last executing test programs: 12m15.486681219s ago: executing program 3 (id=203): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 12m14.058591145s ago: executing program 3 (id=206): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80d08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, 0x0) pipe(0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000014c0)=ANY=[@ANYBLOB="030000000000000002004e26e0000002"], 0x90) stat(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 12m12.797475379s ago: executing program 3 (id=208): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 12m11.675113142s ago: executing program 3 (id=209): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000340), 0x0, 0x0, 0x200000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b8", 0x93, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 12m10.439875495s ago: executing program 3 (id=213): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x104, 0x10, 0x7, 0x70bd25, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ecf2dba1371f375, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x10003, 0x80000001, 0x14000000, 0x0, 0x1000000, 0xfffffffffffffffe}, {0x0, 0x2, 0x7, 0xffffffffffffff1d}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x64}, [@coaddr={0x14, 0xe, @in=@private=0xa010102}]}, 0x104}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000240)) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000129000/0x2000)=nil, 0x2000, 0xe) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_procfs(0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) 12m8.304238849s ago: executing program 3 (id=220): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgrp(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x129140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x4040004, 0x0, 0x0) 11m52.777852352s ago: executing program 32 (id=220): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgrp(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x129140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x4040004, 0x0, 0x0) 1m44.791876809s ago: executing program 0 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r1, 0x0, 0x1b, 0x22, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast2}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = fcntl$dupfd(r2, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000100)={0x7, 0x0, [{0x0, 0x0, 0x7}, {0x400000b3, 0x0, 0x1}, {0x2c, 0x0, 0x100000000}, {0x9a7, 0x0, 0x2000000f0a}, {0x809, 0x0, 0x3}, {0x879, 0x0, 0x8}, {0xada}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}}, 0x800) 1m43.483393054s ago: executing program 0 (id=1862): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) socket$packet(0x11, 0x2, 0x300) r1 = msgget$private(0x0, 0x3ac) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x24000, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4840) msgrcv(r1, 0x0, 0x0, 0x2, 0x2800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000440)={{0xffffffff, 0x40000, 0x4, 0x9, 0x3, 0x5, 0xac, 0x0, 0x5, 0x7, 0x8, 0x2a}, {0x80a0000, 0x9000, 0xc, 0x88, 0x7, 0x40, 0x2, 0xf4, 0x8, 0x1}, {0x70000, 0x0, 0x4, 0x6, 0x9, 0x2, 0x3, 0x6, 0x9, 0xfb, 0xe, 0xe}, {0x1000, 0xdddd0000, 0x4, 0x3, 0x6, 0xd5, 0x6, 0x7, 0x37, 0x5, 0x40, 0x1c}, {0x60000, 0xeeee0000, 0x7, 0x1, 0x2, 0x8, 0x4, 0x86, 0x9, 0x4, 0xfe, 0x7}, {0xa000, 0x25000, 0x0, 0x6, 0x7, 0xad, 0x6, 0x9, 0x3, 0x34, 0x8, 0x9}, {0x40000, 0x8080000, 0x8, 0x0, 0x1, 0x1, 0x14, 0x8, 0x4, 0x0, 0x8, 0xd}, {0x1000, 0xd000, 0xf, 0x2, 0x4, 0x6f, 0x0, 0x1, 0x4, 0x7, 0xa, 0x1}, {0x8000000, 0x3000}, {0xf000, 0x9}, 0x2, 0x0, 0x58000, 0x21010b, 0x3, 0x6100, 0xb000, 0x1, [0xfffffffffffffc01, 0x0, 0x4, 0x8]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) dup(r4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r8], 0x1c}}, 0x0) 1m39.237759621s ago: executing program 0 (id=1870): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000900)={0xfffffffb, 0x50424752, 0x2, @stepwise={0x3, 0xff, 0xfffffbff, 0x9, 0x2, 0x7f}}) 1m36.081793256s ago: executing program 0 (id=1880): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, 0x0, 0x340a) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x32440, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'dvmrp1\x00', 0x1001}) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000380)) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @remote}, 0x14) 1m28.935283087s ago: executing program 0 (id=1890): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x98f905, 0xffffbeff, '\x00', @p_u32=0x0}}) 1m27.965783497s ago: executing program 0 (id=1892): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x1) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x400c045) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x4}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0xfffffffd, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m11.015652596s ago: executing program 33 (id=1892): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x1) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x400c045) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x4}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0xfffffffd, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 9.999123618s ago: executing program 4 (id=2077): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="000428bd70714574b0000000002502000000060005000700000005000500050000000800040035b400000800020002"], 0x34}}, 0xab9775e8620bbf79) r1 = socket(0xa, 0x2, 0x0) r2 = inotify_init() r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r4}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r4}, 0xc) 9.155716048s ago: executing program 4 (id=2079): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}], 0x2, 0xffee) 7.993136671s ago: executing program 2 (id=2081): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8000000000007, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x90, r4, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x10200, 0x200070}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x91}, 0x20014184) rt_sigqueueinfo(0x0, 0x21, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$getown(r5, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000025300)=""/102392, 0x18ff8) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x1, 0xa00083, &(0x7f0000000040)="1a000000020002008b9eb7cd8c8dd387ac413822bb397e3ac0590c7656f6ad80171e32c2", 0x24) setsockopt(r8, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) setsockopt$IP_VS_SO_SET_DEL(r9, 0x0, 0x484, &(0x7f0000000280)={0x87, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'lc\x00', 0x0, 0x6, 0x5f}, 0x2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0), 0x14) sendto$inet6(r8, &(0x7f00000004c0)="98", 0x1, 0x4000080, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) 7.727440824s ago: executing program 4 (id=2082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x408}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffeffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040844}, 0x40840) 7.725861804s ago: executing program 5 (id=2083): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000ffffffff0000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 7.619450515s ago: executing program 5 (id=2084): syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_flowlabel\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7.273663179s ago: executing program 4 (id=2086): ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d200000442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3300000e"], 0x0) 7.246126319s ago: executing program 5 (id=2088): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x202) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1a) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040100"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4a88, &(0x7f0000000300)={0x0, 0x4179, 0x40, 0x1, 0x3d7}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 7.077881931s ago: executing program 4 (id=2089): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) close(r1) 5.683833456s ago: executing program 1 (id=2091): socket$inet_udp(0x2, 0x2, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) accept4(r2, &(0x7f0000000180)=@isdn, &(0x7f0000000300)=0x80, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/191) ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) 5.187171132s ago: executing program 4 (id=2092): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000340)={0xe939, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x4008011, r0, 0x100000000) syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r6, 0x0, 0x0) r7 = creat(0x0, 0x12e) close(r7) 4.745861727s ago: executing program 2 (id=2094): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f00000001c0)="8953b519a795020072aed129d4d9abf416fd83f942661c47bcdf71f7d07ba20d0347484a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de000000000000fffffffffffffffff1d3b9821c18680000000000000000000000000000746da2b7bf08c49a507ae0e7066d866e8cbb65279681be9886ee4f84782880c5b978669d0076e9b7607f0e1cfb7afcffffffe17bbbbd01d9a995567fadea87c581305bf8192100b4bb8997fc871d9da8f463371cc031493b50c7d7d12483859f32065e000000000000000000000000000004a8ff8bc0f207c5e00ca986015cbc4783b12d81c2590a7ac44dd22135339b2743aa2c07743ffe17e00acf1c1e55424cd2f8e01f91267ff3bcee145f631fd453c14d7f88be310946782e97fa5f80", 0xfe06) 4.623563568s ago: executing program 6 (id=2095): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000ffffffff0000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 4.617870948s ago: executing program 2 (id=2096): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {}, {0x0, 0xff}, 0xfd}], 0x20) syz_open_dev$sndpcmc(0x0, 0x0, 0x20101) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000003c0)="416e1e98b645ff3bf42c693588e4e6d63b2492a320c549756d905a8790f3ddffa564", 0x22, 0xfffffffffffffffe) 4.49387329s ago: executing program 6 (id=2097): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x7}, 0x94) 3.352458123s ago: executing program 1 (id=2098): syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_flowlabel\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.263054763s ago: executing program 6 (id=2099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x115c, &(0x7f0000000600)={0x0, 0xbaed, 0x2000, 0x3, 0x117}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @val={0xc, 0x99, {0xb, 0x4000003f}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'team0\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.003635567s ago: executing program 2 (id=2100): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000112c00)={{0x0, 0x4, 0xffffffffffffa31f, 0x8, 0x1, 0x9, 0x10001, 0x0, 0x7, 0x8, 0x9, 0x67, 0x8, 0x401, 0x2a8a}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000113e80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "31f0a9fb7ddd9f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000114e80)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}], 0x0, "d2aceb73a56730"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x8040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r7, 0x81000000) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 2.913771028s ago: executing program 1 (id=2101): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r0, 0x0, 0x4000010) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe1fd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xf}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4042040}, 0x800) 2.502390072s ago: executing program 1 (id=2102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioprio_set$pid(0x3, 0x0, 0x2000) socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x5, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x1, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x6, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0x10, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x3, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x9, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8006, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x311, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x17, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x8001, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e3, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0x4, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x922, 0x10000, 0x6, 0x7ffe, 0x0, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xedd, 0xfffff000, 0xffff, 0x3, 0x7f, 0x7, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) listen(r6, 0x5) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x40}}, 0x0) 2.449361043s ago: executing program 5 (id=2103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="000428bd70714574b0000000002502000000060005000700000005000500050000000800040035b400000800020002"], 0x34}}, 0xab9775e8620bbf79) r1 = socket(0xa, 0x2, 0x0) r2 = inotify_init() r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r4}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r4}, 0xc) 2.236253465s ago: executing program 6 (id=2104): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1a000}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}], 0x1, 0x0) 2.148739466s ago: executing program 2 (id=2105): r0 = socket$unix(0x1, 0x5, 0x0) shutdown(r0, 0x21a9b374d320ac7a) 2.117378766s ago: executing program 5 (id=2106): r0 = syz_usbip_server_init(0x2) write$usbip_server(r0, &(0x7f0000000040)=@ret_unlink={{0x4, 0x8001, 0x0, 0x1, 0x3}, {0x2}}, 0x30) 1.721965591s ago: executing program 6 (id=2107): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000ffffffff0000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 1.592579462s ago: executing program 2 (id=2108): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = syz_open_dev$video4linux(0x0, 0x7e, 0x8402) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000180)={0xffffffff, 0x4, "40179b048380a4f63751aa3b28f32e6c3199a4dfb027b8a93126c4af2a8f7cb7", 0xd5b, 0x5, 0x7, 0x7, 0x840}) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) 1.054629738s ago: executing program 1 (id=2109): socket$inet_udp(0x2, 0x2, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) accept4(r2, &(0x7f0000000180)=@isdn, &(0x7f0000000300)=0x80, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/191) ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00090027bd7000b805f33b0b"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 993.891609ms ago: executing program 6 (id=2110): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) 13.24165ms ago: executing program 1 (id=2111): syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_flowlabel\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x42, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 5 (id=2112): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): my_hcd [ 352.793087][ T7405] overlayfs: missing 'workdir' [ 354.822774][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 354.823847][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 354.823883][ T26] audit: type=1326 audit(1778280502.105:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 354.934766][ T26] audit: type=1326 audit(1778280502.105:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 354.967448][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.991354][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.171664][ T26] audit: type=1326 audit(1778280502.114:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 355.295531][ T26] audit: type=1326 audit(1778280502.114:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 355.427324][ T23] usb 6-1: string descriptor 0 read error: -22 [ 355.433750][ T23] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 355.447869][ T26] audit: type=1326 audit(1778280502.114:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 355.473241][ T26] audit: type=1326 audit(1778280502.114:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 355.499756][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.535943][ T26] audit: type=1326 audit(1778280502.114:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 355.568422][ T26] audit: type=1326 audit(1778280502.114:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 355.620061][ T26] audit: type=1326 audit(1778280502.114:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 355.803314][ T23] usb 6-1: can't set config #1, error -71 [ 355.820244][ T26] audit: type=1326 audit(1778280502.114:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f53dd0dddd9 code=0x7ffc0000 [ 355.820285][ T23] usb 6-1: USB disconnect, device number 9 [ 358.765287][ T7441] overlayfs: missing 'workdir' [ 359.326717][ T4337] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 359.636649][ T4337] usb 5-1: Using ep0 maxpacket: 16 [ 359.764985][ T4337] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 359.778502][ T4337] usb 5-1: config 1 has no interface number 0 [ 359.789249][ T4337] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 359.799669][ T4337] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 359.810217][ T4337] usb 5-1: config 1 interface 105 has no altsetting 0 [ 360.000028][ T4337] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 361.385277][ T4337] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 361.393833][ T4337] usb 5-1: Product: syz [ 361.398005][ T4337] usb 5-1: Manufacturer: syz [ 361.404194][ T4337] usb 5-1: SerialNumber: syz [ 361.448158][ T7445] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 361.473787][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 361.560633][ T7445] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 363.678492][ T7465] overlayfs: failed to set xattr on upper [ 363.684267][ T7465] overlayfs: ...falling back to index=off,metacopy=off. [ 365.215915][ T4337] aqc111: probe of 5-1:1.105 failed with error -71 [ 366.715464][ T4337] usb 5-1: USB disconnect, device number 10 [ 366.976092][ T7484] overlayfs: missing 'workdir' [ 367.653372][ T4337] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 367.929010][ T4337] usb 2-1: Using ep0 maxpacket: 16 [ 368.142042][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.153090][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.163751][ T4337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 368.176862][ T4337] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 368.186218][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.218480][ T4337] usb 2-1: config 0 descriptor?? [ 368.634317][ T6113] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 368.654705][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 368.654722][ T26] audit: type=1326 audit(1778280771.781:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 368.741874][ T26] audit: type=1326 audit(1778280771.818:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 368.746904][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x2 [ 368.821457][ T26] audit: type=1326 audit(1778280771.818:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 368.861269][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 368.911256][ T26] audit: type=1326 audit(1778280771.818:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 368.912193][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 369.012445][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 369.044658][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 369.061732][ T6113] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.083434][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 369.090713][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 369.136657][ T6113] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.147258][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 369.154537][ T4337] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 369.199280][ T26] audit: type=1326 audit(1778280771.818:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 369.232836][ T6113] usb 1-1: config 0 has no interface number 0 [ 369.251219][ T4337] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input10 [ 369.280204][ T6113] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 369.310649][ T4337] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 369.393094][ T4337] usb 2-1: USB disconnect, device number 13 [ 369.452828][ T6113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.507096][ T26] audit: type=1326 audit(1778280771.828:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 369.564810][ T6113] usb 1-1: config 0 descriptor?? [ 369.571258][ T7505] fido_id[7505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 369.608296][ T6113] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 369.636109][ T26] audit: type=1326 audit(1778280771.828:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 369.734883][ T26] audit: type=1326 audit(1778280771.828:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 369.810810][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 369.824310][ T26] audit: type=1326 audit(1778280771.828:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 370.037287][ T7512] fuse: Bad value for 'group_id' [ 370.046308][ T23] usb 1-1: USB disconnect, device number 11 [ 370.063896][ T26] audit: type=1326 audit(1778280771.828:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.2.855" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 375.725976][ T7558] overlayfs: failed to set xattr on upper [ 375.731776][ T7558] overlayfs: ...falling back to index=off,metacopy=off. [ 376.047622][ T7566] fuse: Bad value for 'fd' [ 386.163535][ T7616] overlayfs: failed to set xattr on upper [ 386.169356][ T7616] overlayfs: ...falling back to index=off,metacopy=off. [ 386.678796][ T4276] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 386.960779][ T4276] usb 6-1: Using ep0 maxpacket: 16 [ 387.122039][ T4276] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.133404][ T4276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.153130][ T4276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 387.162892][ T4276] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 387.195835][ T4276] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.313709][ T4276] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 387.322880][ T4276] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 387.364787][ T4276] usb 6-1: Manufacturer: syz [ 387.475032][ T4276] usb 6-1: config 0 descriptor?? [ 387.506008][ T4276] usb 6-1: can't set config #0, error -71 [ 387.530093][ T4276] usb 6-1: USB disconnect, device number 10 [ 387.831087][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 387.891688][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.902328][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.604939][ T7660] netlink: 56 bytes leftover after parsing attributes in process `syz.4.904'. [ 388.630708][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.894694][ T7670] overlayfs: failed to set xattr on upper [ 388.900561][ T7670] overlayfs: ...falling back to index=off,metacopy=off. [ 388.914952][ T7660] device bridge_slave_0 left promiscuous mode [ 388.922755][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.528462][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 391.556775][ T7712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.919'. [ 391.580616][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.736947][ T7717] overlayfs: failed to set xattr on upper [ 391.743088][ T7717] overlayfs: ...falling back to index=off,metacopy=off. [ 392.037869][ T7712] device bridge_slave_0 left promiscuous mode [ 392.044183][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.516792][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 392.516806][ T26] audit: type=1326 audit(1778280794.118:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 392.686774][ T26] audit: type=1326 audit(1778280794.156:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 392.833508][ T26] audit: type=1326 audit(1778280794.156:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 392.913272][ T26] audit: type=1326 audit(1778280794.156:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 392.938108][ T26] audit: type=1326 audit(1778280794.156:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 392.985215][ T26] audit: type=1326 audit(1778280794.156:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 393.221699][ T26] audit: type=1326 audit(1778280794.156:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 393.358161][ T26] audit: type=1326 audit(1778280794.156:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 393.588693][ T26] audit: type=1326 audit(1778280794.156:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 393.612741][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.699897][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 394.330171][ T26] audit: type=1326 audit(1778280794.156:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.2.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 395.260556][ T7768] overlayfs: failed to set xattr on upper [ 395.266546][ T7768] overlayfs: ...falling back to index=off,metacopy=off. [ 396.077250][ T7773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.938'. [ 396.925834][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 398.150925][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 398.150940][ T26] audit: type=1326 audit(1778280799.396:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 398.312695][ T26] audit: type=1326 audit(1778280799.424:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 398.593107][ T26] audit: type=1326 audit(1778280799.424:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 398.617259][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.629807][ T7814] netlink: 56 bytes leftover after parsing attributes in process `syz.0.953'. [ 398.712566][ T26] audit: type=1326 audit(1778280799.424:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 398.736699][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.921222][ T26] audit: type=1326 audit(1778280799.424:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 398.950868][ T26] audit: type=1326 audit(1778280799.424:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 399.619229][ T7821] overlayfs: failed to set xattr on upper [ 399.625503][ T7821] overlayfs: ...falling back to index=off,metacopy=off. [ 400.205251][ T26] audit: type=1326 audit(1778280799.424:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 400.229401][ T26] audit: type=1326 audit(1778280799.434:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 400.253474][ T26] audit: type=1326 audit(1778280799.434:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 400.277476][ T26] audit: type=1326 audit(1778280799.434:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.5.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 401.122705][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 401.697815][ T7846] fuse: Bad value for 'group_id' [ 402.005354][ T7858] netlink: 56 bytes leftover after parsing attributes in process `syz.1.967'. [ 402.014543][ T7858] netlink: 'syz.1.967': attribute type 2 has an invalid length. [ 402.022330][ T7858] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 402.030109][ T7858] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 402.037867][ T7858] netlink: 52 bytes leftover after parsing attributes in process `syz.1.967'. [ 403.638793][ T7871] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 403.882421][ T6165] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 405.586562][ T6165] usb 2-1: Using ep0 maxpacket: 16 [ 405.995682][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 406.634022][ T6165] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 406.652586][ T6165] usb 2-1: can't read configurations, error -71 [ 406.701197][ T7888] netlink: 56 bytes leftover after parsing attributes in process `syz.5.976'. [ 406.764723][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.401572][ T7888] device bridge_slave_0 left promiscuous mode [ 407.407806][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.764812][ T7913] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 408.085110][ T7919] overlayfs: failed to set xattr on upper [ 408.091286][ T7919] overlayfs: ...falling back to index=off,metacopy=off. [ 409.715796][ T7937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.990'. [ 409.724888][ T7937] netlink: 'syz.1.990': attribute type 2 has an invalid length. [ 409.732690][ T7937] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 409.740434][ T7937] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 409.748286][ T7937] netlink: 52 bytes leftover after parsing attributes in process `syz.1.990'. [ 409.784139][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 409.812730][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 410.276249][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 410.458741][ T7937] ceph: No mds server is up or the cluster is laggy [ 410.577361][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 410.583526][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 411.189112][ T7960] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 412.437330][ T7972] overlayfs: failed to set xattr on upper [ 412.443275][ T7972] overlayfs: ...falling back to index=off,metacopy=off. [ 415.121694][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 416.050393][ T8004] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 416.335672][ T8014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1009'. [ 416.344859][ T8014] netlink: 'syz.4.1009': attribute type 2 has an invalid length. [ 416.352858][ T8014] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 416.360663][ T8014] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 416.368512][ T8014] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1009'. [ 416.461600][ T21] libceph: connect (1)[c::]:6789 error -101 [ 416.471374][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 416.780495][ T21] libceph: connect (1)[c::]:6789 error -101 [ 416.788060][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 416.958176][ T8014] ceph: No mds server is up or the cluster is laggy [ 417.425475][ T8024] overlayfs: failed to set xattr on upper [ 417.431384][ T8024] overlayfs: ...falling back to index=off,metacopy=off. [ 418.991458][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 419.898254][ T8050] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 420.121227][ T8056] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1021'. [ 420.482015][ T8063] overlayfs: failed to set xattr on upper [ 420.487861][ T8063] overlayfs: ...falling back to index=off,metacopy=off. [ 420.718292][ T8066] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1027'. [ 420.727431][ T8066] netlink: 'syz.5.1027': attribute type 2 has an invalid length. [ 420.735581][ T8066] netlink: 'syz.5.1027': attribute type 1 has an invalid length. [ 420.743336][ T8066] netlink: 'syz.5.1027': attribute type 1 has an invalid length. [ 420.751148][ T8066] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1027'. [ 420.792593][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 420.800734][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 421.081895][ T21] libceph: connect (1)[c::]:6789 error -101 [ 421.089291][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 421.363994][ T8066] ceph: No mds server is up or the cluster is laggy [ 421.848629][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1032'. [ 422.762346][ T8090] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 423.529359][ T8100] overlayfs: failed to set xattr on upper [ 423.535127][ T8100] overlayfs: ...falling back to index=off,metacopy=off. [ 424.318821][ T8112] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1042'. [ 424.328114][ T8112] netlink: 'syz.5.1042': attribute type 2 has an invalid length. [ 424.336067][ T8112] netlink: 'syz.5.1042': attribute type 1 has an invalid length. [ 424.344075][ T8112] netlink: 'syz.5.1042': attribute type 1 has an invalid length. [ 424.352020][ T8112] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1042'. [ 424.546763][ T7869] libceph: connect (1)[c::]:6789 error -101 [ 424.606000][ T7869] libceph: mon0 (1)[c::]:6789 connect error [ 424.846822][ T8112] ceph: No mds server is up or the cluster is laggy [ 424.897032][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 424.904891][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 425.534170][ T8130] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 426.054371][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 426.835370][ T8143] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1047'. [ 428.990840][ T8155] overlayfs: failed to set xattr on upper [ 428.996629][ T8155] overlayfs: ...falling back to index=off,metacopy=off. [ 430.309618][ T8169] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 430.793956][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 433.282296][ T8201] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1065'. [ 433.291487][ T8201] netlink: 'syz.5.1065': attribute type 2 has an invalid length. [ 433.299364][ T8201] netlink: 'syz.5.1065': attribute type 1 has an invalid length. [ 433.307196][ T8201] netlink: 'syz.5.1065': attribute type 1 has an invalid length. [ 433.314956][ T8201] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1065'. [ 433.384072][ T4337] libceph: connect (1)[c::]:6789 error -101 [ 433.400259][ T4337] libceph: mon0 (1)[c::]:6789 connect error [ 433.811514][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 433.881607][ T8201] ceph: No mds server is up or the cluster is laggy [ 433.916196][ T8208] overlayfs: failed to set xattr on upper [ 434.843747][ T8208] overlayfs: ...falling back to index=off,metacopy=off. [ 435.982328][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 438.415429][ T8222] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 438.808536][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 439.877130][ T8236] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1074'. [ 441.740261][ T8252] overlayfs: failed to set xattr on upper [ 441.766215][ T8252] overlayfs: ...falling back to index=off,metacopy=off. [ 442.205935][ T8260] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 442.560665][ T8270] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1082'. [ 442.569748][ T8270] netlink: 'syz.0.1082': attribute type 2 has an invalid length. [ 442.577678][ T8270] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 442.585589][ T8270] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 442.593359][ T8270] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1082'. [ 443.151126][ T8270] ceph: No mds server is up or the cluster is laggy [ 443.350632][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 448.747892][ T8324] overlayfs: failed to set xattr on upper [ 448.753976][ T8324] overlayfs: ...falling back to index=off,metacopy=off. [ 449.604904][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 450.305633][ T8334] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1098'. [ 450.314883][ T8334] netlink: 'syz.0.1098': attribute type 2 has an invalid length. [ 450.322707][ T8334] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 450.330721][ T8334] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 450.338479][ T8334] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1098'. [ 450.604724][ T8338] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 450.997882][ T8334] ceph: No mds server is up or the cluster is laggy [ 451.373894][ T8347] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1100'. [ 453.432014][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.438426][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.773783][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 455.547093][ T8381] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 455.890316][ T8387] overlayfs: failed to set xattr on upper [ 455.896211][ T8387] overlayfs: ...falling back to index=off,metacopy=off. [ 456.872564][ T8389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1113'. [ 456.881632][ T8389] netlink: 'syz.2.1113': attribute type 2 has an invalid length. [ 456.889499][ T8389] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 456.897368][ T8389] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 456.905399][ T8389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1113'. [ 456.948402][ T6113] libceph: connect (1)[c::]:6789 error -101 [ 456.997269][ T6113] libceph: mon0 (1)[c::]:6789 connect error [ 457.309629][ T6113] libceph: connect (1)[c::]:6789 error -101 [ 457.315707][ T6113] libceph: mon0 (1)[c::]:6789 connect error [ 457.534129][ T8389] ceph: No mds server is up or the cluster is laggy [ 459.901778][ T8425] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 460.014877][ T8433] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1121'. [ 460.047426][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.194316][ T8437] overlayfs: failed to set xattr on upper [ 460.200273][ T8437] overlayfs: ...falling back to index=off,metacopy=off. [ 460.505516][ T8433] device bridge_slave_0 left promiscuous mode [ 460.511776][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.161761][ T8442] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1126'. [ 461.171113][ T8442] netlink: 'syz.4.1126': attribute type 2 has an invalid length. [ 461.179023][ T8442] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 461.186769][ T8442] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 461.194531][ T8442] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1126'. [ 461.263930][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 461.272694][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 461.550378][ T8438] libceph: connect (1)[c::]:6789 error -101 [ 461.563551][ T8438] libceph: mon0 (1)[c::]:6789 connect error [ 461.882129][ T8442] ceph: No mds server is up or the cluster is laggy [ 465.338741][ T8484] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 465.915708][ T8494] overlayfs: failed to set xattr on upper [ 465.921784][ T8494] overlayfs: ...falling back to index=off,metacopy=off. [ 466.910365][ T8497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1140'. [ 466.919466][ T8497] netlink: 'syz.4.1140': attribute type 2 has an invalid length. [ 466.927302][ T8497] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 466.935194][ T8497] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 466.943187][ T8497] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1140'. [ 467.024526][ T7260] libceph: connect (1)[c::]:6789 error -101 [ 467.031862][ T7260] libceph: mon0 (1)[c::]:6789 connect error [ 467.343391][ T7260] libceph: connect (1)[c::]:6789 error -101 [ 467.375864][ T7260] libceph: mon0 (1)[c::]:6789 connect error [ 467.604246][ T8497] ceph: No mds server is up or the cluster is laggy [ 468.702061][ T8518] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1143'. [ 469.762756][ T8526] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 469.788526][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.203817][ T8518] device bridge_slave_0 left promiscuous mode [ 470.210113][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.026574][ T8537] overlayfs: failed to set xattr on upper [ 471.032546][ T8537] overlayfs: ...falling back to index=off,metacopy=off. [ 473.822257][ T8568] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 474.011396][ T8572] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1160'. [ 474.020554][ T8572] netlink: 'syz.4.1160': attribute type 2 has an invalid length. [ 474.028330][ T8572] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 474.036200][ T8572] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 474.043990][ T8572] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1160'. [ 474.083826][ T7] libceph: connect (1)[c::]:6789 error -101 [ 474.090043][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 474.727685][ T7] libceph: connect (1)[c::]:6789 error -101 [ 474.733793][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 474.818950][ T8572] ceph: No mds server is up or the cluster is laggy [ 476.388894][ T8605] overlayfs: failed to set xattr on upper [ 476.394956][ T8605] overlayfs: ...falling back to index=off,metacopy=off. [ 478.261951][ T8615] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 480.510215][ T8642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1178'. [ 480.519629][ T8642] netlink: 'syz.0.1178': attribute type 2 has an invalid length. [ 480.527572][ T8642] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 480.535775][ T8642] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 480.543758][ T8642] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1178'. [ 481.317313][ T8642] ceph: No mds server is up or the cluster is laggy [ 482.487930][ T8660] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 484.584025][ T8675] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1187'. [ 486.216862][ T8691] overlayfs: failed to set xattr on upper [ 486.222870][ T8691] overlayfs: ...falling back to index=off,metacopy=off. [ 487.823796][ T8701] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 488.140166][ T8707] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1194'. [ 488.149412][ T8707] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 488.157260][ T8707] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 488.165166][ T8707] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 488.173156][ T8707] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1194'. [ 488.982769][ T8707] ceph: No mds server is up or the cluster is laggy [ 492.651062][ T8754] overlayfs: failed to set xattr on upper [ 492.657041][ T8754] overlayfs: ...falling back to index=off,metacopy=off. [ 493.510757][ T8756] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 494.075230][ T8767] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1209'. [ 494.125772][ T8767] netlink: 'syz.1.1209': attribute type 2 has an invalid length. [ 494.408945][ T8767] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 494.699792][ T8767] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 494.725717][ T8767] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1209'. [ 499.864383][ T8803] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 500.322864][ T8814] overlayfs: failed to set xattr on upper [ 500.328688][ T8814] overlayfs: ...falling back to index=off,metacopy=off. [ 502.048706][ T8827] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1226'. [ 502.596340][ T8831] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1227'. [ 502.642985][ T8831] netlink: 'syz.4.1227': attribute type 2 has an invalid length. [ 502.732153][ T8831] netlink: 'syz.4.1227': attribute type 1 has an invalid length. [ 502.807732][ T8831] netlink: 'syz.4.1227': attribute type 1 has an invalid length. [ 502.899152][ T8831] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1227'. [ 505.518130][ T8851] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 509.979510][ T8894] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1244'. [ 509.988557][ T8894] netlink: 'syz.4.1244': attribute type 2 has an invalid length. [ 510.184604][ T8894] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 511.091044][ T8894] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 511.242262][ T8903] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 511.346928][ T8894] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1244'. [ 512.904516][ T8913] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1247'. [ 513.534019][ T8921] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 519.086070][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.092460][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.305897][ T8978] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 523.328235][ T8998] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1272'. [ 525.313540][ T9019] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 529.842270][ T9062] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1286'. [ 530.587518][ T9064] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 533.346365][ T9090] overlayfs: failed to resolve './file1': -2 [ 536.000714][ T9111] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 536.932562][ T9124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1305'. [ 539.857140][ T9153] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 540.626549][ T8438] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 541.171688][ T8438] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 541.180307][ T8438] usb 1-1: config 0 has no interface number 0 [ 541.203148][ T8438] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 541.215082][ T8438] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 541.510757][ T8438] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 541.521779][ T8438] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 541.555586][ T8438] usb 1-1: Manufacturer: syz [ 541.561126][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 541.577071][ T8438] usb 1-1: SerialNumber: syz [ 541.606813][ T8438] usb 1-1: config 0 descriptor?? [ 542.133903][ T8438] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 542.189157][ T8438] usb 1-1: USB disconnect, device number 12 [ 545.210735][ T9188] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 551.057024][ T9232] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 556.262575][ T9275] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 563.562540][ T9312] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 563.992660][ T9323] overlayfs: failed to set xattr on upper [ 563.999075][ T9323] overlayfs: ...falling back to index=off,metacopy=off. [ 564.007263][ T13] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 564.413513][ T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 564.461285][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.588312][ T13] usb 3-1: config 0 has no interface number 0 [ 566.144327][ T13] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 566.158023][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.177072][ T13] usb 3-1: config 0 descriptor?? [ 566.448034][ T13] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 567.284854][ T13] usb 3-1: USB disconnect, device number 6 [ 567.860423][ T9355] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 574.133650][ T9383] overlayfs: failed to set xattr on upper [ 574.139895][ T9383] overlayfs: ...falling back to index=off,metacopy=off. [ 576.300508][ T9390] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 576.423988][ T9395] fuse: Unknown parameter 'group_id00000000000000000000' [ 576.590137][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 576.938438][ T13] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 578.466418][ T13] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 578.475663][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.564308][ T13] usb 3-1: Product: syz [ 578.568603][ T13] usb 3-1: Manufacturer: syz [ 578.660945][ T13] usb 3-1: can't set config #1, error -71 [ 578.671155][ T13] usb 3-1: USB disconnect, device number 7 [ 578.759139][ T9424] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 579.069359][ T9434] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1401'. [ 579.078898][ T9434] netlink: 'syz.0.1401': attribute type 2 has an invalid length. [ 579.086976][ T9434] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 579.095570][ T9434] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 579.103691][ T9434] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1401'. [ 579.972243][ T13] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 580.624136][ T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.681093][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.861119][ T13] usb 3-1: config 0 has no interface number 0 [ 581.863454][ T13] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 581.872733][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.883589][ T13] usb 3-1: config 0 descriptor?? [ 581.906272][ T13] usb 3-1: can't set config #0, error -71 [ 581.928053][ T13] usb 3-1: USB disconnect, device number 8 [ 581.954913][ T9449] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1405'. [ 582.291079][ T4276] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 582.312216][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 582.483309][ T4276] usb 6-1: device descriptor read/64, error -32 [ 582.606561][ T9467] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 582.772511][ T4276] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 583.017621][ T13] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 583.221135][ T4276] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 583.488314][ T4276] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 583.539110][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.643986][ T4276] usb 6-1: Product: syz [ 583.689626][ T4276] usb 6-1: Manufacturer: syz [ 583.741006][ T4276] usb 6-1: SerialNumber: syz [ 583.880243][ T4276] usb 6-1: config 0 descriptor?? [ 583.973255][ T9458] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 584.020540][ T4276] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 584.325354][ T9458] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1409'. [ 584.742591][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.748998][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.766629][ T23] usb 6-1: USB disconnect, device number 12 [ 585.144096][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 586.213027][ T13] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 586.220913][ T13] usb 1-1: can't read configurations, error -71 [ 588.051568][ T9503] overlayfs: failed to set xattr on upper [ 588.058543][ T9503] overlayfs: ...falling back to index=off,metacopy=off. [ 589.612658][ T9512] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 589.695034][ T9514] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1424'. [ 591.184780][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 591.450293][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 591.748485][ T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 591.784511][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.908520][ T23] usb 6-1: Product: syz [ 591.913567][ T23] usb 6-1: Manufacturer: syz [ 591.934783][ T23] usb 6-1: SerialNumber: syz [ 592.018691][ T23] usb 6-1: config 0 descriptor?? [ 592.357802][ T23] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 592.811671][ T9542] futex_wake_op: syz.1.1434 tries to shift op by 144; fix this program [ 593.025201][ T9547] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1433'. [ 593.035583][ T9547] netlink: 'syz.0.1433': attribute type 2 has an invalid length. [ 593.043974][ T9547] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 593.052875][ T9547] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 593.061685][ T9547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1433'. [ 593.246747][ T9547] ceph: No mds server is up or the cluster is laggy [ 593.607783][ T23] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 593.640976][ T23] usb 6-1: USB disconnect, device number 13 [ 594.849225][ T9563] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 596.885984][ T9579] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1442'. [ 597.020901][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 597.020916][ T26] audit: type=1326 audit(1778280985.499:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 597.117481][ T26] audit: type=1326 audit(1778280985.527:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 598.259207][ T26] audit: type=1326 audit(1778280985.527:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 598.337759][ T26] audit: type=1326 audit(1778280985.527:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 599.055177][ T26] audit: type=1326 audit(1778280985.527:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 599.362706][ T9598] device syzkaller0 entered promiscuous mode [ 599.421588][ T26] audit: type=1326 audit(1778280985.527:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 599.424269][ T9604] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 599.457296][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.636318][ T9605] overlayfs: failed to set xattr on upper [ 599.642409][ T9605] overlayfs: ...falling back to index=off,metacopy=off. [ 599.698472][ T4337] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 600.373120][ T26] audit: type=1326 audit(1778280985.527:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 600.460275][ T26] audit: type=1326 audit(1778280985.527:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 600.484591][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.495661][ T26] audit: type=1326 audit(1778280988.606:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 600.520471][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.528656][ T26] audit: type=1326 audit(1778280988.606:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.2.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ae8fbdd9 code=0x7ffc0000 [ 600.552816][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.561956][ T4337] usb 6-1: Using ep0 maxpacket: 16 [ 600.567576][ T9609] fuse: Bad value for 'fd' [ 600.692453][ T4337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.714552][ T4337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.735073][ T4337] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 600.755055][ T4337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.781360][ T4337] usb 6-1: config 0 descriptor?? [ 601.435186][ T4337] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 601.889347][ T4337] corsair 0003:1B1C:1B02.0007: Failed to get K90 initial state (error -71). [ 601.971278][ T4337] usb 6-1: USB disconnect, device number 14 [ 602.117521][ T9629] fido_id[9629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 603.224260][ T9640] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 603.236078][ T1108] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 603.265886][ T26] audit: type=1326 audit(1778280991.338:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 603.293310][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.375981][ T9646] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1457'. [ 603.385239][ T9646] netlink: 'syz.4.1457': attribute type 2 has an invalid length. [ 603.393606][ T9646] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 603.401917][ T9646] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 603.410756][ T9646] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1457'. [ 603.672634][ T9645] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1461'. [ 603.690000][ T26] audit: type=1326 audit(1778280991.376:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 603.750202][ T26] audit: type=1326 audit(1778280991.713:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 603.775571][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.783457][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 603.789189][ T26] audit: type=1326 audit(1778280991.713:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 603.816272][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.844900][ T26] audit: type=1326 audit(1778280991.713:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 603.871154][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.918686][ T26] audit: type=1326 audit(1778280991.713:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 604.026647][ T1108] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 604.035886][ T1108] usb 1-1: config 127 has no interface number 0 [ 604.045749][ T1108] usb 1-1: config 127 interface 124 has no altsetting 0 [ 604.089990][ T26] audit: type=1326 audit(1778280991.731:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 604.116494][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.124211][ T26] audit: type=1326 audit(1778280991.769:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 604.151391][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.251058][ T1108] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 604.278334][ T9651] overlayfs: failed to set xattr on upper [ 604.284300][ T9651] overlayfs: ...falling back to index=off,metacopy=off. [ 604.913591][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.924717][ T26] audit: type=1326 audit(1778280992.106:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 604.949472][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.978619][ T1108] usb 1-1: Product: syz [ 604.991316][ T1108] usb 1-1: Manufacturer: syz [ 605.042661][ T1108] usb 1-1: SerialNumber: syz [ 605.043030][ T26] audit: type=1326 audit(1778280992.106:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.1464" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a833dd9 code=0x7ffc0000 [ 605.140343][ T9655] fuse: Bad value for 'fd' [ 606.476717][ T9678] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 607.499468][ T9685] overlayfs: failed to set xattr on upper [ 607.505504][ T9685] overlayfs: ...falling back to index=off,metacopy=off. [ 607.835359][ T1108] usb 1-1: USB disconnect, device number 15 [ 608.089166][ T9690] overlayfs: failed to set xattr on upper [ 608.095450][ T9690] overlayfs: ...falling back to index=off,metacopy=off. [ 609.162558][ T9697] fuse: Bad value for 'fd' [ 609.352333][ T9702] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1477'. [ 610.823883][ T9702] netlink: 'syz.4.1477': attribute type 2 has an invalid length. [ 610.888694][ T9702] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 610.896999][ T9702] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 611.132666][ T9702] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1477'. [ 611.242987][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 611.625850][ T9721] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 612.625590][ T9731] fuse: Invalid rootmode [ 612.749357][ T9736] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1490'. [ 616.656984][ T9752] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 618.614409][ T9772] fuse: Invalid rootmode [ 620.216947][ T9783] device syzkaller0 entered promiscuous mode [ 620.359587][ T9788] overlayfs: failed to set xattr on upper [ 620.366189][ T9788] overlayfs: ...falling back to index=off,metacopy=off. [ 621.058024][ T9791] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 621.087208][ T9789] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1509'. [ 621.194583][ T9789] netlink: 'syz.4.1509': attribute type 2 has an invalid length. [ 621.292170][ T9789] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 622.332488][ T9807] fuse: Invalid rootmode [ 622.417290][ T9789] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 622.488085][ T9789] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1509'. [ 622.743351][ T9823] overlayfs: failed to resolve './file0': -2 [ 623.784260][ T9830] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1525'. [ 624.398752][ T9836] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 624.560864][ T9839] overlayfs: failed to set xattr on upper [ 624.567294][ T9839] overlayfs: ...falling back to index=off,metacopy=off. [ 625.767337][ T4337] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 626.050383][ T4337] usb 6-1: Using ep0 maxpacket: 32 [ 626.178979][ T4337] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 626.208208][ T4337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.231869][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 626.342735][ T4337] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 626.499119][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 626.508076][ T9855] fuse: Bad value for 'rootmode' [ 626.627542][ T7] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 626.645777][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.678267][ T7] usb 5-1: config 0 has no interface number 0 [ 626.721596][ T7] usb 5-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.831474][ T9859] overlayfs: failed to resolve './file0': -2 [ 626.926742][ T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 626.958068][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.990474][ T7] usb 5-1: Product: syz [ 627.010105][ T7] usb 5-1: Manufacturer: syz [ 627.031652][ T7] usb 5-1: SerialNumber: syz [ 627.091287][ T7] usb 5-1: config 0 descriptor?? [ 627.121344][ T4337] gspca_nw80x: reg_r err -110 [ 627.127873][ T4337] nw80x: probe of 6-1:3.0 failed with error -110 [ 627.200860][ T7] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 628.032984][ T4337] usb 5-1: USB disconnect, device number 11 [ 629.560835][ T9889] overlayfs: failed to set xattr on upper [ 629.566775][ T9889] overlayfs: ...falling back to index=off,metacopy=off. [ 630.363251][ T7] usb 6-1: USB disconnect, device number 15 [ 630.560951][ T9894] fuse: Bad value for 'rootmode' [ 638.294565][ T9979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1566'. [ 638.303886][ T9979] netlink: 'syz.0.1566': attribute type 2 has an invalid length. [ 638.312183][ T9979] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 638.320297][ T9979] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 638.328952][ T9979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1566'. [ 641.545722][ T9991] fuse: Unknown parameter 'use00000000000000000000' [ 645.154022][ T6113] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 645.541776][T10024] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1578'. [ 645.550908][T10024] netlink: 'syz.4.1578': attribute type 2 has an invalid length. [ 645.559315][T10024] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 645.567499][T10024] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 645.575670][T10024] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1578'. [ 645.745099][ T6113] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 645.867580][ T6113] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.156045][T10024] ceph: No mds server is up or the cluster is laggy [ 646.212367][ T6113] usb 1-1: config 0 has no interface number 0 [ 646.236309][ T6113] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 646.268725][ T6113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.304740][ T7260] libceph: connect (1)[c::]:6789 error -101 [ 646.328015][ T6113] usb 1-1: config 0 descriptor?? [ 646.339423][ T7260] libceph: mon0 (1)[c::]:6789 connect error [ 646.400851][ T6113] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 647.702975][ T1108] usb 1-1: USB disconnect, device number 16 [ 647.846341][T10044] fuse: Unknown parameter 'use00000000000000000000' [ 650.173342][T10064] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1591'. [ 650.184197][T10064] netlink: 'syz.1.1591': attribute type 2 has an invalid length. [ 650.192799][T10064] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 650.201264][T10064] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 650.209332][T10064] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1591'. [ 650.437944][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 650.444886][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 652.211591][T10078] fuse: Unknown parameter 'use00000000000000000000' [ 653.847670][T10096] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 653.896006][T10099] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1598'. [ 653.965773][T10100] device syzkaller0 entered promiscuous mode [ 654.393129][T10108] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1603'. [ 654.403014][T10108] netlink: 'syz.5.1603': attribute type 2 has an invalid length. [ 654.414032][T10108] netlink: 'syz.5.1603': attribute type 1 has an invalid length. [ 654.423129][T10108] netlink: 'syz.5.1603': attribute type 1 has an invalid length. [ 654.431891][T10108] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1603'. [ 656.303986][T10120] fuse: Unknown parameter 'user_i00000000000000000000' [ 657.606146][ T1108] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 657.828754][T10191] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 658.055293][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.108379][ T1108] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 658.139613][ T1108] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 658.166814][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.201462][ T1108] usb 1-1: config 0 descriptor?? [ 658.273541][ T1108] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 658.288612][ T1108] dvb-usb: bulk message failed: -22 (3/0) [ 658.310681][ T1108] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 658.354604][ T1108] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 658.367808][ T1108] usb 1-1: media controller created [ 658.387577][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 658.423674][ T1108] dvb-usb: bulk message failed: -22 (6/0) [ 658.456520][ T1108] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 658.489038][T10148] dvb-usb: bulk message failed: -22 (2/0) [ 658.545091][ T1108] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 658.743909][T10198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1616'. [ 658.887614][ T1108] dvb-usb: schedule remote query interval to 150 msecs. [ 658.916309][T10198] netlink: 'syz.1.1616': attribute type 2 has an invalid length. [ 658.947031][T10198] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 658.957734][ T1108] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 658.996667][T10198] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 659.016811][ T1108] usb 1-1: USB disconnect, device number 17 [ 659.093587][T10205] Bluetooth: hci0: invalid len left 7, exp >= 111 [ 659.113208][T10198] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1616'. [ 659.185028][ T1108] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 659.411513][T10209] device syzkaller0 entered promiscuous mode [ 659.854290][T10216] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1619'. [ 662.498908][T10230] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 664.283373][T10248] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1630'. [ 664.293865][T10248] netlink: 'syz.4.1630': attribute type 2 has an invalid length. [ 664.302058][T10248] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 664.310125][T10248] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 664.318166][T10248] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1630'. [ 664.469368][ T6113] libceph: connect (1)[c::]:6789 error -101 [ 664.476371][ T6113] libceph: mon0 (1)[c::]:6789 connect error [ 664.821850][T10248] ceph: No mds server is up or the cluster is laggy [ 664.870292][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 664.900601][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 665.303298][T10253] device syzkaller0 entered promiscuous mode [ 667.691857][T10272] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 669.532047][T10296] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1641'. [ 669.541167][T10296] netlink: 'syz.0.1641': attribute type 2 has an invalid length. [ 669.549227][T10296] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 669.557126][T10296] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 669.565603][T10296] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1641'. [ 672.483658][T10317] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1648'. [ 672.643060][T10319] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 672.838643][T10322] overlayfs: './file0' not a directory [ 677.052738][T10336] fuse: Unknown parameter 'user_i00000000000000000000' [ 677.483260][T10346] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1655'. [ 677.492464][T10346] netlink: 'syz.5.1655': attribute type 2 has an invalid length. [ 677.500439][T10346] netlink: 'syz.5.1655': attribute type 1 has an invalid length. [ 677.508424][T10346] netlink: 'syz.5.1655': attribute type 1 has an invalid length. [ 677.516984][T10346] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1655'. [ 678.956597][T10356] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 682.439298][T10374] fuse: Unknown parameter 'user_i00000000000000000000' [ 683.028716][T10375] overlayfs: './file0' not a directory [ 686.298282][T10399] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1672'. [ 686.307397][T10399] netlink: 'syz.4.1672': attribute type 2 has an invalid length. [ 686.315263][T10399] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 686.323109][T10399] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 686.330981][T10399] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1672'. [ 689.556731][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1677'. [ 689.565856][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 689.581937][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1677'. [ 689.591044][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 690.546136][T10420] fuse: Unknown parameter 'user_i00000000000000000000' [ 690.858942][T10432] overlayfs: './file0' not a directory [ 691.641974][T10435] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1680'. [ 693.173021][T10446] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967292 out of range (51000000..2150000000) [ 694.260360][T10454] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1688'. [ 694.269450][T10454] netlink: 'syz.5.1688': attribute type 2 has an invalid length. [ 694.277649][T10454] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 694.285459][T10454] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 694.293288][T10454] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1688'. [ 695.365044][ T4232] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 696.001092][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 696.129755][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.193399][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.203801][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 696.219355][ T4232] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 696.230178][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.269054][ T4232] usb 1-1: config 0 descriptor?? [ 696.541221][T10469] fuse: Unknown parameter 'user_id00000000000000000000' [ 696.839759][ T4232] hid-generic 0003:0955:7214.0008: unknown main item tag 0x0 [ 696.925186][ T4232] hid-generic 0003:0955:7214.0008: unknown main item tag 0x0 [ 697.005195][ T4232] hid-generic 0003:0955:7214.0008: unknown main item tag 0x0 [ 697.106333][ T4232] hid-generic 0003:0955:7214.0008: unknown main item tag 0x0 [ 697.190763][ T4232] hid-generic 0003:0955:7214.0008: unknown main item tag 0x0 [ 697.310415][ T4232] hid-generic 0003:0955:7214.0008: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 697.611188][ T4232] usb 1-1: USB disconnect, device number 18 [ 699.100121][T10489] overlayfs: './file0' not a directory [ 699.337669][T10484] fido_id[10484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 703.999815][T10511] fuse: Unknown parameter 'user_id00000000000000000000' [ 708.247393][T10528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1711'. [ 708.256635][T10528] netlink: 'syz.4.1711': attribute type 2 has an invalid length. [ 708.264532][T10528] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 708.272401][T10528] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 708.280275][T10528] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 711.130938][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 711.544091][T10562] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1722'. [ 711.553299][T10562] netlink: 'syz.4.1722': attribute type 2 has an invalid length. [ 711.561394][T10562] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 711.569493][T10562] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 711.579216][T10562] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1722'. [ 712.090102][T10567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1721'. [ 712.266690][T10563] overlayfs: failed to set xattr on upper [ 712.274166][T10563] overlayfs: ...falling back to index=off,metacopy=off. [ 712.366482][T10572] fuse: Bad value for 'fd' [ 716.061518][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.068172][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.284902][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 717.230585][T10622] overlayfs: failed to set xattr on upper [ 717.237126][T10622] overlayfs: ...falling back to index=off,metacopy=off. [ 717.870535][T10624] fuse: Unknown parameter '00000000000000000003' [ 723.582189][ T1336] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 723.643362][T10655] fuse: Unknown parameter '00000000000000000003' [ 724.105454][ T1336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.285741][ T1336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.326126][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 724.381062][ T1336] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 724.771096][ T1336] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 724.857811][ T1336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.897223][ T1336] usb 6-1: config 0 descriptor?? [ 726.962799][ T1336] usb 6-1: can't set config #0, error -71 [ 726.970073][ T1336] usb 6-1: USB disconnect, device number 16 [ 727.622312][T10689] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1756'. [ 727.631338][T10689] netlink: 'syz.5.1756': attribute type 2 has an invalid length. [ 727.639199][T10689] netlink: 'syz.5.1756': attribute type 1 has an invalid length. [ 727.647045][T10689] netlink: 'syz.5.1756': attribute type 1 has an invalid length. [ 727.654853][T10689] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1756'. [ 728.650622][T10696] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1757'. [ 730.514138][T10712] fuse: Unknown parameter 'fd00000000000000000003' [ 730.826844][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'. [ 731.980934][ T4229] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 732.025487][T10731] overlayfs: failed to set xattr on upper [ 732.031423][T10731] overlayfs: ...falling back to index=off,metacopy=off. [ 734.428145][T10746] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1771'. [ 734.437177][T10746] netlink: 'syz.5.1771': attribute type 2 has an invalid length. [ 734.445134][T10746] netlink: 'syz.5.1771': attribute type 1 has an invalid length. [ 734.452934][T10746] netlink: 'syz.5.1771': attribute type 1 has an invalid length. [ 734.461003][T10746] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1771'. [ 734.770234][ T4229] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 734.789002][ T4229] usb 5-1: config 0 has no interface number 0 [ 734.829495][ T4229] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.008736][T10752] fuse: Unknown parameter 'fd00000000000000000003' [ 735.120956][ T4229] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.131616][ T4229] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 735.142017][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.349004][ T4229] usb 5-1: config 0 descriptor?? [ 735.540053][ T4229] usb 5-1: can't set config #0, error -71 [ 735.664377][ T4229] usb 5-1: USB disconnect, device number 12 [ 737.551661][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 740.237435][T10792] overlayfs: failed to set xattr on upper [ 740.243521][T10792] overlayfs: ...falling back to index=off,metacopy=off. [ 740.513747][T10798] fuse: Unknown parameter 'fd00000000000000000003' [ 744.123835][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 744.719061][T10825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1793'. [ 744.900400][ T13] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 746.022436][ T7] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 746.204152][ T13] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 746.259142][ T13] usb 6-1: config 0 has no interface number 0 [ 746.265590][ T13] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.276834][ T13] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.288882][ T13] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 746.298808][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.449884][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 746.458150][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.625501][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 746.635540][ T13] usb 6-1: config 0 descriptor?? [ 746.640808][ T7] usb 1-1: config 0 has no interface number 0 [ 746.647650][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 746.657374][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.671901][ T7] usb 1-1: config 0 descriptor?? [ 746.723689][ T7] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 746.738561][ T13] usb 6-1: can't set config #0, error -71 [ 746.756295][ T13] usb 6-1: USB disconnect, device number 17 [ 748.451029][ T7] usb 1-1: USB disconnect, device number 19 [ 748.883443][T10863] overlayfs: failed to set xattr on upper [ 748.890230][T10863] overlayfs: ...falling back to index=off,metacopy=off. [ 749.358189][T10867] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1804'. [ 749.367718][T10867] netlink: 'syz.4.1804': attribute type 2 has an invalid length. [ 749.375553][T10867] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 749.383533][T10867] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 749.391740][T10867] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1804'. [ 750.223540][T10871] device syzkaller0 entered promiscuous mode [ 753.112955][ T6113] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 753.833895][ T6113] usb 1-1: Using ep0 maxpacket: 8 [ 753.973158][ T6113] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.204287][T10911] overlayfs: failed to set xattr on upper [ 754.210327][T10911] overlayfs: ...falling back to index=off,metacopy=off. [ 754.301357][T10912] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1820'. [ 754.858340][ T6113] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 754.870434][ T6113] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 754.945604][ T6113] usb 1-1: string descriptor 0 read error: -71 [ 754.952348][ T6113] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 754.977256][ T6113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 754.987334][ T6113] usb 1-1: config 0 descriptor?? [ 755.041634][ T6113] usb 1-1: can't set config #0, error -71 [ 755.058834][ T6113] usb 1-1: USB disconnect, device number 20 [ 755.315551][T10922] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1821'. [ 755.324878][T10922] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 755.332816][T10922] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 755.340665][T10922] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 755.348556][T10922] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1821'. [ 760.732661][T10938] device syzkaller0 entered promiscuous mode [ 762.962905][T10952] fuse: Unknown parameter 'fd00000000000000000003' [ 765.971275][T10993] fuse: Unknown parameter 'fd00000000000000000003' [ 767.447909][ T1336] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 768.420409][ T1336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.020510][ T1336] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 769.115151][ T1336] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 769.124414][ T1336] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 769.256993][ T1336] usb 2-1: Manufacturer: syz [ 769.339272][ T1336] usb 2-1: config 0 descriptor?? [ 769.751062][T11032] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1857'. [ 769.763819][ T1336] usb 2-1: USB disconnect, device number 16 [ 772.993093][T11002] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.657529][T11002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.732029][T11002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.384990][T11002] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.399646][T11002] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.409623][T11002] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.424346][T11002] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.611245][T11002] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 774.626520][T11002] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 774.635964][T11002] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 774.650892][T11002] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 775.118215][T11083] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1875'. [ 775.453657][T11088] overlayfs: failed to set xattr on upper [ 775.459744][T11088] overlayfs: ...falling back to index=off,metacopy=off. [ 781.895868][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 781.902323][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.409591][T11121] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.141411][T11129] kAFS: unparsable volume name [ 787.273039][T11142] program syz.5.1893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.398182][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1893'. [ 788.459565][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1895'. [ 794.524405][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 797.874955][T11240] comedi comedi4: bad chanlist[0]=0x00200007 chan=7 range length=2 [ 801.607230][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 801.859846][ T4337] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 803.203722][ T4337] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 803.233863][ T4337] usb 6-1: config 1 has no interface number 0 [ 803.283684][ T4337] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 803.600152][ T4337] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 803.635563][ T4337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.706011][ T4337] usb 6-1: Product: syz [ 803.745396][ T4337] usb 6-1: Manufacturer: syz [ 803.786609][ T4337] usb 6-1: SerialNumber: syz [ 804.112074][T11275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 804.144983][ T4337] usb 6-1: Expected 3 endpoints, found: 2 [ 805.206178][ T6113] usb 6-1: USB disconnect, device number 18 [ 805.339975][T11307] program syz.1.1938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 805.381076][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 806.580598][ T4229] Bluetooth: hci2: command 0x0409 tx timeout [ 806.910157][ T6113] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 807.841387][ T6113] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.993450][ T6113] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 808.091314][ T6113] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 808.621861][ T6113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.636235][ T6113] usb 6-1: config 0 descriptor?? [ 808.662277][T11296] chnl_net:caif_netlink_parms(): no params data found [ 808.803265][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 808.840908][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.855312][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.866330][T11296] device bridge_slave_0 entered promiscuous mode [ 808.886860][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.898451][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.914133][T11296] device bridge_slave_1 entered promiscuous mode [ 808.948988][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.961640][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.994534][T11296] team0: Port device team_slave_0 added [ 809.005496][T11296] team0: Port device team_slave_1 added [ 809.029302][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.036516][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.072572][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.115223][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.140062][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.205438][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.248962][T11296] device hsr_slave_0 entered promiscuous mode [ 809.256741][T11296] device hsr_slave_1 entered promiscuous mode [ 809.273228][T11296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.423392][ T6113] Bluetooth: Can't get version to change to load ram patch err [ 809.447743][T11296] Cannot create hsr debugfs directory [ 809.472559][ T6113] Bluetooth: Loading sysconfig file failed [ 809.549196][ T6113] ath3k: probe of 6-1:0.0 failed with error -71 [ 809.651005][T11337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.720199][ T6113] usb 6-1: USB disconnect, device number 19 [ 811.479831][T11296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 811.553008][T11296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 811.593009][T11296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 811.636413][T11296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 811.979392][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 812.012249][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.034906][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.043090][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 812.057062][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 812.942447][T11296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 812.953131][T11296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 813.031264][ T6113] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 813.086239][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 813.112844][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 813.156914][T10175] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.164276][T10175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.323184][ T6113] usb 6-1: Using ep0 maxpacket: 16 [ 813.601346][T11381] program syz.4.1964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.622629][ T6113] usb 6-1: device descriptor read/all, error -71 [ 813.672592][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 813.790910][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 813.904161][T10175] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.912195][T10175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.189369][ T6165] Bluetooth: hci2: command 0x0419 tx timeout [ 814.705787][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 814.783076][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 815.040355][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 815.279998][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 815.353690][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 815.382762][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 815.394345][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 815.403207][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 815.412245][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 815.421204][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 815.430157][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 815.438594][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 815.446985][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 815.780272][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 815.802717][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 815.827953][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.333598][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 816.357013][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 816.430720][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 816.450848][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 816.489365][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 816.506052][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 816.521637][T11296] device veth0_vlan entered promiscuous mode [ 816.536882][T11296] device veth1_vlan entered promiscuous mode [ 816.614730][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 816.628095][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.639213][T11296] device veth0_macvtap entered promiscuous mode [ 816.650898][T11296] device veth1_macvtap entered promiscuous mode [ 816.701054][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.971096][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.057792][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.173349][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.800541][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.943137][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.054347][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.168160][T11429] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 820.438231][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.011837][T11296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.090350][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 821.133704][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 821.205062][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 821.284034][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 821.357702][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.374449][T11419] syz.1.1966 (11419): drop_caches: 2 [ 821.411604][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.421822][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.432802][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.442777][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.454346][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.465448][T11296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.476334][T11296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.490942][T11296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.500267][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 821.520509][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 821.707917][T11296] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.718259][T11296] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.728010][T11296] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.738110][T11296] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.755376][ T1336] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 822.327135][ T4482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.365432][ T4482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.439341][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 822.493986][T10170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.515464][T10170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.527602][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 822.609365][ T1336] usb 5-1: Using ep0 maxpacket: 32 [ 822.754043][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1985'. [ 824.148310][ T1336] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 825.044916][ T1336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.113138][T11459] program syz.5.1975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.226915][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1975'. [ 825.387750][ T1336] usb 5-1: can't set config #16, error -71 [ 825.407327][ T1336] usb 5-1: USB disconnect, device number 13 [ 826.134206][T11477] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 829.166709][T11483] overlayfs: failed to set xattr on upper [ 829.252904][T11483] overlayfs: ...falling back to index=off,metacopy=off. [ 829.454021][T11502] program syz.6.1990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 829.550718][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1990'. [ 829.971994][ T1336] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 830.766509][T11508] program syz.4.1992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 830.905914][ T1336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.063047][ T1336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 831.158414][ T7260] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 831.166164][ T1336] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 831.181455][ T1336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.543111][ T1336] usb 2-1: config 0 descriptor?? [ 831.620201][ T7260] usb 7-1: unable to get BOS descriptor or descriptor too short [ 831.767484][ T7260] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 831.775312][ T7260] usb 7-1: can't read configurations, error -71 [ 831.895524][ T4276] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 832.098537][ T6165] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 832.173724][ T4276] usb 3-1: Using ep0 maxpacket: 8 [ 833.209916][ T1336] Bluetooth: Can't get version to change to load ram patch err [ 833.217688][ T1336] Bluetooth: Loading sysconfig file failed [ 833.267616][ T1336] ath3k: probe of 2-1:0.0 failed with error -71 [ 833.328942][ T4276] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 833.340564][ T4276] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 833.350610][ T4276] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 833.361376][ T4276] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 833.377311][ T4276] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 833.382485][ T1336] usb 2-1: USB disconnect, device number 17 [ 833.387242][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.439203][ T6165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 833.487212][ T6165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.583082][ T6165] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 833.594010][ T6165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.636549][ T6165] usb 5-1: config 0 descriptor?? [ 833.734159][ T4276] usb 3-1: GET_CAPABILITIES returned 0 [ 833.751238][ T4276] usbtmc 3-1:16.0: can't read capabilities [ 833.888214][T11540] netlink: 'syz.1.2002': attribute type 1 has an invalid length. [ 833.952910][ T1336] usb 3-1: USB disconnect, device number 9 [ 834.174200][ T6165] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 834.202229][ T6165] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 834.235757][ T6165] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 834.342666][ T6165] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 834.356007][T11540] ipt_CLUSTERIP: Please specify destination IP [ 834.359034][ T6165] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 834.389946][ T6165] elan 0003:04F3:0755.0009: failed to start in urb: -90 [ 834.410241][ T6165] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 835.497601][ T6165] usb 5-1: USB disconnect, device number 14 [ 835.946838][T11552] fido_id[11552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 836.033714][ T4276] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 836.272723][ T7260] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 836.330121][ T4276] usb 3-1: Using ep0 maxpacket: 16 [ 836.393769][T11562] program syz.5.2008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 836.497308][ T4276] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 836.518414][ T4276] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 836.540736][ T4276] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 836.552904][ T4276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 836.733150][ T7260] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 836.741450][ T7260] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.758874][ T7260] usb 7-1: config 0 has no interface number 0 [ 836.766162][ T7260] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 836.783216][ T7260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.794540][ T4276] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 836.817751][ T7260] usb 7-1: config 0 descriptor?? [ 836.829591][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.838363][ T4276] usb 3-1: Product: syz [ 836.842782][ T4276] usb 3-1: Manufacturer: syz [ 836.854819][ T4276] usb 3-1: SerialNumber: syz [ 836.877143][ T4276] usb 3-1: config 0 descriptor?? [ 836.905129][ T7260] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 837.252692][ T4276] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 837.449401][ T3546] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 837.556839][ T4276] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 837.777762][ T3546] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 837.849547][ T4276] input: failed to attach handler mousedev to device input14, error: -5 [ 837.873795][ T3546] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 837.912200][ T4276] usb 3-1: USB disconnect, device number 10 [ 837.951895][ T3546] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 839.511590][ T4276] usb 7-1: USB disconnect, device number 4 [ 842.550196][T11603] Cannot find set identified by id 0 to match [ 844.023170][ T6113] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 844.898707][ T6113] usb 7-1: Using ep0 maxpacket: 16 [ 845.050217][ T6113] usb 7-1: config 254 has an invalid interface number: 235 but max is 0 [ 845.069558][ T6113] usb 7-1: config 254 has no interface number 0 [ 845.109503][ T6113] usb 7-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 845.139230][ T6113] usb 7-1: config 254 interface 235 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 845.158063][ T6113] usb 7-1: config 254 interface 235 has no altsetting 0 [ 845.188831][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 845.360202][ T6113] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 845.374271][ T6113] usb 7-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 845.387956][ T6113] usb 7-1: Product: syz [ 845.397232][ T6113] usb 7-1: Manufacturer: syz [ 845.403201][ T6113] usb 7-1: SerialNumber: syz [ 845.446420][T11608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 845.466786][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 845.474254][ T6113] usbtest 7-1:254.235: couldn't get endpoints, -22 [ 845.484449][ T6113] usbtest: probe of 7-1:254.235 failed with error -22 [ 845.499069][ T4337] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 845.595138][ T7] usb 3-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 845.616342][ T1336] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 845.626319][ T7] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 845.644940][ T7] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.703832][ T6165] usb 7-1: USB disconnect, device number 5 [ 846.401723][ T7] usb 3-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40 [ 846.413942][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.425353][ T7] usb 3-1: Product: syz [ 846.430609][ T7] usb 3-1: Manufacturer: syz [ 846.437005][ T7] usb 3-1: SerialNumber: syz [ 846.478762][ T1336] usb 5-1: Using ep0 maxpacket: 16 [ 846.485141][ T7] usb 3-1: can't set config #1, error -71 [ 846.493695][ T7] usb 3-1: USB disconnect, device number 11 [ 846.503617][ T4337] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 846.517939][ T4337] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.532623][ T4337] usb 2-1: config 0 has no interface number 0 [ 846.541997][ T4337] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 846.556270][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.578463][ T4337] usb 2-1: config 0 descriptor?? [ 846.617593][ T1336] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 846.638716][ T1336] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 846.683607][ T1336] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.704857][ T4337] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 846.791946][ T1336] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 846.831689][ T1336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.551888][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 847.558520][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 847.583263][ T1336] usb 5-1: config 0 descriptor?? [ 847.606480][T11626] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 847.668729][ T1336] pxrc 5-1:0.0: Could not find endpoint [ 847.774075][ T1336] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 849.298375][ T1336] usb 2-1: USB disconnect, device number 18 [ 849.452697][ T4337] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 850.860525][ T4276] usb 5-1: USB disconnect, device number 15 [ 852.177684][ T4337] usb 7-1: device descriptor read/all, error -71 [ 852.584161][ T7] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 852.935828][T11681] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 853.096955][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 854.069047][ T7] usb 6-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 854.086584][ T7] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 854.097406][ T7] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.282810][ T7] usb 6-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40 [ 854.293029][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.306262][ T7] usb 6-1: Product: syz [ 854.310469][ T7] usb 6-1: Manufacturer: syz [ 854.317882][ T7] usb 6-1: SerialNumber: syz [ 854.368186][ T8438] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 854.411063][ T4337] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 854.656724][ T8438] usb 2-1: Using ep0 maxpacket: 16 [ 854.701984][ T7] usb 6-1: unknown interface protocol 0x6, assuming v1 [ 854.721198][ T7] usb 6-1: 0:2 : does not exist [ 854.736618][ T7] usb 6-1: USB disconnect, device number 22 [ 854.795803][ T8438] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 854.809065][ T8438] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 854.821142][ T8438] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 854.835160][ T8438] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 854.845134][ T8438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.856437][ T8438] usb 2-1: config 0 descriptor?? [ 854.892532][T11700] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 854.916529][ T8438] pxrc 2-1:0.0: Could not find endpoint [ 854.923586][ T8438] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 854.966730][ T4337] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 854.977053][T10457] udevd[10457]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.009973][ T4337] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.037123][ T4337] usb 7-1: Product: syz [ 855.119122][ T4337] usb 7-1: Manufacturer: syz [ 855.262038][ T4337] usb 7-1: SerialNumber: syz [ 855.394379][ T8438] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 855.475113][ T4337] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 856.454116][ T4276] usb 2-1: USB disconnect, device number 19 [ 856.473326][ T8438] usb 5-1: Using ep0 maxpacket: 16 [ 856.623006][ T8438] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 856.641148][ T8438] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 856.658406][ T8438] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 856.670974][ T8438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 856.868898][ T8438] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 856.885477][ T8438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.894029][ T8438] usb 5-1: Product: syz [ 856.898854][ T8438] usb 5-1: Manufacturer: syz [ 856.910919][ T8438] usb 5-1: SerialNumber: syz [ 856.927122][ T8438] usb 5-1: config 0 descriptor?? [ 857.146919][ T4276] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 857.188874][ T6165] usb 7-1: USB disconnect, device number 8 [ 857.195220][ T4337] usb 7-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 857.218788][ T6165] usb 7-1: ath9k_htc: USB layer deinitialized [ 857.234559][ T8438] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 857.283324][ T3546] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 857.311302][ T3546] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 857.824314][ T3546] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 857.906036][ T4276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 858.012881][ T4276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.211744][ T4276] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 858.225288][ T4482] bond0: (slave bond_slave_0): interface is now down [ 858.234978][ T4482] bond0: (slave bond_slave_1): interface is now down [ 858.251356][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.270556][T10337] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 858.308391][ T4276] usb 2-1: config 0 descriptor?? [ 858.323106][T11739] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 858.349944][ T4482] bond0: now running without any active interface! [ 858.385914][ T3546] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 858.566545][ T3546] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 858.579911][ T1336] usb 5-1: USB disconnect, device number 16 [ 858.760794][ T6165] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 859.027305][ T6165] usb 7-1: Using ep0 maxpacket: 16 [ 859.327224][ T6165] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 859.362582][ T6165] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.389528][ T6165] usb 7-1: Product: syz [ 859.531887][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 859.568173][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 859.584111][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 859.599345][ T6165] usb 7-1: Manufacturer: syz [ 859.606088][ T6165] usb 7-1: SerialNumber: syz [ 859.622105][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 859.631172][ T6165] usb 7-1: config 0 descriptor?? [ 859.645789][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 859.655151][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 859.758655][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 859.865662][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 859.946111][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.085778][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.206134][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.331612][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.339517][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.372789][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.384105][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.395554][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.422395][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.444757][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.474242][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.492800][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.507119][ T6165] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 860.540221][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.562256][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.576579][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.594554][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.604157][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.625387][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.644373][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.655781][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.666843][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.678018][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.689016][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.703582][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.716748][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.724291][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.738724][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.746389][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.762387][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.772929][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.785502][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.796701][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.809561][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.820432][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.833356][ T6165] ssu100: probe of 7-1:0.0 failed with error -71 [ 860.836716][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.857027][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.872844][ T6165] usb 7-1: USB disconnect, device number 9 [ 860.882714][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.898763][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.918963][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.926187][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.943419][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.955621][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.968484][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.979695][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 860.991045][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.002665][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.013922][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.025908][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.033493][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.048117][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.055601][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.070272][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.077532][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.090135][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.097634][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.111606][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.118948][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.132698][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.140277][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.154919][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.162378][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.176623][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.184362][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.196900][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.204313][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.218031][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.225573][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.241006][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.248518][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.262734][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.270142][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.286727][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.302670][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.348679][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.366826][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.389139][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.412936][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.420663][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.435431][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.445685][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.458275][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.481431][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.512390][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.524286][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.532290][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.539933][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.547203][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.568837][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.576554][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.587145][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.597952][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.613350][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.620702][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.639151][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.656082][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.672774][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.690159][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.698227][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.805620][ T6165] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 861.880561][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.888485][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.895845][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.903064][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.911858][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.919147][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.926388][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.934069][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.941252][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.948663][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.956077][ T4276] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 861.963260][ T4276] kovaplus 0003:1E7D:2D50.000A: item fetching failed at offset 122/235 [ 862.244201][ T6165] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 862.271408][ T6165] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.372094][ T6165] usb 7-1: config 0 has no interface number 0 [ 862.432795][ T6165] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 862.530653][ T6165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.616546][ T6165] usb 7-1: config 0 descriptor?? [ 862.673083][ T6165] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 862.749171][ T4276] kovaplus 0003:1E7D:2D50.000A: parse failed [ 862.755282][ T4276] kovaplus: probe of 0003:1E7D:2D50.000A failed with error -22 [ 862.789207][ T4276] usb 2-1: USB disconnect, device number 20 [ 863.364704][ T8438] usb 7-1: USB disconnect, device number 10 [ 864.072108][ T6165] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 864.381531][ T6165] usb 2-1: Using ep0 maxpacket: 16 [ 864.510370][ T6165] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 864.607036][ T6165] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 864.697773][ T6165] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 864.740636][ T6165] usb 2-1: config 0 interface 0 has no altsetting 0 [ 864.926252][ T6165] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 864.973173][ T6165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.011514][ T6165] usb 2-1: Product: syz [ 865.213355][ T6165] usb 2-1: Manufacturer: syz [ 865.783041][ T6165] usb 2-1: SerialNumber: syz [ 866.027716][ T6165] usb 2-1: config 0 descriptor?? [ 866.308279][ T6165] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 866.348326][ T3546] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 866.416835][ T3546] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 866.557778][T11815] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 866.570040][T11815] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 866.692985][T11786] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 866.738710][ T3546] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 866.756130][ T8438] usb 2-1: USB disconnect, device number 21 [ 866.765621][ T3546] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 867.800593][ T1336] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 868.806731][ T1336] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 869.176769][ T1336] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.388327][ T1336] usb 6-1: config 0 has no interface number 0 [ 869.395288][ T1336] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 869.404677][ T1336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.423492][ T1336] usb 6-1: config 0 descriptor?? [ 870.750370][ T1336] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 870.759265][ T1336] usb 6-1: USB disconnect, device number 23 [ 871.116656][T11862] overlayfs: failed to set xattr on upper [ 871.122756][T11862] overlayfs: ...falling back to index=off,metacopy=off. [ 872.060360][T11870] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 872.067581][T11870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 872.126988][T11870] vhci_hcd vhci_hcd.0: Device attached [ 872.607735][T11871] vhci_hcd: connection closed [ 872.612830][T10167] vhci_hcd: stop threads [ 872.743035][T10167] vhci_hcd: release socket [ 872.818200][T10167] vhci_hcd: disconnect device [ 874.031725][T11896] INFO: trying to register non-static key. [ 874.037658][T11896] The code is fine but needs lockdep annotation, or maybe [ 874.044777][T11896] you didn't initialize this object before use? [ 874.051051][T11896] turning off the locking correctness validator. [ 874.057387][T11896] CPU: 1 PID: 11896 Comm: syz.5.2112 Not tainted syzkaller #0 [ 874.065541][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 874.075619][T11896] Call Trace: [ 874.078906][T11896] [ 874.081867][T11896] dump_stack_lvl+0x188/0x250 [ 874.086561][T11896] ? show_regs_print_info+0x20/0x20 [ 874.091809][T11896] ? load_image+0x400/0x400 [ 874.096347][T11896] ? cpumask_next+0xb3/0xd0 [ 874.100855][T11896] ? __is_module_percpu_address+0x2a7/0x410 [ 874.106747][T11896] ? is_kernel_percpu_address+0x143/0x160 [ 874.112472][T11896] assign_lock_key+0x1ec/0x200 [ 874.117265][T11896] ? SOFTIRQ_verbose+0x10/0x10 [ 874.122044][T11896] register_lock_class+0x21d/0x890 [ 874.127155][T11896] ? stack_trace_save+0xa6/0xf0 [ 874.132126][T11896] ? stack_trace_snprint+0xf0/0xf0 [ 874.137244][T11896] ? slab_free_freelist_hook+0xea/0x170 [ 874.142809][T11896] ? is_dynamic_key+0x1f0/0x1f0 [ 874.147668][T11896] ? mark_lock+0x94/0x320 [ 874.152002][T11896] __lock_acquire+0x16f/0x7d10 [ 874.156777][T11896] ? __lock_acquire+0x12e8/0x7d10 [ 874.161809][T11896] ? __lock_acquire+0x13bc/0x7d10 [ 874.167151][T11896] ? verify_lock_unused+0x140/0x140 [ 874.172397][T11896] ? verify_lock_unused+0x140/0x140 [ 874.177613][T11896] ? verify_lock_unused+0x140/0x140 [ 874.182830][T11896] ? verify_lock_unused+0x140/0x140 [ 874.188047][T11896] lock_acquire+0x19e/0x400 [ 874.192577][T11896] ? gsmld_write_wakeup+0x6b/0x2b0 [ 874.197757][T11896] ? read_lock_is_recursive+0x10/0x10 [ 874.203142][T11896] ? mark_lock+0x94/0x320 [ 874.207505][T11896] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 874.212968][T11896] ? lockdep_hardirqs_off+0x70/0x100 [ 874.218271][T11896] _raw_spin_lock_irqsave+0xb0/0x100 [ 874.223579][T11896] ? gsmld_write_wakeup+0x6b/0x2b0 [ 874.228984][T11896] ? _raw_spin_lock+0x40/0x40 [ 874.233804][T11896] ? ldsem_down_read_trylock+0x13a/0x1a0 [ 874.239475][T11896] ? tty_ldisc_ref+0x18/0x80 [ 874.244254][T11896] ? __init_ldsem+0x150/0x150 [ 874.248939][T11896] gsmld_write_wakeup+0x6b/0x2b0 [ 874.253975][T11896] ? gsmld_receive_buf+0x340/0x340 [ 874.259126][T11896] tty_wakeup+0xb4/0xf0 [ 874.259152][T11896] tty_port_default_wakeup+0xa5/0xf0 [ 874.259170][T11896] ? gsmld_close+0x110/0x110 [ 874.259184][T11896] tty_ldisc_hangup+0xd6/0x4a0 [ 874.259201][T11896] __tty_hangup+0x45c/0x680 [ 874.259222][T11896] tty_ioctl+0x489/0xc20 [ 874.259235][T11896] ? security_file_ioctl+0x7c/0xa0 [ 874.259252][T11896] ? tty_get_icount+0xa0/0xa0 [ 874.259266][T11896] __se_sys_ioctl+0xfa/0x170 [ 874.259281][T11896] do_syscall_64+0x4c/0xa0 [ 874.259296][T11896] ? clear_bhb_loop+0x30/0x80 [ 874.259312][T11896] ? clear_bhb_loop+0x30/0x80 [ 874.259328][T11896] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 874.259354][T11896] RIP: 0033:0x7f842a833dd9 [ 874.259370][T11896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.259384][T11896] RSP: 002b:00007f8428a8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.259405][T11896] RAX: ffffffffffffffda RBX: 00007f842aaacfa0 RCX: 00007f842a833dd9 [ 874.259417][T11896] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 874.259426][T11896] RBP: 00007f842a8c9d69 R08: 0000000000000000 R09: 0000000000000000 [ 874.259436][T11896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.259450][T11896] R13: 00007f842aaad038 R14: 00007f842aaacfa0 R15: 00007ffcc4596458 [ 874.259467][T11896]