+0x143f/0x4570 [ 2005.371630][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2005.377540][ T28] ? print_irqtrace_events+0x210/0x210 [ 2005.383484][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2005.388723][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2005.394010][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2005.399242][ T28] schedule+0xbf/0x180 [ 2005.403432][ T28] schedule_preempt_disabled+0xf/0x20 [ 2005.408821][ T28] __mutex_lock+0x6b9/0xd80 [ 2005.413682][ T28] ? __mutex_lock+0x53c/0xd80 [ 2005.418385][ T28] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 2005.423894][ T28] ? mutex_lock_nested+0x10/0x10 [ 2005.428852][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2005.434201][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2005.439440][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 2005.445712][ T28] ? _raw_spin_unlock+0x40/0x40 [ 2005.450669][ T28] nfc_rfkill_set_block+0x4c/0x2f0 [ 2005.455808][ T28] ? nfc_unregister_device+0x290/0x290 [ 2005.461350][ T28] rfkill_set_block+0x1e7/0x430 [ 2005.466226][ T28] rfkill_sync_work+0x8a/0xe0 [ 2005.471268][ T28] ? process_one_work+0x7a9/0x11d0 [ 2005.476564][ T28] process_one_work+0x8a9/0x11d0 [ 2005.481618][ T28] ? worker_detach_from_pool+0x260/0x260 [ 2005.487279][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2005.492897][ T28] ? kthread_data+0x4e/0xc0 [ 2005.497444][ T28] ? wq_worker_running+0x97/0x190 [ 2005.502843][ T28] worker_thread+0xa47/0x1200 [ 2005.507558][ T28] ? _raw_spin_unlock+0x40/0x40 [ 2005.512630][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2005.518592][ T28] ? _raw_spin_unlock+0x40/0x40 [ 2005.523568][ T28] kthread+0x28d/0x320 [ 2005.527662][ T28] ? worker_clr_flags+0x190/0x190 [ 2005.533152][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2005.537770][ T28] ret_from_fork+0x1f/0x30 [ 2005.542312][ T28] [ 2005.545361][ T28] INFO: task syz.1.4474:21228 blocked for more than 144 seconds. [ 2005.554362][ T28] Not tainted 6.1.119-syzkaller #0 [ 2005.559995][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2005.569002][ T28] task:syz.1.4474 state:D stack:25032 pid:21228 ppid:16107 flags:0x00004004 [ 2005.578297][ T28] Call Trace: [ 2005.581677][ T28] [ 2005.584635][ T28] __schedule+0x143f/0x4570 [ 2005.589185][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2005.595538][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 2005.601930][ T28] schedule+0xbf/0x180 [ 2005.606076][ T28] schedule_timeout+0xac/0x300 [ 2005.610908][ T28] ? console_conditional_schedule+0x40/0x40 [ 2005.616839][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2005.622423][ T28] ? wait_for_completion+0x2f9/0x610 [ 2005.627733][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 2005.633206][ T28] ? wait_for_completion+0x2f9/0x610 [ 2005.638523][ T28] wait_for_completion+0x350/0x610 [ 2005.643875][ T28] ? io_schedule+0x100/0x100 [ 2005.648501][ T28] ? __rcu_read_unlock+0x92/0x100 [ 2005.653885][ T28] ? __flush_work+0xe5/0xad0 [ 2005.658501][ T28] __flush_work+0x95b/0xad0 [ 2005.663113][ T28] ? __flush_work+0xe5/0xad0 [ 2005.667751][ T28] ? flush_work+0x20/0x20 [ 2005.672178][ T28] ? move_linked_works+0x230/0x230 [ 2005.677330][ T28] ? print_irqtrace_events+0x210/0x210 [ 2005.683132][ T28] ? __cancel_work_timer+0x467/0x6a0 [ 2005.688422][ T28] __cancel_work_timer+0x519/0x6a0 [ 2005.693662][ T28] ? rcu_is_watching+0x11/0xb0 [ 2005.698451][ T28] ? cancel_work_sync+0x20/0x20 [ 2005.703389][ T28] ? nla_put+0x12d/0x1e0 [ 2005.707783][ T28] ? nfc_unregister_device+0x5f/0x290 [ 2005.713486][ T28] ? mutex_lock_nested+0x10/0x10 [ 2005.718426][ T28] ? nfc_genl_device_removed+0x251/0x370 [ 2005.724151][ T28] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 2005.730209][ T28] rfkill_unregister+0x92/0x220 [ 2005.735095][ T28] nfc_unregister_device+0x92/0x290 [ 2005.740673][ T28] virtual_ncidev_close+0x55/0x90 [ 2005.745752][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 2005.751079][ T28] __fput+0x3f6/0x8d0 [ 2005.755096][ T28] task_work_run+0x246/0x300 [ 2005.759690][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 2005.764795][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 2005.770621][ T28] exit_to_user_mode_loop+0xde/0x100 [ 2005.775934][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 2005.781581][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 2005.787161][ T28] do_syscall_64+0x47/0xb0 [ 2005.791678][ T28] ? clear_bhb_loop+0x45/0xa0 [ 2005.796389][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2005.802607][ T28] RIP: 0033:0x7f9fc3f80809 [ 2005.807023][ T28] RSP: 002b:00007ffe116e7088 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2005.815507][ T28] RAX: 0000000000000000 RBX: 00007f9fc4147ba0 RCX: 00007f9fc3f80809 [ 2005.823531][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2005.832130][ T28] RBP: 00007f9fc4147ba0 R08: 0000000000000434 R09: 00007ffe116e736f [ 2005.840273][ T28] R10: 00007f9fc4147ac0 R11: 0000000000000246 R12: 00000000001c3486 [ 2005.848281][ T28] R13: 00007f9fc4146160 R14: 0000000000000032 R15: ffffffffffffffff [ 2005.856339][ T28] [ 2005.859386][ T28] INFO: task syz.0.4483:21268 blocked for more than 144 seconds. [ 2005.867569][ T28] Not tainted 6.1.119-syzkaller #0 [ 2005.873270][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2005.882027][ T28] task:syz.0.4483 state:D stack:26200 pid:21268 ppid:15807 flags:0x00004004 [ 2005.891593][ T28] Call Trace: [ 2005.894889][ T28] [ 2005.897817][ T28] __schedule+0x143f/0x4570 [ 2005.902447][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2005.908382][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 2005.913937][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2005.919195][ T28] schedule+0xbf/0x180 [ 2005.923706][ T28] schedule_preempt_disabled+0xf/0x20 [ 2005.929102][ T28] __mutex_lock+0x6b9/0xd80 [ 2005.933719][ T28] ? __mutex_lock+0x53c/0xd80 [ 2005.938502][ T28] ? rfkill_fop_open+0x130/0x680 [ 2005.943558][ T28] ? mutex_lock_nested+0x10/0x10 [ 2005.948527][ T28] ? __init_waitqueue_head+0xaa/0x140 [ 2005.954225][ T28] rfkill_fop_open+0x130/0x680 [ 2005.959001][ T28] ? rfkill_fop_ioctl+0x230/0x230 [ 2005.964138][ T28] misc_open+0x304/0x380 [ 2005.968406][ T28] chrdev_open+0x54a/0x630 [ 2005.973033][ T28] ? cd_forget+0x160/0x160 [ 2005.977482][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2005.983003][ T28] ? fsnotify_perm+0x472/0x590 [ 2005.987795][ T28] ? cd_forget+0x160/0x160 [ 2005.992436][ T28] do_dentry_open+0x7f9/0x10f0 [ 2005.997246][ T28] path_openat+0x2644/0x2e60 [ 2006.002031][ T28] ? mark_lock+0x9a/0x340 [ 2006.006410][ T28] ? do_filp_open+0x480/0x480 [ 2006.011462][ T28] do_filp_open+0x230/0x480 [ 2006.015998][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 2006.020707][ T28] ? _raw_spin_unlock+0x24/0x40 [ 2006.025582][ T28] ? alloc_fd+0x5a0/0x640 [ 2006.029928][ T28] do_sys_openat2+0x13b/0x4f0 [ 2006.034709][ T28] ? do_sys_open+0x220/0x220 [ 2006.039349][ T28] __x64_sys_openat+0x243/0x290 [ 2006.044603][ T28] ? __ia32_sys_open+0x270/0x270 [ 2006.049585][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2006.055668][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2006.060924][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2006.066911][ T28] do_syscall_64+0x3b/0xb0 [ 2006.079631][ T28] ? clear_bhb_loop+0x45/0xa0 [ 2006.085399][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2006.091396][ T28] RIP: 0033:0x7fa9e1780809 [ 2006.095826][ T28] RSP: 002b:00007fa9e15de058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2006.104601][ T28] RAX: ffffffffffffffda RBX: 00007fa9e1946160 RCX: 00007fa9e1780809 [ 2006.112669][ T28] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2006.120720][ T28] RBP: 00007fa9e17f393e R08: 0000000000000000 R09: 0000000000000000 [ 2006.128711][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2006.137035][ T28] R13: 0000000000000000 R14: 00007fa9e1946160 R15: 00007ffcf5f947a8 [ 2006.145143][ T28] [ 2006.148215][ T28] INFO: task syz.2.4494:21299 blocked for more than 144 seconds. [ 2006.156115][ T28] Not tainted 6.1.119-syzkaller #0 [ 2006.162053][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2006.170797][ T28] task:syz.2.4494 state:D stack:27560 pid:21299 ppid:16590 flags:0x00004004 [ 2006.180099][ T28] Call Trace: [ 2006.183403][ T28] [ 2006.186367][ T28] __schedule+0x143f/0x4570 [ 2006.191370][ T28] ? __mutex_lock+0x6b4/0xd80 [ 2006.196083][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2006.202148][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 2006.207647][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2006.212906][ T28] schedule+0xbf/0x180 [ 2006.217014][ T28] schedule_preempt_disabled+0xf/0x20 [ 2006.222724][ T28] __mutex_lock+0x6b9/0xd80 [ 2006.227237][ T28] ? __mutex_lock+0x53c/0xd80 [ 2006.232015][ T28] ? misc_open+0x58/0x380 [ 2006.236371][ T28] ? mutex_lock_nested+0x10/0x10 [ 2006.241403][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 2006.247061][ T28] misc_open+0x58/0x380 [ 2006.251585][ T28] chrdev_open+0x54a/0x630 [ 2006.256035][ T28] ? cd_forget+0x160/0x160 [ 2006.260544][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2006.265776][ T28] ? fsnotify_perm+0x472/0x590 [ 2006.270639][ T28] ? cd_forget+0x160/0x160 [ 2006.275080][ T28] do_dentry_open+0x7f9/0x10f0 [ 2006.279864][ T28] path_openat+0x2644/0x2e60 [ 2006.284804][ T28] ? mark_lock+0x9a/0x340 [ 2006.289183][ T28] ? do_filp_open+0x480/0x480 [ 2006.293973][ T28] do_filp_open+0x230/0x480 [ 2006.298505][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 2006.303337][ T28] ? _raw_spin_unlock+0x24/0x40 [ 2006.308231][ T28] ? alloc_fd+0x5a0/0x640 [ 2006.312926][ T28] do_sys_openat2+0x13b/0x4f0 [ 2006.317664][ T28] ? do_sys_open+0x220/0x220 [ 2006.322405][ T28] __x64_sys_openat+0x243/0x290 [ 2006.327294][ T28] ? __ia32_sys_open+0x270/0x270 [ 2006.332335][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2006.338347][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2006.343919][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2006.349976][ T28] do_syscall_64+0x3b/0xb0 [ 2006.354511][ T28] ? clear_bhb_loop+0x45/0xa0 [ 2006.359223][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2006.365199][ T28] RIP: 0033:0x7fba36380809 [ 2006.369631][ T28] RSP: 002b:00007fba37222058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2006.378371][ T28] RAX: ffffffffffffffda RBX: 00007fba36545fa0 RCX: 00007fba36380809 [ 2006.386498][ T28] RDX: 0000000000008502 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 2006.394530][ T28] RBP: 00007fba363f393e R08: 0000000000000000 R09: 0000000000000000 [ 2006.402847][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2006.411136][ T28] R13: 0000000000000001 R14: 00007fba36545fa0 R15: 00007ffc399f3a18 [ 2006.419151][ T28] [ 2006.422268][ T28] INFO: task syz.6.4497:21306 blocked for more than 144 seconds. [ 2006.430348][ T28] Not tainted 6.1.119-syzkaller #0 [ 2006.436016][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2006.444765][ T28] task:syz.6.4497 state:D stack:24512 pid:21306 ppid:13173 flags:0x00004004 [ 2006.454074][ T28] Call Trace: [ 2006.457360][ T28] [ 2006.460615][ T28] __schedule+0x143f/0x4570 [ 2006.465170][ T28] ? __mutex_lock+0x6b4/0xd80 [ 2006.469843][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2006.475888][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 2006.481461][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2006.486707][ T28] schedule+0xbf/0x180 [ 2006.491146][ T28] schedule_preempt_disabled+0xf/0x20 [ 2006.496538][ T28] __mutex_lock+0x6b9/0xd80 [ 2006.501132][ T28] ? __mutex_lock+0x53c/0xd80 [ 2006.505828][ T28] ? misc_open+0x58/0x380 [ 2006.510213][ T28] ? mutex_lock_nested+0x10/0x10 [ 2006.515171][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 2006.521308][ T28] misc_open+0x58/0x380 [ 2006.525501][ T28] chrdev_open+0x54a/0x630 [ 2006.530079][ T28] ? cd_forget+0x160/0x160 [ 2006.534561][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2006.539787][ T28] ? fsnotify_perm+0x472/0x590 [ 2006.544637][ T28] ? cd_forget+0x160/0x160 [ 2006.549084][ T28] do_dentry_open+0x7f9/0x10f0 [ 2006.554238][ T28] path_openat+0x2644/0x2e60 [ 2006.558866][ T28] ? mark_lock+0x9a/0x340 [ 2006.563326][ T28] ? do_filp_open+0x480/0x480 [ 2006.568046][ T28] do_filp_open+0x230/0x480 [ 2006.572626][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 2006.577279][ T28] ? _raw_spin_unlock+0x24/0x40 [ 2006.582521][ T28] ? alloc_fd+0x5a0/0x640 [ 2006.586887][ T28] do_sys_openat2+0x13b/0x4f0 [ 2006.591627][ T28] ? bpf_raw_tracepoint_open+0x1aa/0x210 [ 2006.597325][ T28] ? do_sys_open+0x220/0x220 [ 2006.602034][ T28] __x64_sys_openat+0x243/0x290 [ 2006.606919][ T28] ? __ia32_sys_open+0x270/0x270 [ 2006.612226][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2006.618232][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2006.623550][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2006.629556][ T28] do_syscall_64+0x3b/0xb0 [ 2006.634173][ T28] ? clear_bhb_loop+0x45/0xa0 [ 2006.638884][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2006.645134][ T28] RIP: 0033:0x7f6e03780809 [ 2006.649589][ T28] RSP: 002b:00007f6e0463f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2006.658253][ T28] RAX: ffffffffffffffda RBX: 00007f6e03945fa0 RCX: 00007f6e03780809 [ 2006.666307][ T28] RDX: 0000000000040241 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 2006.674613][ T28] RBP: 00007f6e037f393e R08: 0000000000000000 R09: 0000000000000000 [ 2006.682691][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2006.690813][ T28] R13: 0000000000000000 R14: 00007f6e03945fa0 R15: 00007ffc861d6f18 [ 2006.698829][ T28] [ 2006.702236][ T28] INFO: task syz.7.4502:21324 blocked for more than 145 seconds. [ 2006.710313][ T28] Not tainted 6.1.119-syzkaller #0 [ 2006.715970][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2006.724802][ T28] task:syz.7.4502 state:D stack:24512 pid:21324 ppid:15461 flags:0x00004004 [ 2006.734285][ T28] Call Trace: [ 2006.737561][ T28] [ 2006.740709][ T28] __schedule+0x143f/0x4570 [ 2006.745284][ T28] ? release_firmware_map_entry+0x186/0x186 [ 2006.751257][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 2006.756783][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2006.762356][ T28] schedule+0xbf/0x180 [ 2006.766464][ T28] schedule_preempt_disabled+0xf/0x20 [ 2006.771923][ T28] __mutex_lock+0x6b9/0xd80 [ 2006.776552][ T28] ? __mutex_lock+0x53c/0xd80 [ 2006.781383][ T28] ? misc_open+0x58/0x380 [ 2006.785759][ T28] ? mutex_lock_nested+0x10/0x10 [ 2006.791068][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 2006.796767][ T28] misc_open+0x58/0x380 [ 2006.801056][ T28] chrdev_open+0x54a/0x630 [ 2006.805517][ T28] ? cd_forget+0x160/0x160 [ 2006.809960][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 2006.815234][ T28] ? fsnotify_perm+0x472/0x590 [ 2006.820366][ T28] ? cd_forget+0x160/0x160 [ 2006.824833][ T28] do_dentry_open+0x7f9/0x10f0 [ 2006.829677][ T28] path_openat+0x2644/0x2e60 [ 2006.834373][ T28] ? mark_lock+0x9a/0x340 [ 2006.838775][ T28] ? do_filp_open+0x480/0x480 [ 2006.843570][ T28] do_filp_open+0x230/0x480 [ 2006.848102][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 2006.853290][ T28] ? _raw_spin_unlock+0x24/0x40 [ 2006.858257][ T28] ? alloc_fd+0x5a0/0x640 [ 2006.862688][ T28] do_sys_openat2+0x13b/0x4f0 [ 2006.867411][ T28] ? do_sys_open+0x220/0x220 [ 2006.872192][ T28] __x64_sys_openat+0x243/0x290 [ 2006.877081][ T28] ? __ia32_sys_open+0x270/0x270 [ 2006.882486][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2006.888499][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 2006.893772][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2006.899802][ T28] do_syscall_64+0x3b/0xb0 [ 2006.904295][ T28] ? clear_bhb_loop+0x45/0xa0 [ 2006.909000][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2006.915234][ T28] RIP: 0033:0x7f1131b7f170 [ 2006.919652][ T28] RSP: 002b:00007f113299af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2006.928151][ T28] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1131b7f170 [ 2006.936174][ T28] RDX: 0000000000000002 RSI: 00007f1131bf36d4 RDI: 00000000ffffff9c [ 2006.944464][ T28] RBP: 00007f1131bf36d4 R08: 0000000000000000 R09: 0000000000000000 [ 2006.952525][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 2006.960758][ T28] R13: 0000000000000036 R14: 0000000020000000 R15: 00007ffc882d4198 [ 2006.968847][ T28] [ 2006.972749][ T28] [ 2006.972749][ T28] Showing all locks held in the system: [ 2006.980559][ T28] 1 lock held by rcu_tasks_kthre/12: [ 2006.985849][ T28] #0: ffffffff8d32b110 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 2006.996392][ T28] 1 lock held by rcu_tasks_trace/13: [ 2007.002071][ T28] #0: ffffffff8d32b910 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 2007.013205][ T28] 1 lock held by khungtaskd/28: [ 2007.018064][ T28] #0: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2007.028054][ T28] 4 locks held by udevd/3623: [ 2007.033211][ T28] #0: ffff88805859cd58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 2007.042151][ T28] #1: ffff88802feaa088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0 [ 2007.051488][ T28] #2: ffff8880571031d8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0 [ 2007.061277][ T28] #3: ffff888074bf5100 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330 [ 2007.070495][ T28] 2 locks held by getty/4009: [ 2007.075218][ T28] #0: ffff88814cfaa098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2007.085118][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 2007.095605][ T28] 5 locks held by kworker/u4:12/4480: [ 2007.101084][ T28] 2 locks held by kworker/u4:17/4931: [ 2007.106493][ T28] 3 locks held by kworker/1:9/17165: [ 2007.116092][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 2007.126937][ T28] #1: ffffc90005807d20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 2007.139948][ T28] #2: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 2007.151707][ T28] 4 locks held by kworker/1:4/21096: [ 2007.157005][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 2007.167455][ T28] #1: ffffc9000f83fd20 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 2007.179302][ T28] #2: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x25/0xe0 [ 2007.189658][ T28] #3: ffff888074bf5100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 2007.199405][ T28] 1 lock held by syz.1.4474/21228: [ 2007.204573][ T28] #0: ffff888074bf5100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 2007.214684][ T28] 2 locks held by syz.0.4483/21268: [ 2007.219892][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.228405][ T28] #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x130/0x680 [ 2007.238621][ T28] 1 lock held by syz.2.4494/21299: [ 2007.244091][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.252663][ T28] 1 lock held by syz.6.4497/21306: [ 2007.257786][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.266276][ T28] 1 lock held by syz.7.4502/21324: [ 2007.271741][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.280278][ T28] 1 lock held by syz-executor/21326: [ 2007.285573][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.294218][ T28] 1 lock held by syz-executor/21328: [ 2007.299510][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.308300][ T28] 1 lock held by syz-executor/21331: [ 2007.313672][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.322206][ T28] 1 lock held by syz-executor/21332: [ 2007.327500][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.336305][ T28] 1 lock held by syz-executor/21335: [ 2007.341665][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.350204][ T28] 1 lock held by syz-executor/21344: [ 2007.355503][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.364426][ T28] 1 lock held by syz-executor/21346: [ 2007.369741][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.378368][ T28] 1 lock held by syz-executor/21349: [ 2007.383689][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.392473][ T28] 1 lock held by syz-executor/21350: [ 2007.397770][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.406401][ T28] 1 lock held by syz-executor/21353: [ 2007.411773][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.420613][ T28] 1 lock held by syz-executor/21362: [ 2007.425909][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.434433][ T28] 1 lock held by syz-executor/21364: [ 2007.439745][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.448296][ T28] 1 lock held by syz-executor/21367: [ 2007.453964][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.462522][ T28] 1 lock held by syz-executor/21368: [ 2007.467820][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.476365][ T28] 1 lock held by syz-executor/21370: [ 2007.481994][ T28] #0: ffffffff8da902a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 2007.490540][ T28] [ 2007.492918][ T28] ============================================= [ 2007.492918][ T28] [ 2007.501385][ T28] NMI backtrace for cpu 0 [ 2007.505732][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 2007.513648][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2007.523724][ T28] Call Trace: [ 2007.527049][ T28] [ 2007.529991][ T28] dump_stack_lvl+0x1e3/0x2cb [ 2007.534696][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 2007.540170][ T28] ? panic+0x764/0x764 [ 2007.544268][ T28] ? vprintk_emit+0x622/0x740 [ 2007.548973][ T28] ? printk_sprint+0x490/0x490 [ 2007.553746][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 2007.558866][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 2007.563823][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 2007.570008][ T28] ? _printk+0xd1/0x111 [ 2007.574179][ T28] ? panic+0x764/0x764 [ 2007.578243][ T28] ? __wake_up_klogd+0xcc/0x100 [ 2007.583105][ T28] ? panic+0x764/0x764 [ 2007.587212][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 2007.593289][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2007.599356][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 2007.605352][ T28] watchdog+0xf88/0xfd0 [ 2007.609522][ T28] ? watchdog+0x1f8/0xfd0 [ 2007.613860][ T28] kthread+0x28d/0x320 [ 2007.617946][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2007.622977][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2007.627568][ T28] ret_from_fork+0x1f/0x30 [ 2007.632004][ T28] [ 2007.635550][ T28] Sending NMI from CPU 0 to CPUs 1: [ 2007.640835][ C1] NMI backtrace for cpu 1 [ 2007.640851][ C1] CPU: 1 PID: 4931 Comm: kworker/u4:17 Not tainted 6.1.119-syzkaller #0 [ 2007.640869][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2007.640879][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 2007.640905][ C1] RIP: 0010:unwind_next_frame+0x767/0x2220 [ 2007.640926][ C1] Code: 84 c0 0f 84 45 04 00 00 89 d9 80 e1 07 38 c1 0f 8c 38 04 00 00 be 02 00 00 00 49 89 fe 48 89 df e8 4e 49 a5 00 e9 63 19 00 00 <48> 8b 44 24 60 80 3c 38 00 4c 8b 24 24 48 8b 5c 24 68 74 0e 49 89 [ 2007.640945][ C1] RSP: 0018:ffffc9000cdf75a0 EFLAGS: 00000297 [ 2007.640958][ C1] RAX: 0000000000000003 RBX: 0000000000000005 RCX: ffffffff8eaaf14c [ 2007.640970][ C1] RDX: ffffffff8f17b5a0 RSI: ffffffff815b1887 RDI: dffffc0000000000 [ 2007.640983][ C1] RBP: ffffffff8f17b5a0 R08: 0000000000000001 R09: ffffc9000cdf7770 [ 2007.640996][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2007.641007][ C1] R13: ffffffff8f17b5a4 R14: ffffffff8eaaf148 R15: 1ffffffff1e2f6b4 [ 2007.641020][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2007.641034][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2007.641046][ C1] CR2: 000055d7fab7b680 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 2007.641061][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2007.641071][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2007.641083][ C1] Call Trace: [ 2007.641087][ C1] [ 2007.641093][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 2007.641119][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2007.641148][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 2007.641174][ C1] ? nmi_handle+0x25/0x440 [ 2007.641208][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 2007.641224][ C1] ? nmi_handle+0x12e/0x440 [ 2007.641250][ C1] ? nmi_handle+0x25/0x440 [ 2007.641277][ C1] ? unwind_next_frame+0x767/0x2220 [ 2007.641295][ C1] ? default_do_nmi+0x62/0x150 [ 2007.641322][ C1] ? exc_nmi+0xa8/0x100 [ 2007.641348][ C1] ? end_repeat_nmi+0x16/0x31 [ 2007.641378][ C1] ? worker_thread+0xa47/0x1200 [ 2007.641398][ C1] ? unwind_next_frame+0x767/0x2220 [ 2007.641417][ C1] ? unwind_next_frame+0x767/0x2220 [ 2007.641437][ C1] ? unwind_next_frame+0x767/0x2220 [ 2007.641456][ C1] [ 2007.641460][ C1] [ 2007.641472][ C1] ? worker_thread+0xa47/0x1200 [ 2007.641493][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 2007.641517][ C1] arch_stack_walk+0x10d/0x140 [ 2007.641539][ C1] ? worker_thread+0xa47/0x1200 [ 2007.641561][ C1] stack_trace_save+0x113/0x1c0 [ 2007.641586][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 2007.641614][ C1] ? stack_trace_save+0x113/0x1c0 [ 2007.641640][ C1] kasan_set_track+0x4b/0x70 [ 2007.641666][ C1] ? kasan_set_track+0x4b/0x70 [ 2007.641690][ C1] ? __kasan_slab_alloc+0x65/0x70 [ 2007.641705][ C1] ? slab_post_alloc_hook+0x52/0x3a0 [ 2007.641727][ C1] ? kmem_cache_alloc_node+0x136/0x310 [ 2007.641747][ C1] ? __alloc_skb+0xde/0x670 [ 2007.641768][ C1] ? nsim_dev_trap_report_work+0x24c/0xab0 [ 2007.641789][ C1] ? process_one_work+0x8a9/0x11d0 [ 2007.641808][ C1] ? worker_thread+0xa47/0x1200 [ 2007.641858][ C1] __kasan_slab_alloc+0x65/0x70 [ 2007.641875][ C1] slab_post_alloc_hook+0x52/0x3a0 [ 2007.641900][ C1] kmem_cache_alloc_node+0x136/0x310 [ 2007.641921][ C1] ? __alloc_skb+0xde/0x670 [ 2007.641945][ C1] __alloc_skb+0xde/0x670 [ 2007.641966][ C1] ? nsim_dev_trap_report_work+0x75d/0xab0 [ 2007.641990][ C1] nsim_dev_trap_report_work+0x24c/0xab0 [ 2007.642020][ C1] ? process_one_work+0x7a9/0x11d0 [ 2007.642039][ C1] process_one_work+0x8a9/0x11d0 [ 2007.642067][ C1] ? worker_detach_from_pool+0x260/0x260 [ 2007.642090][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2007.642111][ C1] ? kthread_data+0x4e/0xc0 [ 2007.642139][ C1] ? wq_worker_running+0x97/0x190 [ 2007.642156][ C1] worker_thread+0xa47/0x1200 [ 2007.642181][ C1] ? _raw_spin_unlock+0x40/0x40 [ 2007.642208][ C1] kthread+0x28d/0x320 [ 2007.642222][ C1] ? worker_clr_flags+0x190/0x190 [ 2007.642242][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2007.642258][ C1] ret_from_fork+0x1f/0x30 [ 2007.642288][ C1] [ 2007.642964][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2008.052378][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 2008.060265][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2008.070336][ T28] Call Trace: [ 2008.073611][ T28] [ 2008.076553][ T28] dump_stack_lvl+0x1e3/0x2cb [ 2008.081260][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 2008.086723][ T28] ? panic+0x764/0x764 [ 2008.090807][ T28] ? vscnprintf+0x59/0x80 [ 2008.095160][ T28] panic+0x318/0x764 [ 2008.099064][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 2008.105226][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 2008.110632][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 2008.116890][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 2008.123058][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 2008.129216][ T28] watchdog+0xfc7/0xfd0 [ 2008.133393][ T28] ? watchdog+0x1f8/0xfd0 [ 2008.137738][ T28] kthread+0x28d/0x320 [ 2008.141819][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2008.146869][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2008.151474][ T28] ret_from_fork+0x1f/0x30 [ 2008.155902][ T28] [ 2008.159195][ T28] Kernel Offset: disabled [ 2008.163520][ T28] Rebooting in 86400 seconds..