last executing test programs: 12m50.085633804s ago: executing program 1 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0xaf, &(0x7f0000000740)=""/175, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x5, {}, {}, @note={0x4}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfa, 0xbfff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000340)=0x50) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x210040, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) 12m48.344060149s ago: executing program 1 (id=23): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x4000086e, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigtimedwait(&(0x7f0000000080)={[0x3]}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) 12m37.807691242s ago: executing program 1 (id=32): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x1000}) r10 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x18c) execveat(r10, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={[0x0]}, &(0x7f0000000200), 0x100) 12m35.605143753s ago: executing program 1 (id=34): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fadvise64(r0, 0xaa1f, 0xff39, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x80800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000340)={0x0, 0x7, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) 12m34.330582221s ago: executing program 1 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x4000086e, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigtimedwait(&(0x7f0000000080)={[0x3]}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) 12m28.343815648s ago: executing program 1 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 12m10.90428527s ago: executing program 32 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 8m15.102368202s ago: executing program 5 (id=318): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x400) socket(0x10, 0x80002, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8m13.78073732s ago: executing program 5 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 8m10.630041066s ago: executing program 5 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 8m8.27550679s ago: executing program 5 (id=328): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 8m3.820892414s ago: executing program 2 (id=336): socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100003040000000000000000000074", @ANYRES32=r6, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 8m2.672519241s ago: executing program 2 (id=337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$get_security(0x11, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x9, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x0, 0x0}) 8m0.014678899s ago: executing program 2 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r3}, 0x18) r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x100, 0x2001, 0x0, 0x0}], 0x1}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280), &(0x7f00000000c0)=""/83, 0x53, 0x0) 7m55.76702999s ago: executing program 5 (id=343): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r1 = socket(0x25, 0x1, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x9, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100289cda8fc8dbdf254a0000007b3fd4c56f4d1b02ab96e21b1bb11c0f5de084c4b66132df6e51f9a17131c944c686b9df2f3ebcad8fc3dc480cbb80c17487ddd95b00"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x0, 0x0}) 7m52.622457766s ago: executing program 2 (id=346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x3, 0x7ffc1ffb}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 7m46.556528933s ago: executing program 2 (id=347): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x400) socket(0x10, 0x80002, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 7m46.460808854s ago: executing program 5 (id=350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x5, {}, {}, @note={0x4}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 7m45.093719144s ago: executing program 2 (id=352): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 7m29.302734902s ago: executing program 33 (id=350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x5, {}, {}, @note={0x4}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 7m29.189715634s ago: executing program 34 (id=352): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1m43.799791709s ago: executing program 7 (id=817): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010900000009040000010300000009210000000122050009058103"], 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x3, 'y'}, @global=@item_012={0x2, 0x1, 0x2, "bd5d"}]}}, 0x0}, 0x0) 1m40.395945983s ago: executing program 7 (id=821): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='xprt_retransmit\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r6], 0x14}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) 1m38.836088334s ago: executing program 7 (id=822): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100033060000000000000000ac1e0001000000000000000000000000fe8000000000002200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) 1m34.726728688s ago: executing program 7 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) unshare(0x44040000) 1m32.047183953s ago: executing program 7 (id=829): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000014c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000300000039"], 0x0, 0x0, 0x0, 0x0}) 1m26.17596057s ago: executing program 7 (id=838): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") 1m17.210104358s ago: executing program 6 (id=848): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000014c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000300000039"], 0x0, 0x0, 0x0, 0x0}) 1m13.526349036s ago: executing program 6 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x8000) 1m10.531459185s ago: executing program 35 (id=838): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 1m10.511601166s ago: executing program 6 (id=857): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000feffffff00"], 0x50) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x14, 0x5f, &(0x7f0000000a40)}) 1m9.158629293s ago: executing program 6 (id=861): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$getown(r3, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 1m6.504022938s ago: executing program 6 (id=864): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x3, 0x7ffc1ffb}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1m5.341417713s ago: executing program 6 (id=866): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100033060000000000000000ac1e0001000000000000000000000000fe8000000000002200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) 49.165758766s ago: executing program 36 (id=866): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100033060000000000000000ac1e0001000000000000000000000000fe8000000000002200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) 17.915367585s ago: executing program 3 (id=917): unshare(0x44040000) 16.0348607s ago: executing program 0 (id=921): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="fe2ec278a3e2bb86d978f141199cd23ce474e995593437", @ANYRES8, @ANYRES8=r0, @ANYBLOB="acf7947a93e1978453cdbe9b0cb4dfb683bf9948b56dbe6bc3fe2342df156876cc15334fc761c63aed0a79e6b05fc62f00f2271f340f9199e606636c9f40d40d7e9a942e71ed9d7cfc0ac4138659b3592e0b7fecdaf316975f4d8fe29edff38aa6f5aa5276555b2cf9cf126f293b8f8be4408a1b8c2971b61fc3dbe95cfc1efcdf3b56b1f587316d15416cacaf35dff1a25bef13af20cc0c0b3ee9caa942fc7d8ad724e308f0bc4d3964eacd9b3272849d20674fc3417f435fd149349a1b33c8f04b2dca255cdc12cd9a5228300cb875046ccfac8c833ef7fe970ab37d02cbf5696088920933e9d84e02450940bb83", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRESOCT, @ANYRES16=r1], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$eJzs3E1sG8UeAPD/Ok76Xr+S19f3oKVAoCAqPpI2LdADB0BC4lAkJDiUo0nSqtRtUBMkWkU0oKpckGgl7giJCxJnDpw4IeCExIUD3FGlCvVC4WS09tqsHbt1EqdO6t9Pcj2zO8nMf3dnd3anmwAG1nj6TxKxPSJ+iYjRiCi0Fhivfd28sTj9543F6SQqldd+T9Ifiz9uLE7XiybZ97Zapph+FS4l8XybeufPXzhdKpdnz2X5yYUzb0/On7/w1KkzpZOzJ2fPTh09euTwoWefmXq6J3H+J23r3vfm9u15+Y2rr0wfv/rm918muUbn4+iN4VjKbZNWj/a2sr7bkUsnxaZVM6PNRQt3pkV0Y0tEtaMOR8RIjMbQpZ2NdaPx0gd9bRywriqVSmWq8+qlCnAXS6LfLQD6o36hT+9/6587NPTYEK6/ULsBSuO+mX1qa4qNG9XhlvvbXlqMiONLf32afmJdnkMAADT7Jh3/PNlu/FeI/+fK7czmhsayuZRdEfHfiNgdEf+LqJa9JyLuXWH94y355eOfwrVVBdaldPz3XDa31Tz+a0xTjA1luR3V+IeTE6fKswezbXIghrek+UNtf3sS1Umg+OnjTvWP58Z/6Setvz4WzNpxrbil+WdmSgulNQeeuf5+xN5iu/izCbxsDmtPROxdZR2nHv9iX/OSoUbq9vHfQnGVDcqpfBbxWG3/L0VL/HXJrecnJ/8V5dmDk/WjYrkffrz8aqf61xR/D6T7f2vb478R/1iSn6+dX/YrRm5Xx+VfP+x4T7Pa438keb2p8ndLCwvnDkWMJMeWL8894E7z9aMvLZ/Gf2B/+/6/K/7ZEvdFRHoQ3x8RD0TEg1nbH4qIhyNif76BLTOc3734yFurj399pfEfW9H+X3li6PS3X3eqv7v9f6SaOpAt6eb8120D17LtAAAAYLMoRMT2SAoTjXShMDFR+z/8u2NroTw3v/DEibl3zs7U3hEYi+FC/UnXaJaP7PnnWO756FR11jziYpY/nD03/mTo39X8xPRceabfwcOA29ah/6d+G+p364B114N5NGCT0v9hcK2+/ztzwGZ3m17sDzbAXcxVHAZXu/5/sQ/tAO48138YXI3+f6WLwrnXvVpf3gQ2H9d/GFz6PwyktbzXvyES8XnErcskG6WpK0p8lF9SP0FvhIaVTtQOmyhsjA3VlIhIonOZQuSWlNqViSsbIYoOiWLXf9XifOViqVz++au1VNrnExMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/B0AAP//7mLcmg==") syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa04402, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4], 0x3, 0x2b4, &(0x7f00000007c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c854) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004410, &(0x7f0000000400), 0x84, 0x46e, &(0x7f0000000900)="$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") 14.734866227s ago: executing program 8 (id=922): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='afs_send_data\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 13.382648414s ago: executing program 0 (id=924): syz_open_dev$evdev(0x0, 0x0, 0xa040) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224000100000000090400000103000100092101010001220500090581037a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020854e8c4b94a5715f8227fd4236376e9708596b6fea1c9d3f45f2e89c8e6ea4"], 0x0}) 11.146788204s ago: executing program 9 (id=880): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00098e000000f8"], 0x0, 0x0}) 11.101856264s ago: executing program 8 (id=927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$eJzs2z9I3GccBvD3Lh6BZMiSKUuTFDKULAkZc0MS7i4JFo5TF7soKCLedIJw0qOCDnqD4g3i6CLCLVYnzxucFIXORRwsgoNLiy6Ci1esb6EU+wd7LQ18PvDjy/vyvO/DO9x4gU9aMvzUarUSIYTW3ZsTE39yuqeeyX54nH9T6A4hEVohhJGvPv/lnkRM/Hrr07g+jOvlpXvNmbP3qfpB1/mzvu1q8jdtV9/9lUZPWx7Iv2o1vfNgcqqUmy2nh/dzlePp77/78tvTTKHRWa2tfUy9G4i53Tg74hwN5TAeRkJ/KIZiGAylNvUv1o9eXD7K1TeGXl9km3NbL2Mu/w/f+Xf7x57M99Yqb5+vP1x4Vd7cK5zcuc4V/+DXBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8tqeufB5FQpN1tOD+/nksfTYyGE00yh0VmtrX1MvRuIud04O+IcDeUwHkZCfyiGRBgMpbb0V44X60cvLh/l6htDry+yzbmtlzGX//3BjlsW/kX/2JP53lrl7fP1hwuvypt7hZM717ni3fb0AQAAAAAAAAAAAAAAAAAAwE0y2Q+P828K3d/E9Rc/fp28mq34f/fP4v7TOA/j/vLSvebM2ftU/aDr/FnfdvWHuD8Rv/srjZ7/9CHcys8BAAD//4Mnkx8=") setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100289cda8fc8dbdf254a0000007b3fd4c56f4d1b02ab96e21b1bb11c0f5de084c4b66132df6e51f9a17131c944c686b9df2f3ebcad8fc3dc480cbb80c17487ddd95b00"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x0, 0x0}) 11.016006955s ago: executing program 4 (id=928): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000001340)={[{}]}) 10.775656979s ago: executing program 8 (id=929): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) 10.568585481s ago: executing program 3 (id=930): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000014c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000300000039"], 0x0, 0x0, 0x0, 0x0}) 8.501379359s ago: executing program 0 (id=931): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100033060000000000000000ac1e0001000000000000000000000000fe8000000000002200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs\x00', &(0x7f00000001c0), 0x200000, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', r8, 0x29, 0x7, 0xa, 0x0, 0x20, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0x401, 0x9}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x23, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r5, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) 8.501138839s ago: executing program 8 (id=932): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010900000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x3, 'y'}, @global=@item_012={0x2, 0x1, 0x2, "bd5d"}]}}, 0x0}, 0x0) 8.259593082s ago: executing program 9 (id=933): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.934229779s ago: executing program 4 (id=934): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x6}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x99500a145edda0a4}, {0x2, 0x1}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0x6}, {0x8, 0x4, r4}], {}, {0x20, 0x6}}, 0x74, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) read$FUSE(r7, &(0x7f0000001680)={0x2020}, 0x2020) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) syz_open_dev$rtc(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd62561699001000fffc000000000000000000000000000001200100000000000000023b00000000000000c2040001"], 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x88}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32], 0x44}}, 0x0) 6.598354823s ago: executing program 3 (id=935): unshare(0x44040000) 4.484102201s ago: executing program 0 (id=936): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x14, 0x5f, &(0x7f0000000a40)}) 4.347899933s ago: executing program 9 (id=937): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x4000086e, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rt_sigtimedwait(&(0x7f0000000080)={[0x3]}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) 2.979061631s ago: executing program 0 (id=938): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r1, 0x8) 2.800313113s ago: executing program 8 (id=939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100289cda8fc8dbdf254a0000007b3fd4c56f4d1b02ab96e21b1bb11c0f5de084c4b66132df6e51f9a17131c944c686b9df2f3ebcad8fc3dc480cbb80c17487ddd95b00"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x0, 0x0}) 2.799156413s ago: executing program 4 (id=940): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x14, 0x5f, &(0x7f0000000a40)}) 2.779898273s ago: executing program 3 (id=941): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xa040) r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020854e8c4b94a5715f8227fd4236376e9708596b6fea1c9d3f45f2e89c8e6ea4"], 0x0}) 1.599552129s ago: executing program 4 (id=942): 1.463635311s ago: executing program 0 (id=943): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="fe2ec278a3e2bb86d978f141199cd23ce474e995593437", @ANYRES8, @ANYRES8=r0, @ANYBLOB="acf7947a93e1978453cdbe9b0cb4dfb683bf9948b56dbe6bc3fe2342df156876cc15334fc761c63aed0a79e6b05fc62f00f2271f340f9199e606636c9f40d40d7e9a942e71ed9d7cfc0ac4138659b3592e0b7fecdaf316975f4d8fe29edff38aa6f5aa5276555b2cf9cf126f293b8f8be4408a1b8c2971b61fc3dbe95cfc1efcdf3b56b1f587316d15416cacaf35dff1a25bef13af20cc0c0b3ee9caa942fc7d8ad724e308f0bc4d3964eacd9b3272849d20674fc3417f435fd149349a1b33c8f04b2dca255cdc12cd9a5228300cb875046ccfac8c833ef7fe970ab37d02cbf5696088920933e9d84e02450940bb83", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRESOCT, @ANYRES16=r1], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$eJzs3E1sG8UeAPD/Ok76Xr+S19f3oKVAoCAqPpI2LdADB0BC4lAkJDiUo0nSqtRtUBMkWkU0oKpckGgl7giJCxJnDpw4IeCExIUD3FGlCvVC4WS09tqsHbt1EqdO6t9Pcj2zO8nMf3dnd3anmwAG1nj6TxKxPSJ+iYjRiCi0Fhivfd28sTj9543F6SQqldd+T9Ifiz9uLE7XiybZ97Zapph+FS4l8XybeufPXzhdKpdnz2X5yYUzb0/On7/w1KkzpZOzJ2fPTh09euTwoWefmXq6J3H+J23r3vfm9u15+Y2rr0wfv/rm918muUbn4+iN4VjKbZNWj/a2sr7bkUsnxaZVM6PNRQt3pkV0Y0tEtaMOR8RIjMbQpZ2NdaPx0gd9bRywriqVSmWq8+qlCnAXS6LfLQD6o36hT+9/6587NPTYEK6/ULsBSuO+mX1qa4qNG9XhlvvbXlqMiONLf32afmJdnkMAADT7Jh3/PNlu/FeI/+fK7czmhsayuZRdEfHfiNgdEf+LqJa9JyLuXWH94y355eOfwrVVBdaldPz3XDa31Tz+a0xTjA1luR3V+IeTE6fKswezbXIghrek+UNtf3sS1Umg+OnjTvWP58Z/6Setvz4WzNpxrbil+WdmSgulNQeeuf5+xN5iu/izCbxsDmtPROxdZR2nHv9iX/OSoUbq9vHfQnGVDcqpfBbxWG3/L0VL/HXJrecnJ/8V5dmDk/WjYrkffrz8aqf61xR/D6T7f2vb478R/1iSn6+dX/YrRm5Xx+VfP+x4T7Pa438keb2p8ndLCwvnDkWMJMeWL8894E7z9aMvLZ/Gf2B/+/6/K/7ZEvdFRHoQ3x8RD0TEg1nbH4qIhyNif76BLTOc3734yFurj399pfEfW9H+X3li6PS3X3eqv7v9f6SaOpAt6eb8120D17LtAAAAYLMoRMT2SAoTjXShMDFR+z/8u2NroTw3v/DEibl3zs7U3hEYi+FC/UnXaJaP7PnnWO756FR11jziYpY/nD03/mTo39X8xPRceabfwcOA29ah/6d+G+p364B114N5NGCT0v9hcK2+/ztzwGZ3m17sDzbAXcxVHAZXu/5/sQ/tAO48138YXI3+f6WLwrnXvVpf3gQ2H9d/GFz6PwyktbzXvyES8XnErcskG6WpK0p8lF9SP0FvhIaVTtQOmyhsjA3VlIhIonOZQuSWlNqViSsbIYoOiWLXf9XifOViqVz++au1VNrnExMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/B0AAP//7mLcmg==") syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa04402, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4], 0x3, 0x2b4, &(0x7f00000007c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r8 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004410, &(0x7f0000000400), 0x84, 0x46e, &(0x7f0000000900)="$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") poll(&(0x7f0000000040)=[{r8, 0x8200}], 0x1, 0x7) 1.463341981s ago: executing program 4 (id=944): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x14, 0x5f, &(0x7f0000000a40)}) 1.401179472s ago: executing program 8 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x8000) 260.651257ms ago: executing program 3 (id=946): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 169.686328ms ago: executing program 4 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000008000000fa50bf97bf80a6e4", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000040000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") splice(r6, &(0x7f0000000180)=0x2, r3, &(0x7f00000001c0), 0x6, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r7, &(0x7f0000002300)={0x2020}, 0x2020) unshare(0x40020200) 0s ago: executing program 3 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)={0x20, r1, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) kernel console output (not intermixed with test programs): T8194] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 667.049928][ T4825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.110553][ T4825] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 667.219847][ T4325] usb 4-1: device descriptor read/64, error -71 [ 668.380089][ T8208] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 668.546533][ T8208] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 668.562353][ T8208] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 668.576964][ T8208] overlayfs: upper fs needs to support d_type. [ 668.583225][ T8208] overlayfs: upper fs does not support tmpfile. [ 668.589685][ T8208] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 668.605386][ T8208] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 668.612509][ T8208] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 668.628636][ T8208] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 668.643052][ T8208] REISERFS warning (device loop7): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 668.658425][ T8208] overlayfs: failed to set xattr on upper [ 668.664240][ T8208] overlayfs: ...falling back to index=off,metacopy=off. [ 668.679447][ T4825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.935122][ T4325] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 669.127815][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 669.137578][ T4325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.149121][ T7098] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 669.167114][ T4325] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 669.170401][ T4825] usb 7-1: config 0 descriptor?? [ 669.202683][ T4325] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 669.220154][ T4325] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 669.232072][ T4325] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 669.244583][ T7098] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 669.247333][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.278204][ T7098] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 669.310459][ T4325] hub 4-1:1.0: bad descriptor, ignoring hub [ 669.316694][ T4325] hub: probe of 4-1:1.0 failed with error -5 [ 669.323221][ T4325] cdc_wdm 4-1:1.0: skipping garbage [ 669.335483][ T4325] cdc_wdm 4-1:1.0: skipping garbage [ 669.344004][ T4325] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 669.350781][ T4325] cdc_wdm 4-1:1.0: Unknown control protocol [ 669.390640][ T4825] usbhid 7-1:0.0: can't add hid device: -71 [ 669.404957][ T4825] usbhid: probe of 7-1:0.0 failed with error -71 [ 669.429465][ T4825] usb 7-1: USB disconnect, device number 12 [ 672.015285][ T4325] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 672.254958][ T4325] usb 8-1: Using ep0 maxpacket: 8 [ 672.277842][ T4325] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 672.323084][ T4325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.384927][ T4255] Bluetooth: hci5: command 0x0406 tx timeout [ 672.385972][ T48] Bluetooth: hci6: command 0x0406 tx timeout [ 672.597908][ T4325] usb 8-1: Product: syz [ 672.602304][ T4325] usb 8-1: Manufacturer: syz [ 672.625042][ T4325] usb 8-1: SerialNumber: syz [ 672.631536][ T4325] usb 8-1: config 0 descriptor?? [ 672.857661][ T4325] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 672.964875][ T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 673.146374][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.158093][ T4825] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 673.165983][ T14] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 673.175376][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.186464][ T14] usb 5-1: config 0 descriptor?? [ 673.354898][ T4825] usb 7-1: Using ep0 maxpacket: 8 [ 673.367951][ T4825] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.380850][ T4825] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 673.392513][ T4825] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 673.406535][ T4825] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 673.419179][ T4825] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 673.428717][ T4825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.437120][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 673.443208][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 673.453477][ T4825] hub 7-1:1.0: bad descriptor, ignoring hub [ 673.461447][ T14] usb 5-1: USB disconnect, device number 16 [ 673.468622][ T4825] hub: probe of 7-1:1.0 failed with error -5 [ 673.481669][ T4825] cdc_wdm 7-1:1.0: skipping garbage [ 673.486982][ T4825] cdc_wdm 7-1:1.0: skipping garbage [ 673.994883][ T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 674.184880][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 674.191895][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.204044][ T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 674.215218][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.232348][ T14] usb 5-1: config 0 descriptor?? [ 674.239761][ T14] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 674.278726][ T4325] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 674.294020][ T4325] usb 8-1: USB disconnect, device number 19 [ 675.149828][ T8237] loop7: detected capacity change from 0 to 256 [ 675.160896][ T8237] exfat: Bad value for 'uid' [ 675.504592][ T8196] cdc_wdm 4-1:1.0: Error autopm - -16 [ 676.807578][ T5339] usb 4-1: USB disconnect, device number 18 [ 676.820625][ T4825] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 676.826678][ T8230] cdc_wdm 4-1:1.0: Error autopm - -16 [ 676.834238][ T8231] cdc_wdm 4-1:1.0: Error autopm - -16 [ 677.298960][ T8233] cdc_wdm 4-1:1.0: Error autopm - -16 [ 677.798662][ T14] ldusb 5-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 677.819735][ T4825] cdc_wdm 7-1:1.0: Unknown control protocol [ 678.821227][ T14] usb 5-1: USB disconnect, device number 17 [ 679.806291][ T4825] usb 7-1: USB disconnect, device number 13 [ 681.843355][ T14] ldusb 5-1:0.0: LD USB Device #2 now disconnected [ 683.953766][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 685.808739][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.815126][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.344883][ T5339] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 689.044992][ T4338] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 689.541811][ T5339] usb 4-1: device not accepting address 19, error -71 [ 689.543133][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 689.543385][ T26] audit: type=1326 audit(1745707214.622:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 689.823893][ T4338] usb 8-1: Using ep0 maxpacket: 8 [ 689.854258][ T4338] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.874804][ T4338] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 689.893996][ T4338] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 689.915805][ T4338] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 690.013144][ T4338] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 690.063320][ T4338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.099457][ T26] audit: type=1326 audit(1745707214.622:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.121932][ T26] audit: type=1326 audit(1745707214.722:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.144243][ T26] audit: type=1326 audit(1745707214.722:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.177372][ T4338] hub 8-1:1.0: bad descriptor, ignoring hub [ 690.183343][ T4338] hub: probe of 8-1:1.0 failed with error -5 [ 690.184369][ T26] audit: type=1326 audit(1745707214.722:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.220821][ T26] audit: type=1326 audit(1745707214.722:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.243609][ T26] audit: type=1326 audit(1745707214.722:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.274612][ T26] audit: type=1326 audit(1745707214.722:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.352264][ T26] audit: type=1326 audit(1745707214.722:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.422476][ T4338] cdc_wdm 8-1:1.0: skipping garbage [ 690.428368][ T4338] cdc_wdm 8-1:1.0: skipping garbage [ 690.435941][ T26] audit: type=1326 audit(1745707214.722:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12cb8e969 code=0x7ffc0000 [ 690.468020][ T4338] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 690.473987][ T4338] cdc_wdm 8-1:1.0: Unknown control protocol [ 690.536553][ T4338] usb 8-1: USB disconnect, device number 20 [ 690.589830][ T22] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 691.023763][ T22] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.269220][ T22] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.283234][ T22] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 691.295869][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.424840][ T2163] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 691.520942][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.529789][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.616369][ T2163] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.627724][ T2163] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 691.634766][ T4338] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 691.637379][ T2163] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.654475][ T2163] usb 7-1: config 0 descriptor?? [ 691.825426][ T5339] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 691.834936][ T4338] usb 8-1: Using ep0 maxpacket: 8 [ 691.842402][ T4338] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.852799][ T4338] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 691.861840][ T4338] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 691.872121][ T2163] usbhid 7-1:0.0: can't add hid device: -71 [ 691.873756][ T4338] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 691.886750][ T2163] usbhid: probe of 7-1:0.0 failed with error -71 [ 691.901595][ T4338] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 691.911272][ T4338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.920555][ T2163] usb 7-1: USB disconnect, device number 14 [ 691.939564][ T4338] hub 8-1:1.0: bad descriptor, ignoring hub [ 691.949136][ T22] hid-led: probe of 0003:27B8:01ED.0009 failed with error -71 [ 691.958118][ T4338] hub: probe of 8-1:1.0 failed with error -5 [ 691.971498][ T22] usb 5-1: USB disconnect, device number 18 [ 691.978677][ T4338] cdc_wdm 8-1:1.0: skipping garbage [ 691.983921][ T4338] cdc_wdm 8-1:1.0: skipping garbage [ 692.007181][ T4338] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 692.013148][ T4338] cdc_wdm 8-1:1.0: Unknown control protocol [ 692.023759][ T5339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.043451][ T5339] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 692.053742][ T5339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.063643][ T5339] usb 4-1: config 0 descriptor?? [ 692.275081][ T41] usb 8-1: USB disconnect, device number 21 [ 692.281779][ T5339] usbhid 4-1:0.0: can't add hid device: -71 [ 692.293910][ T5339] usbhid: probe of 4-1:0.0 failed with error -71 [ 692.302541][ T5339] usb 4-1: USB disconnect, device number 21 [ 692.486252][ T2163] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 692.665132][ T2163] usb 7-1: Using ep0 maxpacket: 32 [ 692.672834][ T2163] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.689176][ T2163] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 692.705652][ T2163] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.726813][ T2163] usb 7-1: config 0 descriptor?? [ 692.741047][ T2163] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 692.753510][ T2163] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 692.870098][ T5339] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 692.924851][ T22] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 693.014824][ T41] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 693.054791][ T5339] usb 4-1: Using ep0 maxpacket: 32 [ 693.061496][ T5339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.072637][ T5339] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 693.081827][ T5339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.092116][ T5339] usb 4-1: config 0 descriptor?? [ 693.101459][ T5339] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 693.112884][ T5339] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 693.130460][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 693.137361][ T22] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 693.154906][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.164630][ T22] usb 5-1: config 0 descriptor?? [ 693.173433][ T4338] usb 7-1: USB disconnect, device number 15 [ 693.182873][ T22] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 693.191609][ T4338] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 693.198477][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 693.210778][ T41] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.225248][ T41] usb 8-1: config 0 has no interface number 0 [ 693.232139][ T41] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 693.242942][ T41] usb 8-1: config 0 interface 1 has no altsetting 0 [ 693.252260][ T41] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 693.261422][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.270098][ T41] usb 8-1: Product: syz [ 693.274309][ T41] usb 8-1: Manufacturer: syz [ 693.279274][ T41] usb 8-1: SerialNumber: syz [ 693.286781][ T41] usb 8-1: config 0 descriptor?? [ 693.314043][ T4952] usb 4-1: USB disconnect, device number 22 [ 693.322284][ T4952] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 693.502462][ T41] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 693.511927][ T41] cx231xx 8-1:0.1: Failed to read PCB config [ 693.518167][ T41] cx231xx: probe of 8-1:0.1 failed with error -71 [ 693.532574][ T41] usb 8-1: USB disconnect, device number 22 [ 694.295508][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.716'. [ 694.313241][ T4952] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 694.395420][ T41] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 694.970345][ T22] gspca_vc032x: reg_w err -110 [ 695.033554][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.156874][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.163883][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.195206][ T4952] usb 4-1: device descriptor read/64, error -71 [ 695.322403][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.355063][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 695.389413][ T41] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 695.492530][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.525620][ T4952] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 695.608470][ T41] usb 8-1: config 0 has no interface number 0 [ 695.641270][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.732076][ T41] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 695.743449][ T4952] usb 4-1: device descriptor read/64, error -71 [ 695.774947][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.824081][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.853734][ T41] usb 8-1: config 0 interface 1 has no altsetting 0 [ 695.885569][ T4952] usb usb4-port1: attempt power cycle [ 695.952044][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.058015][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.240536][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.365015][ T4952] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 696.408711][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.471819][ T4952] usb 4-1: device descriptor read/8, error -71 [ 696.578734][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.726675][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.751361][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.757383][ T41] usb 8-1: string descriptor 0 read error: -71 [ 696.764158][ T41] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 696.813041][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.825486][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.833723][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.839882][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 696.870277][ T41] usb 8-1: config 0 descriptor?? [ 696.887883][ T22] gspca_vc032x: Unknown sensor... [ 696.905151][ T4952] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 696.926233][ T41] usb 8-1: can't set config #0, error -71 [ 696.946136][ T22] vc032x: probe of 5-1:0.0 failed with error -22 [ 696.986186][ T41] usb 8-1: USB disconnect, device number 23 [ 697.011614][ T22] usb 5-1: USB disconnect, device number 19 [ 697.062059][ T4952] usb 4-1: device descriptor read/8, error -71 [ 697.205547][ T4952] usb usb4-port1: unable to enumerate USB device [ 697.719719][ T8371] device ip6erspan0 entered promiscuous mode [ 698.508935][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 698.509167][ T26] audit: type=1326 audit(1745707223.692:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 699.138805][ T26] audit: type=1326 audit(1745707223.692:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 699.267991][ T8377] loop3: detected capacity change from 0 to 256 [ 699.279457][ T8377] exfat: Bad value for 'uid' [ 700.720130][ T26] audit: type=1326 audit(1745707223.702:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 701.644321][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.7.724'. [ 702.686628][ T6279] blk_print_req_error: 17 callbacks suppressed [ 702.686646][ T6279] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 702.914729][ T26] audit: type=1326 audit(1745707223.702:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 703.214765][ T26] audit: type=1326 audit(1745707223.702:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 704.523561][ T26] audit: type=1326 audit(1745707223.702:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 704.546718][ T26] audit: type=1326 audit(1745707223.702:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 704.582551][ T26] audit: type=1326 audit(1745707223.702:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 704.639780][ T26] audit: type=1326 audit(1745707223.702:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 704.669413][ T26] audit: type=1326 audit(1745707223.912:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 704.733942][ T26] audit: type=1326 audit(1745707223.912:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 704.779346][ T5339] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 704.824864][ T2163] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 704.949619][ T4325] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 705.166099][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 705.190784][ T4325] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.247424][ T4325] usb 4-1: config 0 has no interface number 0 [ 705.284357][ T4325] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 705.356034][ T4325] usb 4-1: config 0 interface 1 has no altsetting 0 [ 705.616514][ T4325] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 705.632508][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.641220][ T4325] usb 4-1: Product: syz [ 705.650777][ T4325] usb 4-1: Manufacturer: syz [ 705.655626][ T4325] usb 4-1: SerialNumber: syz [ 705.677247][ T4325] usb 4-1: config 0 descriptor?? [ 705.735036][ T2163] usb 7-1: Using ep0 maxpacket: 32 [ 705.742996][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.755214][ T2163] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 705.764300][ T2163] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.772482][ T5339] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 705.782330][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.793722][ T2163] usb 7-1: config 0 descriptor?? [ 705.804033][ T5339] usb 5-1: config 0 descriptor?? [ 705.810068][ T2163] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 705.891561][ T4325] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 705.902931][ T4325] cx231xx 4-1:0.1: Failed to read PCB config [ 705.910787][ T4325] cx231xx: probe of 4-1:0.1 failed with error -71 [ 705.920511][ T4325] usb 4-1: USB disconnect, device number 27 [ 706.031485][ T5339] usbhid 5-1:0.0: can't add hid device: -71 [ 706.037620][ T5339] usbhid: probe of 5-1:0.0 failed with error -71 [ 706.045144][ T22] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 706.046822][ T5339] usb 5-1: USB disconnect, device number 20 [ 706.215715][ T22] usb 8-1: device descriptor read/64, error -71 [ 706.622471][ T8414] loop0: detected capacity change from 0 to 256 [ 706.633757][ T8414] exfat: Bad value for 'uid' [ 706.643678][ T22] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 706.644281][ T4325] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 707.435924][ T22] usb 8-1: device descriptor read/64, error -71 [ 707.464973][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 707.487561][ T4325] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.572724][ T22] usb usb8-port1: attempt power cycle [ 707.610422][ T4325] usb 4-1: config 0 has no interface number 0 [ 707.684769][ T2163] gspca_vc032x: reg_w err -110 [ 707.689594][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.695121][ T4325] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 707.705132][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.710869][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.716225][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.721528][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.725416][ T6279] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 707.866945][ T4325] usb 4-1: config 0 interface 1 has no altsetting 0 [ 708.380171][ T22] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 708.395038][ T4325] usb 4-1: string descriptor 0 read error: -71 [ 708.445854][ T22] usb 8-1: device descriptor read/8, error -71 [ 708.464783][ T4325] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 708.538978][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.585795][ T4325] usb 4-1: config 0 descriptor?? [ 708.684729][ T5339] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 708.693258][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.698950][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.704350][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.709778][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.716205][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.721535][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.861050][ T4325] usb 4-1: can't set config #0, error -71 [ 708.881499][ T4325] usb 4-1: USB disconnect, device number 28 [ 709.060518][ T22] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 709.371445][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 709.684967][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.690328][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.695756][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.701075][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.706448][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.711759][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.717917][ T2163] gspca_vc032x: I2c Bus Busy Wait 00 [ 709.760013][ T22] usb 8-1: device descriptor read/8, error -71 [ 710.052166][ T22] usb usb8-port1: unable to enumerate USB device [ 710.122274][ T8438] loop6: detected capacity change from 0 to 256 [ 710.130247][ T8438] exfat: Bad value for 'uid' [ 710.684972][ T2163] gspca_vc032x: Unknown sensor... [ 710.690110][ T2163] vc032x: probe of 7-1:0.0 failed with error -22 [ 710.704438][ T2163] usb 7-1: USB disconnect, device number 16 [ 710.721007][ T6279] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 711.079746][ T8441] loop0: detected capacity change from 0 to 8192 [ 711.223247][ T8441] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 711.304800][ T4952] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 711.312526][ T8441] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 711.333332][ T8441] REISERFS (device loop0): using ordered data mode [ 711.612599][ T4952] usb 8-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.691378][ T8441] reiserfs: using flush barriers [ 711.754881][ T4952] usb 8-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.438808][ T4952] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 712.576065][ T8441] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 712.625544][ T4952] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.687136][ T8441] REISERFS (device loop0): checking transaction log (loop0) [ 712.886264][ T8441] REISERFS (device loop0): Using r5 hash to sort names [ 712.930076][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.939312][ T8441] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 712.986634][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.030425][ T8441] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 713.463673][ T4952] hid-led: probe of 0003:27B8:01ED.000A failed with error -71 [ 713.515054][ T4952] usb 8-1: USB disconnect, device number 28 [ 715.174734][ T41] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 715.368752][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.400390][ T41] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 715.414832][ T22] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 715.474209][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.521008][ T41] usb 4-1: config 0 descriptor?? [ 715.610241][ T22] usb 8-1: Using ep0 maxpacket: 16 [ 715.619606][ T22] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 715.658923][ T22] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 715.695048][ T22] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 715.703308][ T22] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 715.718961][ T22] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 715.730895][ T22] usb 8-1: config 0 has no interface number 0 [ 715.760236][ T22] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 715.773511][ T41] usbhid 4-1:0.0: can't add hid device: -71 [ 715.784057][ T41] usbhid: probe of 4-1:0.0 failed with error -71 [ 715.815766][ T41] usb 4-1: USB disconnect, device number 29 [ 715.826281][ T22] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 715.861919][ T22] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 715.874205][ T22] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 715.893977][ T22] usb 8-1: config 0 interface 125 has no altsetting 0 [ 715.901950][ T22] usb 8-1: config 0 interface 125 has no altsetting 2 [ 715.927615][ T22] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 715.942248][ T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.967907][ T22] usb 8-1: Product: syz [ 715.982474][ T22] usb 8-1: Manufacturer: syz [ 716.051035][ T22] usb 8-1: SerialNumber: syz [ 716.099150][ T22] usb 8-1: config 0 descriptor?? [ 716.119013][ T22] usb 8-1: selecting invalid altsetting 2 [ 716.404747][ T2163] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 716.528437][ C1] usb 8-1: async_complete: urb error -71 [ 716.534229][ C1] usb 8-1: async_complete: urb error -71 [ 716.539972][ C1] usb 8-1: async_complete: urb error -71 [ 716.545786][ T22] get_1284_register: usb error -71 [ 716.550988][ T22] uss720: probe of 8-1:0.125 failed with error -71 [ 716.564423][ T22] usb 8-1: USB disconnect, device number 29 [ 716.610527][ T2163] usb 5-1: Using ep0 maxpacket: 32 [ 716.622790][ T2163] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 716.652673][ T2163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.678906][ T2163] usb 5-1: config 0 descriptor?? [ 716.694024][ T2163] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 716.974892][ T14] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 717.165021][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 717.187128][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.198035][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 717.207527][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 717.218849][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 717.230158][ T14] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 717.239318][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.252514][ T14] hub 4-1:1.0: bad descriptor, ignoring hub [ 717.258618][ T14] hub: probe of 4-1:1.0 failed with error -5 [ 717.265959][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 717.271266][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 717.278268][ T14] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 717.284262][ T14] cdc_wdm 4-1:1.0: Unknown control protocol [ 717.344780][ T4825] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 717.444819][ T22] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 717.520898][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.524838][ T4825] usb 7-1: Using ep0 maxpacket: 8 [ 717.532430][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.540585][ T4825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.552007][ T4825] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 717.565003][ T4825] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 717.574089][ T4825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.585379][ T4825] usb 7-1: config 0 descriptor?? [ 717.644831][ T22] usb 8-1: Using ep0 maxpacket: 32 [ 717.654640][ T22] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 717.664255][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.681233][ T22] usb 8-1: config 0 descriptor?? [ 717.689390][ T41] usb 4-1: USB disconnect, device number 30 [ 717.701028][ T22] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 718.207375][ T4825] usbhid 7-1:0.0: can't add hid device: -71 [ 718.214272][ T4825] usbhid: probe of 7-1:0.0 failed with error -71 [ 718.242941][ T4825] usb 7-1: USB disconnect, device number 17 [ 719.574710][ T22] gspca_vc032x: reg_w err -110 [ 719.579535][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.639892][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.684735][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.730797][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.769157][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.816864][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.864731][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.870075][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.915957][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.931644][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.966112][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 719.971452][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.007297][ T8481] loop6: detected capacity change from 0 to 1024 [ 720.018455][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.023781][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.104741][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.137282][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.159410][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.181335][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.204767][ T22] gspca_vc032x: Unknown sensor... [ 720.228526][ T22] vc032x: probe of 8-1:0.0 failed with error -22 [ 720.277379][ T2163] gspca_vc032x: reg_w err -71 [ 720.379061][ T8481] EXT4-fs (loop6): Test dummy encryption mode enabled [ 720.405945][ T8481] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 721.565263][ T4825] usb 8-1: USB disconnect, device number 30 [ 721.661595][ T4952] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 721.725284][ T8481] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 722.003919][ T4952] usb 4-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 722.086031][ T4952] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 722.146783][ T4952] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 722.463989][ T4952] usb 4-1: Manufacturer: syz [ 722.469884][ T4952] usb 4-1: SerialNumber: syz [ 722.686083][ T7093] EXT4-fs (loop6): unmounting filesystem. [ 722.720690][ T4825] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 722.830427][ T4952] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 722.845329][ T4952] usb 4-1: USB disconnect, device number 31 [ 723.004365][ T8512] loop0: detected capacity change from 0 to 256 [ 723.015899][ T8512] exfat: Bad value for 'uid' [ 723.943130][ T41] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 724.162965][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.180798][ T41] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 724.190471][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.212899][ T41] usb 7-1: config 0 descriptor?? [ 724.269206][ T4825] usb 8-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 724.279301][ T4825] usb 8-1: config 1 interface 0 has no altsetting 0 [ 724.284791][ T22] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 724.289978][ T4825] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 724.306635][ T4825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.441043][ T41] usbhid 7-1:0.0: can't add hid device: -71 [ 724.451647][ T41] usbhid: probe of 7-1:0.0 failed with error -71 [ 724.466559][ T22] usb 4-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 724.495216][ T41] usb 7-1: USB disconnect, device number 18 [ 724.515347][ T22] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 724.540506][ T22] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 724.557041][ T22] usb 4-1: Manufacturer: syz [ 724.563709][ T22] usb 4-1: SerialNumber: syz [ 724.807206][ T22] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 724.879734][ T22] usb 4-1: USB disconnect, device number 32 [ 725.069221][ T4825] usb 8-1: Product: syz [ 725.074075][ T4825] usb 8-1: Manufacturer: syz [ 725.078784][ T4825] usb 8-1: SerialNumber: syz [ 725.124282][ T4825] usb 8-1: can't set config #1, error -71 [ 725.162875][ T4825] usb 8-1: USB disconnect, device number 31 [ 725.168225][ T41] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 726.229150][ T8524] syz.0.757[8524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 726.229821][ T8524] syz.0.757[8524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 728.084109][ T8524] loop0: detected capacity change from 0 to 512 [ 728.106526][ T8524] EXT4-fs: Ignoring removed i_version option [ 728.346099][ T8524] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 728.360951][ T8524] EXT4-fs (loop0): 1 truncate cleaned up [ 728.367056][ T8524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 729.205374][ T41] usb 7-1: device descriptor read/all, error -71 [ 729.264277][ T8524] netlink: 'syz.0.757': attribute type 4 has an invalid length. [ 729.944800][ T41] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 729.994840][ T22] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 730.129791][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 730.137596][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.149235][ T41] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 730.159180][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.186391][ T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.199217][ T41] usb 7-1: config 0 descriptor?? [ 730.204381][ T22] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 730.221516][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.241430][ T22] usb 8-1: config 0 descriptor?? [ 730.284893][ T4825] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 730.464726][ T4825] usb 4-1: Using ep0 maxpacket: 32 [ 730.471932][ T4825] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 730.485279][ T4825] usb 4-1: config 0 has no interface number 0 [ 730.491398][ T4825] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 730.502634][ T4825] usb 4-1: config 0 interface 1 has no altsetting 0 [ 730.512344][ T4825] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 730.521492][ T4825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.529619][ T4825] usb 4-1: Product: syz [ 730.533799][ T4825] usb 4-1: Manufacturer: syz [ 730.538480][ T4825] usb 4-1: SerialNumber: syz [ 730.545609][ T4825] usb 4-1: config 0 descriptor?? [ 730.626039][ T41] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 730.633499][ T41] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 730.641554][ T41] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 730.649051][ T41] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 730.658850][ T41] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 730.667568][ T22] usbhid 8-1:0.0: can't add hid device: -71 [ 730.675913][ T22] usbhid: probe of 8-1:0.0 failed with error -71 [ 730.688490][ T41] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 730.701179][ T22] usb 8-1: USB disconnect, device number 32 [ 730.762597][ T4825] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 730.772374][ T4825] cx231xx 4-1:0.1: Failed to read PCB config [ 730.778587][ T4825] cx231xx: probe of 4-1:0.1 failed with error -71 [ 730.789641][ T4825] usb 4-1: USB disconnect, device number 33 [ 730.825541][ T41] playstation 0003:054C:0DF2.000B: Invalid reportID received, expected 9 got 32 [ 730.834993][ T41] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22 [ 730.844257][ T41] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 730.853356][ T41] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 730.862710][ T41] playstation: probe of 0003:054C:0DF2.000B failed with error -22 [ 731.042896][ T14] usb 7-1: USB disconnect, device number 20 [ 731.364883][ T4825] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 731.514826][ T41] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 731.544953][ T4825] usb 4-1: Using ep0 maxpacket: 32 [ 731.551793][ T4825] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.560468][ T4825] usb 4-1: config 0 has no interface number 0 [ 731.566908][ T4825] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 731.585844][ T4825] usb 4-1: config 0 interface 1 has no altsetting 0 [ 731.610821][ T4825] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 731.620141][ T4825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.629388][ T4825] usb 4-1: Product: syz [ 731.633591][ T4825] usb 4-1: Manufacturer: syz [ 731.638910][ T4825] usb 4-1: SerialNumber: syz [ 731.647277][ T4825] usb 4-1: config 0 descriptor?? [ 731.694736][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 731.903739][ T8542] loop6: detected capacity change from 0 to 4096 [ 732.023355][ T4825] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 732.116906][ T8542] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 733.086675][ T4825] cx231xx 4-1:0.1: Failed to read PCB config [ 733.117108][ T4825] cx231xx: probe of 4-1:0.1 failed with error -71 [ 733.152013][ T4825] usb 4-1: USB disconnect, device number 34 [ 733.609087][ T41] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 733.624110][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.927096][ T8548] loop3: detected capacity change from 0 to 8192 [ 733.977118][ T8548] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 734.000553][ T8548] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 734.013149][ T8548] REISERFS (device loop3): using ordered data mode [ 734.023757][ T8548] reiserfs: using flush barriers [ 734.038371][ T8548] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 734.066837][ T8548] REISERFS (device loop3): checking transaction log (loop3) [ 734.081442][ T8548] REISERFS (device loop3): Using r5 hash to sort names [ 734.090466][ T8548] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 734.097998][ T41] usb 8-1: config 0 descriptor?? [ 734.110014][ T8548] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 734.136976][ T41] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 734.145465][ T7093] EXT4-fs (loop6): unmounting filesystem. [ 734.301269][ T41] gspca_vc032x: reg_r err -71 [ 734.306225][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.311545][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.509718][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.515792][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.521115][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.526711][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.532029][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.537614][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.542930][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.565140][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.573749][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.583466][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.589130][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.595348][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.602099][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.607872][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.613311][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.619391][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 734.625013][ T41] gspca_vc032x: Unknown sensor... [ 734.631104][ T41] vc032x: probe of 8-1:0.0 failed with error -22 [ 735.698541][ T8560] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 735.899491][ T8560] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 736.053814][ T8560] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 736.068496][ T8560] overlayfs: upper fs needs to support d_type. [ 736.074753][ T8560] overlayfs: upper fs does not support tmpfile. [ 736.081168][ T8560] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 736.095870][ T8560] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 736.102948][ T8560] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 736.117465][ T8560] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 736.140914][ T8560] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 736.155774][ T8560] overlayfs: failed to set xattr on upper [ 736.161531][ T8560] overlayfs: ...falling back to index=off,metacopy=off. [ 736.180753][ T41] usb 8-1: USB disconnect, device number 33 [ 736.445062][ T4250] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 736.488026][ T4250] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 736.553205][ T4250] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 736.834943][ T41] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 737.554907][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 737.586982][ T4250] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 737.635760][ T4250] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 737.999104][ T41] usb 8-1: device descriptor read/all, error -71 [ 738.795706][ T8573] syz.4.774[8573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 738.795815][ T8573] syz.4.774[8573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 738.867446][ T8573] loop4: detected capacity change from 0 to 512 [ 738.885905][ T8573] EXT4-fs: Ignoring removed i_version option [ 738.964861][ T41] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 739.154353][ T8573] EXT4-fs (loop4): 1 truncate cleaned up [ 739.160365][ T8573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 739.254941][ T8575] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 739.644798][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.665121][ T41] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 739.684582][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.866727][ T8581] loop6: detected capacity change from 0 to 4096 [ 741.012828][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 741.068021][ T4825] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 741.113746][ T8581] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 741.965429][ T4825] usb 4-1: Using ep0 maxpacket: 8 [ 741.974607][ T4825] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 742.056739][ T4825] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.104787][ T4825] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 742.140184][ T4825] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 742.191515][ T4825] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.210651][ T4825] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 742.220240][ T4825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.459904][ T4825] usb 4-1: GET_CAPABILITIES returned 0 [ 742.465760][ T4825] usbtmc 4-1:16.0: can't read capabilities [ 742.608616][ T41] usb 8-1: config 0 descriptor?? [ 742.617369][ T41] usb 8-1: can't set config #0, error -71 [ 742.624846][ T41] usb 8-1: USB disconnect, device number 35 [ 742.717408][ T4295] usb 4-1: USB disconnect, device number 35 [ 742.916930][ T7093] EXT4-fs (loop6): unmounting filesystem. [ 743.304964][ T41] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 743.325078][ T22] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 743.545072][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 743.565119][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 743.591169][ T22] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 743.901707][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.916040][ T41] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 743.926671][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.936078][ T22] usb 7-1: config 0 descriptor?? [ 743.941362][ T41] usb 8-1: Product: syz [ 743.948934][ T22] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 743.955252][ T41] usb 8-1: Manufacturer: syz [ 743.959879][ T41] usb 8-1: SerialNumber: syz [ 743.978249][ T41] usb 8-1: config 0 descriptor?? [ 744.037502][ T8600] loop4: detected capacity change from 0 to 1024 [ 744.057425][ T8600] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 744.072218][ T8600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 744.193309][ T41] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 744.264885][ T4325] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 744.448933][ T4325] usb 4-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 744.470613][ T4325] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 744.485727][ T4325] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 744.494256][ T4325] usb 4-1: Manufacturer: syz [ 744.508006][ T4325] usb 4-1: SerialNumber: syz [ 744.736020][ T4325] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 744.773648][ T4325] usb 4-1: USB disconnect, device number 36 [ 745.065787][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 745.344819][ T4325] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 745.561990][ T4325] usb 4-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 745.574339][ T4325] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 745.583598][ T4325] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 745.591962][ T4325] usb 4-1: Manufacturer: syz [ 745.596622][ T4325] usb 4-1: SerialNumber: syz [ 745.621224][ T41] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 745.631901][ T41] usb 8-1: USB disconnect, device number 36 [ 745.807548][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 745.818273][ T4325] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 745.833607][ T4325] usb 4-1: USB disconnect, device number 37 [ 746.637810][ T8612] loop7: detected capacity change from 0 to 256 [ 746.658696][ T8612] exfat: Bad value for 'uid' [ 747.389184][ T8615] syz.3.786[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.389846][ T8615] syz.3.786[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 748.152617][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.171916][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.175490][ T22] gspca_vc032x: reg_r err -110 [ 748.990873][ T8615] loop3: detected capacity change from 0 to 512 [ 749.001909][ T8615] EXT4-fs: Ignoring removed i_version option [ 749.172336][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.191575][ T8615] EXT4-fs (loop3): 1 truncate cleaned up [ 749.197513][ T8615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 749.316352][ T8615] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 749.383647][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.955187][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.023370][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.043613][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.094032][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.110010][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.151772][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.174517][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.186909][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.202869][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.212990][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.223104][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.233224][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.270330][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.284743][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.293759][ T22] gspca_vc032x: I2c Bus Busy Wait 00 [ 750.302042][ T22] gspca_vc032x: Unknown sensor... [ 750.317185][ T22] vc032x: probe of 7-1:0.0 failed with error -22 [ 750.343667][ T22] usb 7-1: USB disconnect, device number 21 [ 750.389248][ T6435] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 751.833056][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 751.979001][ T22] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 752.137798][ T8632] loop4: detected capacity change from 0 to 4096 [ 753.167047][ T8632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 755.500217][ T22] usb 7-1: device descriptor read/all, error -71 [ 755.534033][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 755.884950][ T22] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 755.994793][ T4825] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 756.064985][ T4295] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 756.067874][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 756.083716][ T22] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 756.092858][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.104028][ T22] usb 7-1: config 0 descriptor?? [ 756.174809][ T4825] usb 4-1: Using ep0 maxpacket: 8 [ 756.185549][ T4825] usb 4-1: config 0 has no interfaces? [ 756.195769][ T4825] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 756.231704][ T4825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.254908][ T4295] usb 8-1: Using ep0 maxpacket: 32 [ 756.265975][ T4295] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 756.280095][ T4825] usb 4-1: config 0 descriptor?? [ 756.285497][ T4295] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.316517][ T4295] usb 8-1: config 0 descriptor?? [ 756.327045][ T4295] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 756.501579][ T4338] usb 4-1: USB disconnect, device number 38 [ 756.664009][ T8656] loop0: detected capacity change from 0 to 16 [ 756.675041][ T8656] erofs: (device loop0): mounted with root inode @ nid 36. [ 756.747408][ T8658] syz.0.799: attempt to access beyond end of device [ 756.747408][ T8658] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 756.838447][ T22] usbhid 7-1:0.0: can't add hid device: -71 [ 756.857573][ T22] usbhid: probe of 7-1:0.0 failed with error -71 [ 756.887389][ T22] usb 7-1: USB disconnect, device number 23 [ 757.414980][ T14] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 757.742091][ T8669] loop0: detected capacity change from 0 to 256 [ 757.749945][ T8669] exfat: Bad value for 'uid' [ 759.145706][ T4295] gspca_vc032x: reg_w err -110 [ 759.150537][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 759.156249][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 759.161587][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 759.167143][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 759.173297][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 759.178700][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 759.184015][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 759.191010][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 760.155637][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 760.161171][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 760.166592][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 760.171925][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 760.177285][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 760.182614][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 760.187972][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 760.195170][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 761.191847][ T22] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 761.204716][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 761.210074][ T4295] gspca_vc032x: I2c Bus Busy Wait 00 [ 761.225410][ T4295] gspca_vc032x: Unknown sensor... [ 761.230593][ T4295] vc032x: probe of 8-1:0.0 failed with error -22 [ 761.240011][ T14] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 761.271772][ T14] usb 4-1: can't read configurations, error -71 [ 761.294292][ T4295] usb 8-1: USB disconnect, device number 37 [ 761.751091][ T4295] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 761.970749][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.982604][ T22] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 761.991852][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.195941][ T8692] syz.4.809[8692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 762.196104][ T8692] syz.4.809[8692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 765.184772][ T4295] usb 8-1: Using ep0 maxpacket: 16 [ 765.825551][ T4295] usb 8-1: device descriptor read/all, error -71 [ 766.147150][ T22] usb 7-1: config 0 descriptor?? [ 766.161274][ T22] usb 7-1: can't set config #0, error -71 [ 766.168237][ T22] usb 7-1: USB disconnect, device number 24 [ 768.917863][ T8718] syz.4.814[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.918312][ T8718] syz.4.814[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.982425][ T8718] loop4: detected capacity change from 0 to 512 [ 769.006709][ T8718] EXT4-fs: Ignoring removed i_version option [ 769.154698][ T5339] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 769.678852][ T8723] loop6: detected capacity change from 0 to 16 [ 769.698151][ T8723] erofs: (device loop6): mounted with root inode @ nid 36. [ 769.834969][ T8724] syz.6.813: attempt to access beyond end of device [ 769.834969][ T8724] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 770.182003][ T8718] EXT4-fs (loop4): 1 truncate cleaned up [ 770.187870][ T8718] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 771.513747][ T8732] loop3: detected capacity change from 0 to 256 [ 771.521039][ T8732] exfat: Bad value for 'uid' [ 771.732036][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 772.165042][ T5339] usb 4-1: device not accepting address 41, error -71 [ 777.418844][ T8755] loop0: detected capacity change from 0 to 4096 [ 777.508263][ T8755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 780.821828][ T14] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 780.902051][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 781.065268][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 781.073493][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.103519][ T14] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 781.118175][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.129448][ T14] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 781.144034][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.180230][ T14] hub 7-1:1.0: bad descriptor, ignoring hub [ 781.193686][ T14] hub: probe of 7-1:1.0 failed with error -5 [ 781.213811][ T14] cdc_wdm 7-1:1.0: skipping garbage [ 781.220651][ T14] cdc_wdm 7-1:1.0: skipping garbage [ 781.230901][ T14] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 781.312075][ T14] usb 7-1: USB disconnect, device number 25 [ 781.571334][ T41] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 781.571383][ T22] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 782.480426][ T8785] loop0: detected capacity change from 0 to 256 [ 782.491765][ T8785] exfat: Bad value for 'uid' [ 782.614990][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 783.116060][ T41] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 783.155436][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.315847][ T41] usb 8-1: config 0 descriptor?? [ 783.388325][ T41] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 783.406644][ T22] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.424148][ T8791] loop4: detected capacity change from 0 to 512 [ 783.449343][ T22] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.510270][ T8791] EXT4-fs: Ignoring removed i_version option [ 783.526397][ T22] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 783.795390][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.361308][ T41] gspca_vc032x: reg_w err -110 [ 784.581587][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 785.223937][ T8791] EXT4-fs (loop4): 1 truncate cleaned up [ 785.239829][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 785.315878][ T8791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 785.457228][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 785.688597][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 785.967554][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.176014][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.199395][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.226325][ T22] usb 4-1: can't set config #9, error -71 [ 786.239604][ T22] usb 4-1: USB disconnect, device number 43 [ 786.487678][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.554955][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.615164][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.621333][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.744740][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.750091][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.792387][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.819610][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.827392][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.832814][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.850079][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 786.857214][ T41] gspca_vc032x: Unknown sensor... [ 786.862417][ T41] vc032x: probe of 8-1:0.0 failed with error -22 [ 786.893848][ T41] usb 8-1: USB disconnect, device number 40 [ 786.930750][ T8816] loop7: detected capacity change from 0 to 512 [ 786.955353][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.834'. [ 786.980608][ T8816] EXT4-fs: Ignoring removed oldalloc option [ 786.990233][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 787.091662][ T8818] loop0: detected capacity change from 0 to 16 [ 787.130057][ T8818] erofs: (device loop0): mounted with root inode @ nid 36. [ 787.201009][ T8823] syz.0.835: attempt to access beyond end of device [ 787.201009][ T8823] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 787.251436][ T8816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 787.599202][ T8830] device ip6erspan0 entered promiscuous mode [ 788.202781][ T8831] syz.3.840[8831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 788.202884][ T8831] syz.3.840[8831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 788.222757][ T8831] loop3: detected capacity change from 0 to 512 [ 788.241301][ T8831] EXT4-fs: Ignoring removed i_version option [ 788.517241][ T8831] EXT4-fs (loop3): 1 truncate cleaned up [ 788.523216][ T8831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 788.653553][ T8831] netlink: 'syz.3.840': attribute type 4 has an invalid length. [ 789.262932][ T8816] EXT4-fs (loop7): orphan cleanup on readonly fs [ 790.173849][ T8816] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 790.572577][ T8816] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 790.690575][ T8816] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.838: Failed to acquire dquot type 1 [ 790.921210][ T8816] EXT4-fs (loop7): 1 truncate cleaned up [ 790.938032][ T8816] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 791.142369][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 791.840762][ T8852] device ip6erspan0 entered promiscuous mode [ 792.500126][ T8853] syz.4.844[8853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.500228][ T8853] syz.4.844[8853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.522354][ T8853] loop4: detected capacity change from 0 to 512 [ 792.541711][ T8853] EXT4-fs: Ignoring removed i_version option [ 793.011603][ T8853] EXT4-fs (loop4): 1 truncate cleaned up [ 793.017421][ T8853] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 793.144859][ T8853] netlink: 'syz.4.844': attribute type 4 has an invalid length. [ 794.154790][ T5339] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 794.837931][ T8855] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 795.495937][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 796.951668][ T5339] usb 7-1: device not accepting address 26, error -71 [ 797.237137][ T8870] loop4: detected capacity change from 0 to 512 [ 797.261197][ T8870] EXT4-fs: Ignoring removed i_version option [ 797.365592][ T8870] EXT4-fs (loop4): 1 truncate cleaned up [ 797.383199][ T8870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 797.464849][ T5339] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 797.602609][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 797.714824][ T5339] usb 7-1: Using ep0 maxpacket: 32 [ 797.724545][ T5339] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 797.766350][ T5339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.805418][ T5339] usb 7-1: config 0 descriptor?? [ 797.826761][ T5339] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 798.071697][ T8877] syz.0.852[8877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.071804][ T8877] syz.0.852[8877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.244853][ T4291] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 798.535420][ T26] audit: type=1326 audit(1745707323.392:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 798.954044][ T5339] gspca_vc032x: reg_w err -110 [ 798.968790][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 798.975416][ T26] audit: type=1326 audit(1745707323.392:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 799.008743][ T4291] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.008766][ T26] audit: type=1326 audit(1745707323.402:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 799.040136][ T4291] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.067067][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.072418][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.095376][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.109989][ T4291] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 799.114786][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.124374][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.150140][ T26] audit: type=1326 audit(1745707323.402:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 799.174771][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.182399][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.195004][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.206020][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.217647][ T26] audit: type=1326 audit(1745707323.402:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 799.254128][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.278551][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.317756][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.321072][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.333601][ T26] audit: type=1326 audit(1745707323.412:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 799.376299][ T26] audit: type=1326 audit(1745707323.412:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 799.407065][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.422785][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 799.458111][ T26] audit: type=1326 audit(1745707323.412:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 799.494429][ T8888] syz.0.854[8888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.495007][ T8888] syz.0.854[8888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.561734][ T8888] loop0: detected capacity change from 0 to 512 [ 799.583882][ T8888] EXT4-fs: Ignoring removed i_version option [ 799.950271][ T8888] EXT4-fs (loop0): 1 truncate cleaned up [ 799.956252][ T8888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 800.228873][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.752451][ T8872] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 800.835384][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.145426][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.150778][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.156948][ T5339] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.162266][ T5339] gspca_vc032x: Unknown sensor... [ 801.167433][ T5339] vc032x: probe of 7-1:0.0 failed with error -22 [ 801.176268][ T5339] usb 7-1: USB disconnect, device number 27 [ 801.179684][ T26] audit: type=1326 audit(1745707323.412:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 802.044831][ T8888] netlink: 'syz.0.854': attribute type 4 has an invalid length. [ 802.189203][ T26] audit: type=1326 audit(1745707323.412:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dce98e969 code=0x7ffc0000 [ 802.455820][ T4291] usbhid 4-1:9.0: can't add hid device: -71 [ 802.461895][ T4291] usbhid: probe of 4-1:9.0 failed with error -71 [ 802.709391][ T4291] usb 4-1: USB disconnect, device number 44 [ 802.768981][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 804.271525][ T4464] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 804.492746][ T4464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.611231][ T4464] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 804.667015][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 805.116315][ T4464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.163056][ T4464] usb 4-1: config 0 descriptor?? [ 805.175192][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 805.184212][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 805.324792][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 805.333883][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 805.342038][ T4263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 805.413263][ T4464] usbhid 4-1:0.0: can't add hid device: -71 [ 805.461179][ T4464] usbhid: probe of 4-1:0.0 failed with error -71 [ 805.542201][ T4464] usb 4-1: USB disconnect, device number 45 [ 805.683702][ T8916] loop0: detected capacity change from 0 to 512 [ 805.732761][ T8916] EXT4-fs: Ignoring removed i_version option [ 805.798901][ T8916] EXT4-fs (loop0): 1 truncate cleaned up [ 805.812438][ T8916] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 806.020496][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 806.075270][ T4464] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 806.285639][ T8911] chnl_net:caif_netlink_parms(): no params data found [ 806.295007][ T4464] usb 4-1: Using ep0 maxpacket: 16 [ 806.317728][ T4464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.369735][ T4464] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.40 [ 806.527905][ T4464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.545343][ T4464] usb 4-1: config 0 descriptor?? [ 806.561353][ T4464] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 806.693756][ T8922] loop0: detected capacity change from 0 to 16 [ 806.709150][ T8922] erofs: (device loop0): mounted with root inode @ nid 36. [ 806.804900][ T8922] syz.0.863: attempt to access beyond end of device [ 806.804900][ T8922] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 806.958351][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 806.958406][ T26] audit: type=1326 audit(1745707332.072:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 807.255732][ T4464] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 807.299075][ T4464] gspca_pac7302: probe of 4-1:0.0 failed with error -110 [ 807.434889][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 807.524913][ T4464] usbhid 4-1:0.0: can't add hid device: -32 [ 807.530947][ T4464] usbhid: probe of 4-1:0.0 failed with error -32 [ 807.543457][ T26] audit: type=1326 audit(1745707332.082:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 807.586302][ T26] audit: type=1326 audit(1745707332.082:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 807.618620][ T4464] usb 4-1: USB disconnect, device number 46 [ 807.654043][ T26] audit: type=1326 audit(1745707332.082:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 807.686843][ T26] audit: type=1326 audit(1745707332.082:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 807.753830][ T26] audit: type=1326 audit(1745707332.082:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 807.787220][ T26] audit: type=1326 audit(1745707332.082:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 807.813648][ T26] audit: type=1326 audit(1745707332.082:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 807.863163][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.924969][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.940311][ T26] audit: type=1326 audit(1745707332.092:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 808.024288][ T8911] device bridge_slave_0 entered promiscuous mode [ 808.111889][ T8940] syz.3.867[8940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 808.112386][ T8940] syz.3.867[8940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 808.187377][ T8940] loop3: detected capacity change from 0 to 512 [ 808.209478][ T8940] EXT4-fs: Ignoring removed i_version option [ 808.268922][ T26] audit: type=1326 audit(1745707332.092:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.6.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db398e969 code=0x7ffc0000 [ 808.476918][ T8940] EXT4-fs (loop3): 1 truncate cleaned up [ 808.482749][ T8940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 808.582056][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.605446][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.511828][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 810.115909][ T8815] EXT4-fs (loop7): unmounting filesystem. [ 810.162554][ T8940] netlink: 'syz.3.867': attribute type 4 has an invalid length. [ 810.184841][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.225517][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.309857][ T8911] device bridge_slave_1 entered promiscuous mode [ 810.322664][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 810.505856][ T8911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.574184][ T8911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.695239][ T8911] team0: Port device team_slave_0 added [ 810.804244][ T8911] team0: Port device team_slave_1 added [ 810.866605][ T8954] syz.3.869[8954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.867034][ T8954] syz.3.869[8954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 811.865360][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 812.218951][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.218969][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.218995][ T8911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.231254][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.231271][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.231298][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.410650][ T8911] device hsr_slave_0 entered promiscuous mode [ 812.413233][ T8911] device hsr_slave_1 entered promiscuous mode [ 812.413824][ T8911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.413848][ T8911] Cannot create hsr debugfs directory [ 813.128157][ T4335] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.179967][ T8911] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 813.214406][ T8911] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 813.242028][ T8911] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 813.804437][ T4335] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.086872][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 814.124717][ T8911] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 814.490164][ T8967] loop4: detected capacity change from 0 to 256 [ 814.501233][ T8967] exfat: Bad value for 'uid' [ 814.560473][ T8966] loop3: detected capacity change from 0 to 512 [ 814.591719][ T4335] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.640154][ T8966] EXT4-fs: Ignoring removed i_version option [ 815.398660][ T8911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.538273][ T8911] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.558953][ T8970] netlink: 'syz.0.874': attribute type 39 has an invalid length. [ 815.929239][ T8911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 815.976559][ T8911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 816.163552][ T8152] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 816.186087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 816.715563][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 816.756828][ T8966] EXT4-fs (loop3): 1 truncate cleaned up [ 816.762578][ T8966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 816.804173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 816.903895][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 817.166425][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.173564][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.042455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 818.051733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 818.061645][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.068807][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.077833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 818.087312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 818.096812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 818.106143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 818.115474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 818.151165][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 818.181607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 818.201973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 818.225609][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 818.274774][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 818.283594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 818.303095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 818.586444][ T8986] loop4: detected capacity change from 0 to 4096 [ 819.892253][ T8986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 820.169332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 820.484036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 820.868644][ T8994] syz.3.878[8994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 820.869192][ T8994] syz.3.878[8994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 820.943656][ T8994] loop3: detected capacity change from 0 to 512 [ 820.966258][ T8994] EXT4-fs: Ignoring removed i_version option [ 823.194377][ T8994] EXT4-fs: failed to create workqueue [ 823.199962][ T8994] EXT4-fs (loop3): mount failed [ 823.935407][ T4335] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.004708][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 825.388014][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 825.434446][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 825.464790][ T4825] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 825.481717][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.654813][ T4825] usb 4-1: Using ep0 maxpacket: 8 [ 825.666075][ T4825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.685359][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 825.696052][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 825.709264][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 825.718383][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 825.725608][ T4825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 825.739670][ T4825] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.749835][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 825.757145][ T4825] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 825.766493][ T4825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.774741][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 825.806877][ T4825] hub 4-1:1.0: bad descriptor, ignoring hub [ 825.812950][ T4825] hub: probe of 4-1:1.0 failed with error -5 [ 825.823205][ T4825] cdc_wdm 4-1:1.0: skipping garbage [ 825.829068][ T4825] cdc_wdm 4-1:1.0: skipping garbage [ 825.835151][ T4825] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 826.156505][ T22] usb 4-1: USB disconnect, device number 47 [ 826.564895][ T22] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 826.653490][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 826.762619][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 826.775102][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 826.781863][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 826.786482][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 826.822693][ T22] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 826.831995][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.847226][ T22] usb 4-1: Product: syz [ 826.851450][ T22] usb 4-1: Manufacturer: syz [ 826.856455][ T22] usb 4-1: SerialNumber: syz [ 826.865700][ T22] usb 4-1: config 0 descriptor?? [ 826.884804][ T22] gs_usb 4-1:0.0: Required endpoints not found [ 827.039625][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 827.052862][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 827.075135][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.082277][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.100972][ T9019] device bridge_slave_0 entered promiscuous mode [ 827.126426][ T4295] usb 4-1: USB disconnect, device number 48 [ 827.224506][ T8911] device veth0_vlan entered promiscuous mode [ 827.239850][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 827.249169][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 827.281335][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.293597][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.302588][ T9019] device bridge_slave_1 entered promiscuous mode [ 827.377918][ T4335] device hsr_slave_0 left promiscuous mode [ 827.384510][ T4335] device hsr_slave_1 left promiscuous mode [ 827.399214][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.412007][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.424124][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.440640][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.452464][ T4335] device bridge_slave_1 left promiscuous mode [ 827.463562][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.481400][ T4335] device bridge_slave_0 left promiscuous mode [ 827.490031][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.544059][ T4335] device veth1_macvtap left promiscuous mode [ 827.552834][ T4335] device veth0_macvtap left promiscuous mode [ 827.559653][ T4335] device veth1_vlan left promiscuous mode [ 827.565586][ T4335] device veth0_vlan left promiscuous mode [ 827.836977][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 828.230263][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 828.278336][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 828.354175][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.404235][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.911889][ T4335] bond0 (unregistering): Released all slaves [ 829.001546][ T8911] device veth1_vlan entered promiscuous mode [ 829.019476][ T9059] netlink: 'syz.3.884': attribute type 39 has an invalid length. [ 829.050927][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.109101][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.215438][ T9019] team0: Port device team_slave_0 added [ 829.239292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 829.266091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 829.284025][ T8911] device veth0_macvtap entered promiscuous mode [ 829.305923][ T9019] team0: Port device team_slave_1 added [ 829.323553][ T8911] device veth1_macvtap entered promiscuous mode [ 829.532965][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.916970][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 830.443832][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.461474][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.472668][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.483225][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.494138][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.504339][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.515186][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.527520][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.538445][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.546877][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.573298][ T9019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.587417][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 830.607305][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 830.648531][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 830.675582][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 830.687990][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.724701][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.759676][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.785074][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.814732][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.845148][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.885089][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.914717][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.936694][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.008519][ T5563] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 831.142780][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.156923][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.208624][ T9019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.243781][ T9085] syz.0.888[9085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 831.244251][ T9085] syz.0.888[9085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 831.295460][ T9085] loop0: detected capacity change from 0 to 512 [ 831.317845][ T9085] EXT4-fs: Ignoring removed i_version option [ 831.585779][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 831.640084][ T9085] EXT4-fs (loop0): 1 truncate cleaned up [ 831.645977][ T9085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 831.853437][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 832.075185][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 832.169692][ T9085] netlink: 'syz.0.888': attribute type 4 has an invalid length. [ 832.175476][ T5563] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.188399][ T5563] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 832.197528][ T5563] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 832.201114][ T8911] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.286975][ T8911] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.326382][ T8911] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.375693][ T8911] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.659473][ T4518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.716540][ T4518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.785006][ T9088] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 832.859956][ T4518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.884516][ T4518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.175568][ T5563] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 833.184912][ T5563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.254931][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 833.264302][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 833.266946][ T9073] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 833.290184][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 833.291090][ T5563] hub 4-1:1.0: bad descriptor, ignoring hub [ 833.315098][ T5563] hub: probe of 4-1:1.0 failed with error -5 [ 833.321670][ T5563] cdc_wdm 4-1:1.0: skipping garbage [ 833.327434][ T5563] cdc_wdm 4-1:1.0: skipping garbage [ 833.334944][ T5563] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 833.340890][ T5563] cdc_wdm 4-1:1.0: Unknown control protocol [ 833.429316][ T9019] device hsr_slave_0 entered promiscuous mode [ 833.441426][ T9019] device hsr_slave_1 entered promiscuous mode [ 833.455080][ T9019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.462696][ T9019] Cannot create hsr debugfs directory [ 833.681423][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 833.688097][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 833.831035][ T4295] usb 4-1: USB disconnect, device number 49 [ 834.145761][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 834.916245][ T4335] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.145226][ T4291] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 835.588097][ T9117] device ip6erspan0 entered promiscuous mode [ 835.727340][ T9019] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 835.786516][ T4335] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.786557][ T4291] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.810113][ T9019] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 835.827003][ T4291] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 835.829674][ T9019] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 835.839144][ T4291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.863094][ T4291] usb 9-1: config 0 descriptor?? [ 835.900769][ T4335] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.924512][ T9019] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 835.954936][ T5563] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 836.000827][ T4335] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.166449][ T5563] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.185621][ T5563] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.196812][ T5563] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 836.209615][ T5563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.222889][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.286523][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 836.293960][ T4291] usbhid 9-1:0.0: can't add hid device: -71 [ 836.302979][ T4291] usbhid: probe of 9-1:0.0 failed with error -71 [ 836.305792][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 836.322574][ T9019] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.328825][ T4291] usb 9-1: USB disconnect, device number 2 [ 836.365043][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 836.376157][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 836.385974][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.393110][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.410220][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 836.440942][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 836.466227][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 836.475535][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.482674][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.494256][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 836.530712][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 836.550843][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 836.572844][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 836.582879][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 836.601098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 836.619089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 836.643423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 836.660875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 836.759926][ T9019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.783563][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 836.803989][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 836.813949][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 836.841117][ T5563] hid-led: probe of 0003:27B8:01ED.000C failed with error -71 [ 836.879420][ T5563] usb 4-1: USB disconnect, device number 50 [ 838.587463][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.8.898'. [ 838.609779][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.631266][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.762781][ T9019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.265471][ T4464] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 839.649098][ T4464] usb 4-1: Using ep0 maxpacket: 8 [ 839.671105][ T4464] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 839.683049][ T4464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.691325][ T4464] usb 4-1: Product: syz [ 839.695754][ T4464] usb 4-1: Manufacturer: syz [ 839.700387][ T4464] usb 4-1: SerialNumber: syz [ 839.730986][ T4464] usb 4-1: config 0 descriptor?? [ 841.995801][ T4464] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 842.280999][ T9189] loop0: detected capacity change from 0 to 128 [ 842.519141][ T9189] EXT4-fs (loop0): Test dummy encryption mode enabled [ 842.684383][ T9189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 842.798202][ T9189] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 844.136630][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.906'. [ 844.419386][ T4464] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 845.299113][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 845.469335][ T4291] usb 4-1: USB disconnect, device number 51 [ 846.149616][ T9227] syz.3.909[9227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.150111][ T9227] syz.3.909[9227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.174480][ T9227] loop3: detected capacity change from 0 to 512 [ 846.192893][ T9227] EXT4-fs: Ignoring removed i_version option [ 846.509667][ T9227] EXT4-fs (loop3): 1 truncate cleaned up [ 846.515592][ T9227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 847.815203][ T9237] syz.0.907[9237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 847.815312][ T9237] syz.0.907[9237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.229826][ T9230] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 848.295454][ T9237] loop0: detected capacity change from 0 to 512 [ 848.309219][ T9237] EXT4-fs: Ignoring removed i_version option [ 848.539851][ T9237] EXT4-fs (loop0): 1 truncate cleaned up [ 848.545749][ T9237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 849.363511][ T9222] netlink: 'syz.4.908': attribute type 39 has an invalid length. [ 849.383949][ T9227] netlink: 'syz.3.909': attribute type 4 has an invalid length. [ 849.394641][ T9237] netlink: 'syz.0.907': attribute type 4 has an invalid length. [ 849.554400][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 849.674044][ T4335] device hsr_slave_0 left promiscuous mode [ 849.710933][ T4335] device hsr_slave_1 left promiscuous mode [ 850.310274][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.329195][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.051241][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 851.089943][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.156881][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.176912][ T4335] device bridge_slave_1 left promiscuous mode [ 851.184921][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.507786][ T4335] device bridge_slave_0 left promiscuous mode [ 851.514082][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.409543][ T4335] device veth1_macvtap left promiscuous mode [ 852.419238][ T4335] device veth0_macvtap left promiscuous mode [ 852.429593][ T4335] device veth1_vlan left promiscuous mode [ 852.438859][ T4335] device veth0_vlan left promiscuous mode [ 852.458029][ T5339] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 853.455002][ T5339] usb 4-1: Using ep0 maxpacket: 8 [ 853.461906][ T5339] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 853.513818][ T5339] usb 4-1: config 0 has no interface number 0 [ 853.537978][ T5339] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 853.602950][ T5339] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 853.628847][ T5339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.647873][ T9261] loop8: detected capacity change from 0 to 128 [ 853.678661][ T5339] usb 4-1: config 0 descriptor?? [ 853.688694][ T9261] EXT4-fs (loop8): Test dummy encryption mode enabled [ 853.703335][ T5339] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 853.734047][ T9261] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 853.752096][ T9261] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 853.911346][ T4295] usb 4-1: USB disconnect, device number 52 [ 854.996581][ T8911] EXT4-fs (loop8): unmounting filesystem. [ 855.499638][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 856.095952][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 856.260268][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.308255][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.869868][ T4335] bond0 (unregistering): Released all slaves [ 857.097943][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 857.106889][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 857.248509][ T9282] syz.0.921[9282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.248615][ T9282] syz.0.921[9282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.269063][ T9282] loop0: detected capacity change from 0 to 512 [ 857.288208][ T9282] EXT4-fs: Ignoring removed i_version option [ 857.577242][ T9282] EXT4-fs (loop0): 1 truncate cleaned up [ 857.583366][ T9282] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 858.225728][ T9282] netlink: 'syz.0.921': attribute type 4 has an invalid length. [ 858.239720][ T9019] device veth0_vlan entered promiscuous mode [ 858.291387][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 858.310145][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 858.386749][ T9019] device veth1_vlan entered promiscuous mode [ 858.639437][ T9284] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 858.669794][ T9288] netlink: 'syz.8.922': attribute type 39 has an invalid length. [ 858.915237][ T9291] syz.4.923[9291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 858.915348][ T9291] syz.4.923[9291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 859.424664][ T9291] loop4: detected capacity change from 0 to 512 [ 859.443197][ T9291] EXT4-fs: Ignoring removed i_version option [ 859.677471][ T9291] EXT4-fs (loop4): 1 truncate cleaned up [ 859.683291][ T9291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 860.107872][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 860.383163][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 860.393791][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 860.402179][ T9291] netlink: 'syz.4.923': attribute type 4 has an invalid length. [ 860.450536][ T9019] device veth0_macvtap entered promiscuous mode [ 860.495678][ T9019] device veth1_macvtap entered promiscuous mode [ 860.524150][ T9019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.543981][ T9019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.563290][ T9019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.574568][ T9019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.591406][ T9019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.591428][ T9019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.591451][ T9019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.591465][ T9019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.593107][ T9019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.614393][ T9019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.614418][ T9019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.614430][ T9019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.614444][ T9019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.614455][ T9019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.614469][ T9019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.614483][ T9019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.614497][ T9019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.623262][ T9019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.626738][ T9019] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.626776][ T9019] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.626806][ T9019] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.626835][ T9019] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.998360][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.026191][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.078802][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.094549][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.185150][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 861.193933][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 861.235841][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 861.244267][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 861.274401][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 861.316491][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 861.365807][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 861.393797][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 861.425433][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 861.491495][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 861.544895][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 861.923328][ T9310] loop8: detected capacity change from 0 to 2048 [ 861.960672][ T9310] Alternate GPT is invalid, using primary GPT. [ 861.966977][ T9310] loop8: p1 p2 p3 [ 862.119166][ T14] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 862.324750][ T14] usb 10-1: Using ep0 maxpacket: 32 [ 862.336976][ T14] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 862.349480][ T14] usb 10-1: config 0 has no interface number 0 [ 862.364838][ T14] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 862.392789][ T14] usb 10-1: config 0 interface 1 has no altsetting 0 [ 862.404426][ T14] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 862.422391][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.431300][ T14] usb 10-1: Product: syz [ 862.442146][ T14] usb 10-1: Manufacturer: syz [ 862.447601][ T14] usb 10-1: SerialNumber: syz [ 862.460250][ T14] usb 10-1: config 0 descriptor?? [ 862.545041][ T4825] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 862.654702][ T4464] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 862.679182][ T14] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 862.693985][ T14] cx231xx 10-1:0.1: Failed to read PCB config [ 862.703248][ T14] cx231xx: probe of 10-1:0.1 failed with error -71 [ 862.718209][ T14] usb 10-1: USB disconnect, device number 2 [ 862.744884][ T4825] usb 9-1: Using ep0 maxpacket: 8 [ 862.752597][ T4825] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.767273][ T4825] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 862.777132][ T4825] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.788970][ T4825] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 862.806907][ T4825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.823809][ T4825] hub 9-1:1.0: bad descriptor, ignoring hub [ 862.832304][ T4825] hub: probe of 9-1:1.0 failed with error -5 [ 862.842609][ T4825] cdc_wdm 9-1:1.0: skipping garbage [ 862.844701][ T4464] usb 4-1: Using ep0 maxpacket: 32 [ 862.850772][ T4825] cdc_wdm 9-1:1.0: skipping garbage [ 862.862723][ T4825] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 862.865118][ T4464] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 862.914373][ T4464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.935747][ T4464] usb 4-1: config 0 descriptor?? [ 862.951570][ T4464] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 863.145129][ T4952] usb 9-1: USB disconnect, device number 3 [ 863.284874][ T14] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 863.484905][ T14] usb 10-1: Using ep0 maxpacket: 32 [ 863.495343][ T14] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 863.503477][ T14] usb 10-1: config 0 has no interface number 0 [ 863.510911][ T14] usb 10-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 863.529767][ T14] usb 10-1: config 0 interface 1 has no altsetting 0 [ 863.553486][ T14] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 863.571778][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.581451][ T14] usb 10-1: Product: syz [ 863.594843][ T14] usb 10-1: Manufacturer: syz [ 863.599635][ T14] usb 10-1: SerialNumber: syz [ 863.617094][ T14] usb 10-1: config 0 descriptor?? [ 863.832662][ T14] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 863.854442][ T14] cx231xx 10-1:0.1: Failed to read PCB config [ 863.861497][ T14] cx231xx: probe of 10-1:0.1 failed with error -71 [ 863.878822][ T14] usb 10-1: USB disconnect, device number 3 [ 864.684767][ T14] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 864.830004][ T4464] gspca_vc032x: reg_r err -32 [ 865.046978][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.141357][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 865.718824][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.807461][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.847865][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.853297][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 865.999783][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.100314][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.197567][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.202910][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.289004][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.336314][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.379934][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.626442][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.631796][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.642594][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.648494][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.653811][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.731786][ T9399] syz.4.934[9399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.731903][ T9399] syz.4.934[9399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.855558][ T4464] gspca_vc032x: I2c Bus Busy Wait 00 [ 867.039277][ T4464] gspca_vc032x: Unknown sensor... [ 867.100247][ T4464] vc032x: probe of 4-1:0.0 failed with error -22 [ 867.406164][ T4825] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 869.723303][ T4464] usb 4-1: USB disconnect, device number 53 [ 869.903746][ T4825] usb 10-1: device not accepting address 4, error -71 [ 869.965296][ T14] usb 9-1: device descriptor read/all, error -71 [ 869.988965][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.995367][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.356605][ T9414] loop8: detected capacity change from 0 to 2048 [ 870.487051][ T9414] Alternate GPT is invalid, using primary GPT. [ 870.493353][ T9414] loop8: p1 p2 p3 [ 871.326521][ T3623] Alternate GPT is invalid, using primary GPT. [ 871.332809][ T3623] loop8: p1 p2 p3 [ 871.715149][ T8152] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 872.696894][ T8152] udevd[8152]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 872.753591][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 872.770911][ T6235] udevd[6235]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 873.087218][ T9446] loop4: detected capacity change from 0 to 4096 [ 873.221966][ T27] INFO: task udevd:6279 blocked for more than 145 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 874.249812][ T27] Not tainted 6.1.135-syzkaller #0 [ 874.349424][ T9446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 875.010579][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 875.075921][ T8152] udevd[8152]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 875.099464][ T6235] udevd[6235]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 875.123524][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 875.154993][ T27] task:udevd state:D stack:23040 pid:6279 ppid:3623 flags:0x00004002 [ 875.164289][ T27] Call Trace: [ 875.324663][ T27] [ 875.327668][ T27] __schedule+0x10e9/0x40d0 [ 875.332277][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 875.404811][ T27] ? __mutex_trylock_common+0x80/0x250 [ 875.410337][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 875.443877][ T27] schedule+0xb9/0x180 [ 875.470504][ T27] schedule_preempt_disabled+0xf/0x20 [ 875.480239][ T27] __mutex_lock+0x555/0xaf0 [ 875.490729][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 875.495850][ T27] ? uevent_show+0x16c/0x320 [ 875.514771][ T27] ? mutex_lock_nested+0x10/0x10 [ 875.519802][ T27] uevent_show+0x16c/0x320 [ 875.524255][ T27] dev_attr_show+0x50/0xb0 [ 875.542741][ T27] sysfs_kf_seq_show+0x349/0x4b0 [ 875.556342][ T27] ? device_get_ownership+0xa0/0xa0 [ 875.561629][ T27] seq_read_iter+0x49b/0xd50 [ 875.571021][ T27] ? common_file_perm+0x171/0x1c0 [ 875.577777][ T27] vfs_read+0x434/0x920 [ 875.581993][ T27] ? kernel_read+0x1e0/0x1e0 [ 875.594866][ T27] ? __x64_sys_newfstatat+0x185/0x1e0 [ 875.600311][ T27] ? __fdget_pos+0x2b5/0x360 [ 875.611406][ T27] ksys_read+0x143/0x240 [ 875.619341][ T27] ? vfs_write+0x960/0x960 [ 875.623823][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 875.635739][ T27] do_syscall_64+0x4c/0xa0 [ 875.640219][ T27] ? clear_bhb_loop+0x45/0xa0 [ 875.650166][ T27] ? clear_bhb_loop+0x45/0xa0 [ 875.656324][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.662265][ T27] RIP: 0033:0x7f418f516b6a [ 875.671365][ T27] RSP: 002b:00007ffef981b008 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 875.681280][ T27] RAX: ffffffffffffffda RBX: 000055cfcedb0190 RCX: 00007f418f516b6a [ 875.694127][ T27] RDX: 0000000000001000 RSI: 000055cfceda7a60 RDI: 0000000000000008 [ 875.713392][ T27] RBP: 000055cfcedb0190 R08: 0000000000000008 R09: 0000000000000008 [ 875.722858][ T27] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 875.740068][ T27] R13: 0000000000003fff R14: 00007ffef981b4e8 R15: 000000000000000a [ 875.749738][ T27] [ 875.752905][ T27] [ 875.752905][ T27] Showing all locks held in the system: [ 875.767749][ T27] 1 lock held by rcu_tasks_kthre/12: [ 875.773081][ T27] #0: ffffffff8c92b370 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 875.795132][ T27] 1 lock held by rcu_tasks_trace/13: [ 875.800469][ T27] #0: ffffffff8c92bb90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 875.824049][ T27] 1 lock held by khungtaskd/27: [ 875.830441][ T27] #0: ffffffff8c92a9e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 875.849413][ T27] 5 locks held by kworker/0:3/2163: [ 875.857772][ T27] #0: ffff88801c242d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 875.872318][ T27] #1: ffffc90005bd7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 875.889482][ T27] #2: ffff888144b7e190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 875.898791][ T27] #3: ffff88801d2d3190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 875.915636][ T27] #4: ffff88801d2d0118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 875.933459][ T27] 1 lock held by dhcpcd/3917: [ 875.939717][ T27] #0: ffffffff8db33868 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x288/0x1af0 [ 875.958151][ T27] 2 locks held by getty/4005: [ 875.962875][ T27] #0: ffff888030702098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 875.978933][ T27] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 875.990649][ T27] 5 locks held by kworker/u4:15/4423: [ 876.000668][ T27] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 876.013866][ T27] #1: ffffc90004727d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 876.030162][ T27] #2: ffffffff8db26c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 876.043821][ T27] #3: ffffffff8db33868 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xc8/0x360 [ 876.061228][ T27] #4: ffffffff8c9306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 876.074386][ T27] 2 locks held by kworker/1:9/4464: [ 876.085949][ T27] 4 locks held by udevd/6279: [ 876.090671][ T27] #0: ffff88805d1381c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 876.103161][ T27] #1: ffff888028d88c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 876.119536][ T27] #2: ffff88807a67d490 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 876.130507][ T27] #3: ffff88801d2d3190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 876.147207][ T27] 1 lock held by syz-executor/9019: [ 876.152464][ T27] #0: ffffffff8c9306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 876.163763][ T27] 1 lock held by syz.8.945/9447: [ 876.169016][ T27] #0: ffffffff8db33868 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 876.178559][ T27] 2 locks held by syz.4.947/9446: [ 876.183617][ T27] #0: ffffffff8db26c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 [ 876.193133][ T27] #1: ffffffff8db33868 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x7d/0x210 [ 876.203290][ T27] [ 876.205686][ T27] ============================================= [ 876.205686][ T27] [ 876.214129][ T27] NMI backtrace for cpu 1 [ 876.218505][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.135-syzkaller #0 [ 876.226428][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 876.236511][ T27] Call Trace: [ 876.239797][ T27] [ 876.242731][ T27] dump_stack_lvl+0x168/0x22e [ 876.247432][ T27] ? show_regs_print_info+0x12/0x12 [ 876.252648][ T27] ? load_image+0x3b0/0x3b0 [ 876.257159][ T27] ? vprintk_emit+0x571/0x680 [ 876.261853][ T27] ? printk_sprint+0x460/0x460 [ 876.266635][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 876.271595][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 876.277766][ T27] ? _printk+0xcc/0x110 [ 876.281933][ T27] ? load_image+0x3b0/0x3b0 [ 876.286446][ T27] ? load_image+0x3b0/0x3b0 [ 876.290972][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 876.297061][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 876.303058][ T27] watchdog+0xeee/0xf30 [ 876.307232][ T27] ? watchdog+0x1ed/0xf30 [ 876.311579][ T27] kthread+0x29d/0x330 [ 876.315660][ T27] ? hungtask_pm_notify+0x40/0x40 [ 876.320701][ T27] ? kthread_blkcg+0xd0/0xd0 [ 876.325312][ T27] ret_from_fork+0x1f/0x30 [ 876.329755][ T27] [ 876.333475][ T27] Sending NMI from CPU 1 to CPUs 0: [ 876.337929][ T9447] device ip6erspan0 entered promiscuous mode [ 876.338920][ C0] NMI backtrace for cpu 0 [ 876.338930][ C0] CPU: 0 PID: 9447 Comm: syz.8.945 Not tainted 6.1.135-syzkaller #0 [ 876.338947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 876.338956][ C0] RIP: 0010:io_serial_in+0x73/0xb0 [ 876.338982][ C0] Code: e8 32 34 09 fd 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 43 a2 5a fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 44 89 f9 80 e1 07 38 c1 7c aa 4c [ 876.338996][ C0] RSP: 0018:ffffc90003ac68b8 EFLAGS: 00000002 [ 876.339010][ C0] RAX: 1ffffffff2da8b00 RBX: 00000000000003fd RCX: 0000000000000000 [ 876.339021][ C0] RDX: 00000000000003fd RSI: 0000000000007b1a RDI: 0000000000007b1b [ 876.339031][ C0] RBP: ffffc90003ac6ab0 R08: dffffc0000000000 R09: ffffed1004832047 [ 876.339044][ C0] R10: ffffed1004832047 R11: 1ffff11004832046 R12: dffffc0000000000 [ 876.339056][ C0] R13: 0000000000002706 R14: ffffffff96d45820 R15: 0000000000000000 [ 876.339067][ C0] FS: 00007f9a33a9c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 876.339081][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 876.339092][ C0] CR2: 00007fb12da58f98 CR3: 000000001ca63000 CR4: 00000000003506f0 [ 876.339107][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 876.339116][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 876.339126][ C0] Call Trace: [ 876.339131][ C0] [ 876.339138][ C0] serial8250_console_write+0xf26/0x17a0 [ 876.339160][ C0] ? msg_add_dict_text+0x3d0/0x3d0 [ 876.339192][ C0] ? serial8250_set_defaults+0x600/0x600 [ 876.339221][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 876.339241][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 876.339266][ C0] ? read_lock_is_recursive+0x10/0x10 [ 876.339287][ C0] ? __rwlock_init+0x140/0x140 [ 876.339312][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 876.339337][ C0] ? console_emit_next_record+0x82d/0xc90 [ 876.339362][ C0] console_emit_next_record+0x947/0xc90 [ 876.339389][ C0] ? verify_lock_unused+0x140/0x140 [ 876.339412][ C0] ? info_print_prefix+0x300/0x300 [ 876.339434][ C0] ? vprintk_store+0x9ef/0xc90 [ 876.339457][ C0] ? mark_lock+0x94/0x320 [ 876.339480][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 876.339511][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 876.339532][ C0] ? read_lock_is_recursive+0x10/0x10 [ 876.339555][ C0] console_unlock+0x223/0x630 [ 876.339578][ C0] ? vprintk_emit+0x305/0x680 [ 876.339601][ C0] vprintk_emit+0x489/0x680 [ 876.339621][ C0] ? vprintk_emit+0x305/0x680 [ 876.339643][ C0] ? printk_sprint+0x460/0x460 [ 876.339664][ C0] ? raw_notifier_call_chain+0x143/0x160 [ 876.339685][ C0] ? mark_lock+0x94/0x320 [ 876.339707][ C0] _printk+0xcc/0x110 [ 876.339726][ C0] ? load_image+0x3b0/0x3b0 [ 876.339742][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 876.339767][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 876.339792][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 876.339818][ C0] __dev_set_promiscuity+0x1d3/0x5b0 [ 876.339843][ C0] __dev_change_flags+0x40e/0x6a0 [ 876.339866][ C0] ? dev_get_flags+0x1c0/0x1c0 [ 876.339886][ C0] ? ip6erspan_newlink+0x5e6/0x7d0 [ 876.339912][ C0] rtnl_newlink+0x1932/0x1ff0 [ 876.339946][ C0] ? rtnl_setlink+0x450/0x450 [ 876.339968][ C0] ? __rwlock_init+0x140/0x140 [ 876.339993][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 876.340020][ C0] ? __mutex_lock+0x803/0xaf0 [ 876.340039][ C0] ? __mutex_lock+0x3a5/0xaf0 [ 876.340066][ C0] ? rtnl_setlink+0x450/0x450 [ 876.340088][ C0] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 876.340111][ C0] rtnetlink_rcv_msg+0x79b/0xed0 [ 876.340140][ C0] ? rtnetlink_bind+0x80/0x80 [ 876.340162][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 876.340186][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 876.340218][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 876.340242][ C0] ? _local_bh_enable+0xa0/0xa0 [ 876.340270][ C0] ? __dev_queue_xmit+0x26f/0x3760 [ 876.340286][ C0] ? __dev_queue_xmit+0x26f/0x3760 [ 876.340303][ C0] ? __dev_queue_xmit+0x15c9/0x3760 [ 876.340324][ C0] ? __dev_queue_xmit+0x26f/0x3760 [ 876.340343][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 876.340361][ C0] ? ref_tracker_free+0x630/0x7c0 [ 876.340388][ C0] ? refcount_inc+0x70/0x70 [ 876.340411][ C0] ? __copy_skb_header+0x417/0x5a0 [ 876.340437][ C0] ? __skb_clone+0x480/0x790 [ 876.340463][ C0] netlink_rcv_skb+0x1de/0x420 [ 876.340488][ C0] ? rtnetlink_bind+0x80/0x80 [ 876.340512][ C0] ? netlink_ack+0x1100/0x1100 [ 876.340539][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 876.340565][ C0] netlink_unicast+0x74c/0x8c0 [ 876.340592][ C0] netlink_sendmsg+0x89e/0xbc0 [ 876.340619][ C0] ? netlink_getsockopt+0x540/0x540 [ 876.340644][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 876.340662][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 876.340680][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 876.340706][ C0] ? netlink_getsockopt+0x540/0x540 [ 876.340729][ C0] ____sys_sendmsg+0x59b/0x970 [ 876.340758][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 876.340779][ C0] ? __import_iovec+0x315/0x500 [ 876.340800][ C0] ? import_iovec+0x6f/0xa0 [ 876.340817][ C0] ___sys_sendmsg+0x21c/0x290 [ 876.340842][ C0] ? __sys_sendmsg+0x270/0x270 [ 876.340885][ C0] ? __fdget+0x17c/0x200 [ 876.340911][ C0] __se_sys_sendmsg+0x19e/0x270 [ 876.340934][ C0] ? __se_sys_futex+0x14a/0x440 [ 876.340960][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 876.340991][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 876.341018][ C0] do_syscall_64+0x4c/0xa0 [ 876.341037][ C0] ? clear_bhb_loop+0x45/0xa0 [ 876.341052][ C0] ? clear_bhb_loop+0x45/0xa0 [ 876.341067][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.341092][ C0] RIP: 0033:0x7f9a32b8e969 [ 876.341106][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.341119][ C0] RSP: 002b:00007f9a33a9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.341135][ C0] RAX: ffffffffffffffda RBX: 00007f9a32db6160 RCX: 00007f9a32b8e969 [ 876.341147][ C0] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 876.341157][ C0] RBP: 00007f9a32c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 876.341166][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.341176][ C0] R13: 0000000000000000 R14: 00007f9a32db6160 R15: 00007ffeea5f0d98 [ 876.341193][ C0] [ 876.404666][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 876.404684][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.135-syzkaller #0 [ 876.404707][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 876.404720][ T27] Call Trace: [ 876.404728][ T27] [ 876.404736][ T27] dump_stack_lvl+0x168/0x22e [ 876.404773][ T27] ? memcpy+0x3c/0x60 [ 876.404796][ T27] ? show_regs_print_info+0x12/0x12 [ 876.404825][ T27] ? load_image+0x3b0/0x3b0 [ 876.404858][ T27] panic+0x2c9/0x710 [ 876.404890][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 876.404918][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 876.404951][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 876.404986][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 876.405018][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 876.405050][ T27] watchdog+0xf2d/0xf30 [ 876.405078][ T27] ? watchdog+0x1ed/0xf30 [ 876.405107][ T27] kthread+0x29d/0x330 [ 876.405136][ T27] ? hungtask_pm_notify+0x40/0x40 [ 876.405159][ T27] ? kthread_blkcg+0xd0/0xd0 [ 876.405195][ T27] ret_from_fork+0x1f/0x30 [ 876.405237][ T27] [ 876.407805][ T27] Kernel Offset: disabled [ 877.083147][ T27] Rebooting in 86400 seconds..